Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
File:                     FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json)
Hash identifier:          9iRpme7DRMVlvN0W1c3koJKKjCgg2Lgz1bopcNl6Tso=
Subject key identifier:   D2:A9:83:90:D8:32:6E:4C:48:AC:2C:BC:58:EB:E3:B0:BB:92:7E:17
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Certificate issuer:       /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
Manifest number:          0B16
Signing time:             Wed 22 Jul 2026 20:37:43 +0000
Manifest this update:     Wed 22 Jul 2026 20:37:42 +0000
Manifest next update:     Wed 29 Jul 2026 20:37:42 +0000
Files and hashes:         1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: h4+GcceRiBulOqaHJnmSLY6RP1C+g5hF4mB27WWMwPQ=)
                          2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004
        Validity
            Not Before: Jul 22 20:37:42 2026 GMT
            Not After : Jul 29 20:37:42 2026 GMT
        Subject: CN=6a612a17-5f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:42:c9:5a:10:e7:07:25:80:43:a2:69:21:
                    67:63:5a:28:f4:94:e5:7e:0a:2a:50:ba:c3:80:d2:
                    cb:4c:6c:7e:a9:ec:18:bb:6a:61:ff:eb:34:26:1a:
                    e2:27:8f:d7:e0:b5:52:23:e3:aa:c8:2a:76:99:3b:
                    d3:ba:94:ab:74:d1:47:27:01:4e:e0:1f:83:a9:eb:
                    a1:0d:0c:32:37:37:45:3a:46:34:54:1d:a6:ec:15:
                    bd:54:35:27:b2:c9:dd:c6:dd:42:03:0f:87:ea:4b:
                    62:4b:0c:a6:5d:26:96:19:2f:26:63:aa:e1:c2:2a:
                    94:3f:15:64:ed:07:8a:a4:d8:9f:c7:b9:58:5a:68:
                    b3:9f:6d:2b:82:79:69:d2:b8:85:ce:b1:a1:95:5c:
                    21:c4:d1:b1:70:54:fc:d9:24:89:7f:f9:1c:04:5a:
                    eb:ca:ee:be:5c:0e:5a:0a:2d:ac:f7:a8:14:12:8e:
                    06:c9:4a:c7:a2:fe:7c:f8:70:61:5e:87:21:c1:f6:
                    3a:51:14:a0:2d:60:d1:0b:30:d4:dd:17:5b:92:a8:
                    9a:3e:06:d3:9b:c5:bf:9d:04:08:1e:d6:8d:eb:97:
                    30:99:b1:a4:af:9f:2f:cc:d2:10:ef:0c:fc:04:a8:
                    f3:b8:3b:5c:80:2c:fa:07:d9:c2:eb:1e:dc:30:dd:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A9:83:90:D8:32:6E:4C:48:AC:2C:BC:58:EB:E3:B0:BB:92:7E:17
            X509v3 Authority Key Identifier:
                keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:90:01:d9:87:3d:4c:75:cb:e1:9b:6d:01:a0:0a:9d:79:a2:
         05:09:fa:5c:44:32:30:2f:6a:54:b3:99:f9:28:2c:b4:4e:b8:
         54:7c:7c:33:d9:47:39:85:0a:73:01:9d:a8:9b:35:36:8d:2a:
         f6:e7:01:61:fa:96:42:c2:ce:39:59:3d:f9:e7:b6:59:d8:b7:
         13:bb:df:03:75:89:5a:27:64:01:8d:b1:e4:88:52:71:97:c3:
         e9:63:d2:a8:ef:91:64:1e:61:b8:f8:ca:58:f7:db:87:ee:87:
         b5:a9:28:d5:88:2e:d5:5b:56:b2:c1:91:4a:31:b9:f1:d9:92:
         79:58:8b:f3:e4:07:f3:3e:bf:d7:8c:f9:66:ce:0b:dc:c9:e6:
         b6:6b:ea:ca:4a:38:bb:b1:f9:05:95:23:74:76:c3:8a:7c:d1:
         1d:27:2b:9a:2f:7a:30:08:3f:2c:94:e6:8d:da:5e:6d:05:74:
         14:e6:e1:d3:0a:71:91:9f:a6:ab:3d:3c:10:d6:92:4d:e0:29:
         4a:ac:d0:b2:1f:d7:5e:85:0d:02:35:bb:3b:ac:a8:44:46:14:
         09:db:89:0c:d3:f1:4b:ac:f2:77:35:46:94:c2:2c:f3:6f:1d:
         15:2a:cc:72:66:b2:c8:7e:eb:1d:82:30:92:66:df:13:a7:3a:
         7d:4e:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:25 2026 by rpki-client