Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File:                     bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier:          xXTyuW08dWlWflmw+iLDbYQu56sUSNDILcvAydhnuvM=
Subject key identifier:   4E:53:EE:E8:92:1F:4B:12:53:F9:58:DD:57:FD:F8:85:49:C0:63:20
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer:       /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number:          014F
Signing time:             Thu 23 Jul 2026 06:48:23 +0000
Manifest this update:     Thu 23 Jul 2026 06:48:22 +0000
Manifest next update:     Thu 30 Jul 2026 06:48:22 +0000
Files and hashes:         1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: PhRhZ6nT5sb+A1ZLMMDrrm7G+JqeQV8l8Ca3Z8QWZa0=)
                          2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
        Validity
            Not Before: Jul 23 06:48:22 2026 GMT
            Not After : Jul 30 06:48:22 2026 GMT
        Subject: CN=6a61b937-552d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:7f:75:63:c7:0c:ac:6f:08:3d:44:94:2a:
                    cb:d9:c3:2f:74:cc:ed:21:d0:a9:ac:47:0e:c6:b7:
                    e5:42:a7:7e:9a:33:48:b8:83:05:17:a4:4f:2b:6c:
                    b4:14:cb:ed:eb:8f:a6:75:05:e2:1b:11:66:f5:b0:
                    93:dc:cd:39:4a:8e:dd:12:98:40:88:07:e9:5d:50:
                    0e:cd:ca:45:09:b4:6c:52:34:18:9f:62:8a:a2:0c:
                    dc:e2:c2:3c:a7:8f:f8:11:4b:66:6d:97:15:9e:b9:
                    f6:33:61:87:8e:ea:44:b0:ff:9e:e5:d4:66:f9:6c:
                    1c:91:95:f7:af:5d:f9:7b:2a:ef:d1:9f:59:e2:b8:
                    a5:09:b3:e0:c9:60:7b:f5:ff:c4:d3:23:bb:a7:34:
                    1b:d8:14:dd:e0:b6:2c:df:8b:e9:15:15:0f:df:0c:
                    7d:4f:5c:dd:bc:3e:8f:4f:82:db:b6:f2:01:c8:dc:
                    93:08:f4:e0:10:e1:b1:9d:20:bb:5a:d4:d6:31:b1:
                    9d:3e:84:51:ff:d8:ed:bc:a8:44:f6:59:89:a7:52:
                    dc:e9:3d:e6:b9:9d:88:c8:d6:cd:a1:14:8d:05:e9:
                    f7:e3:95:78:d8:cc:5a:39:eb:55:44:92:24:8d:f3:
                    42:65:4b:cf:2f:44:58:0c:fe:79:fc:f6:60:56:9d:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:53:EE:E8:92:1F:4B:12:53:F9:58:DD:57:FD:F8:85:49:C0:63:20
            X509v3 Authority Key Identifier:
                keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:40:5f:6d:34:ee:13:fd:19:10:fe:00:bf:0e:25:13:01:
         1b:cb:26:ef:55:ff:93:2e:9c:84:fa:44:bb:83:b8:57:6b:28:
         56:6b:28:2f:d6:87:cc:58:e1:11:dd:28:65:42:60:e9:a4:fc:
         72:1e:ec:8b:05:29:45:cc:cc:ce:14:fe:ff:3e:62:84:88:fb:
         2e:28:80:67:ab:12:d9:5f:a1:00:26:05:ba:41:c3:53:10:44:
         d5:0a:f6:b7:6d:b5:c0:1c:7b:a1:18:95:61:fe:76:c7:52:5a:
         82:74:8e:51:e4:66:f0:23:68:e6:87:58:42:0e:38:13:de:3f:
         8f:d5:ef:2f:4f:2c:90:54:d3:1a:e6:8b:b5:16:33:02:a8:58:
         8a:7a:2a:9c:8e:5c:0e:59:5a:bf:74:ae:b2:15:c4:d1:f8:6a:
         5b:6f:42:52:c0:1a:cd:38:b8:d1:45:0c:15:9f:ea:fe:15:c2:
         ad:b6:03:dd:65:95:59:cd:cd:c3:46:76:f5:c5:1c:5b:79:5a:
         86:2d:60:ae:99:40:e5:6c:70:48:cf:bb:8f:98:9f:d1:80:c0:
         19:b7:b7:3b:1e:3d:44:cf:eb:dd:68:35:1b:e0:a2:6a:0d:bd:
         6a:be:62:6c:ff:b8:80:94:09:41:08:1d:51:91:af:fb:3e:d7:
         4a:cd:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:28:08 2026 by rpki-client