Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File:                     mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier:          6i6fP3nFLjZJ42CMkojTnBTjo2+lawnFAh/pC0fW6AY=
Subject key identifier:   72:5A:98:AD:72:6F:0E:1A:C9:73:72:B7:FB:C5:7A:B0:E6:22:4D:9F
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer:       /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number:          07A1
Signing time:             Wed 22 Jul 2026 22:07:01 +0000
Manifest this update:     Wed 22 Jul 2026 22:07:00 +0000
Manifest next update:     Wed 29 Jul 2026 22:07:00 +0000
Files and hashes:         1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: w8H4r/4AZ67OaLyRz7dYD3/3/xNrNJDzTDnOtUEiC/o=)
                          2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
                          3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
        Validity
            Not Before: Jul 22 22:07:00 2026 GMT
            Not After : Jul 29 22:07:00 2026 GMT
        Subject: CN=6a613f05-64c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:34:ed:35:f9:f9:81:e5:39:26:01:3b:b1:
                    30:26:0e:cf:bb:d3:f1:4e:a4:e0:c5:eb:43:c0:93:
                    4b:63:e8:58:1c:41:f2:4f:e4:4d:4d:e4:bd:94:ec:
                    16:0d:c6:9b:4e:62:da:24:66:9a:89:98:5f:8f:33:
                    dd:25:99:9e:a6:ec:70:e0:51:41:bd:f8:6d:0e:5d:
                    cf:fe:64:37:d9:db:55:1e:4d:49:d4:c6:a1:e3:e3:
                    05:a2:78:13:ce:31:2b:58:18:4d:09:29:d7:66:a5:
                    11:2f:c6:84:a6:93:22:ff:80:09:7d:22:95:58:40:
                    d5:10:11:fb:87:50:8f:5c:f1:86:d5:35:4f:a4:84:
                    c5:fb:7c:7b:88:be:ca:f3:52:13:e2:b6:0b:49:3e:
                    04:fd:73:d6:85:f8:9c:fb:a9:f7:eb:f1:78:62:0c:
                    77:a8:84:88:6c:d5:75:66:44:1f:57:ff:07:01:28:
                    1e:18:a1:5b:73:99:85:24:4d:f1:48:77:94:2b:fd:
                    81:c6:01:ca:18:d9:de:41:65:e2:d5:7a:fd:b5:9f:
                    a7:22:bc:0e:6b:42:4d:e5:21:07:51:c7:cf:b8:4b:
                    52:ea:77:d7:5c:ca:d5:ea:d3:6d:10:ff:c5:f8:ed:
                    d0:3c:65:d1:47:11:39:ea:29:e9:2e:d9:8b:24:c5:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5A:98:AD:72:6F:0E:1A:C9:73:72:B7:FB:C5:7A:B0:E6:22:4D:9F
            X509v3 Authority Key Identifier:
                keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:cc:f5:54:6e:63:44:92:74:7b:46:56:a4:b1:6e:62:5e:
         40:87:ee:ef:38:ff:ac:b4:1c:b5:98:5e:46:d5:6b:9f:45:8d:
         c3:1a:46:93:1e:79:41:24:88:48:df:47:35:bc:be:e7:10:ff:
         97:88:59:7b:b4:33:a8:9d:2c:92:32:7b:dd:8c:ce:97:0a:2f:
         4e:cb:3e:67:df:ea:66:64:e7:5f:e0:41:41:62:23:ea:4d:81:
         f0:33:aa:88:ac:06:20:27:de:f6:2c:84:02:99:b5:cb:73:ca:
         a1:f8:f5:41:bc:69:fc:ef:d3:18:f7:63:e3:27:d1:8b:69:98:
         ef:1c:19:68:89:64:24:7d:25:10:95:8d:99:bf:12:30:4d:8c:
         fd:9d:47:ce:bd:d6:82:75:ca:94:b2:5a:ef:bd:1c:0e:45:61:
         fa:84:5f:5c:43:34:2d:5a:52:5d:91:e1:d1:88:86:c4:a2:78:
         ec:87:cb:4a:42:f6:a3:9f:a0:b3:da:28:50:a5:dc:7c:67:cb:
         6f:4c:87:0e:77:07:39:f1:f2:4d:cd:18:c9:a2:b2:bc:ca:91:
         77:2a:df:e1:84:84:74:f1:43:9f:19:1f:7c:fa:27:1a:04:03:
         7c:81:db:3d:08:b3:9d:d7:aa:d3:f1:79:d0:c8:af:81:09:3a:
         da:c0:f0:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB
REQ3NkVBMDEwHhcNMjYwNzIyMjIwNzAwWhcNMjYwNzI5MjIwNzAwWjAYMRYwFAYD
VQQDEw02YTYxM2YwNS02NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArK007TX5+YHlOSYBO7EwJg7Pu9PxTqTgxetDwJNLY+hYHEHyT+RNTeS9lOwW
DcabTmLaJGaaiZhfjzPdJZmepuxw4FFBvfhtDl3P/mQ32dtVHk1J1Mah4+MFongT
zjErWBhNCSnXZqURL8aEppMi/4AJfSKVWEDVEBH7h1CPXPGG1TVPpITF+3x7iL7K
81IT4rYLST4E/XPWhfic+6n36/F4Ygx3qISIbNV1ZkQfV/8HASgeGKFbc5mFJE3x
SHeUK/2BxgHKGNneQWXi1Xr9tZ+nIrwOa0JN5SEHUcfPuEtS6nfXXMrV6tNtEP/F
+O3QPGXRRxE56inpLtmLJMXrtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJamK1y
bw4ayXNyt/vFerDmIk2fMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC
RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2
Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10
VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAabfM9VRuY0SSdHtGVqSxbmJeQIfu7zj/rLQctZheRtVrn0WNwxpGkx55QSSI
SN9HNby+5xD/l4hZe7QzqJ0skjJ73YzOlwovTss+Z9/qZmTnX+BBQWIj6k2B8DOq
iKwGICfe9iyEApm1y3PKofj1Qbxp/O/TGPdj4yfRi2mY7xwZaIlkJH0lEJWNmb8S
ME2M/Z1Hzr3WgnXKlLJa770cDkVh+oRfXEM0LVpSXZHh0YiGxKJ47IfLSkL2o5+g
s9ooUKXcfGfLb0yHDncHOfHyTc0YyaKyvMqRdyrf4YSEdPFDnxkffPonGgQDfIHb
PQizndeq0/F50MivgQk62sDwCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:38 2026 by rpki-client