Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
File:                     REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json)
Hash identifier:          WB67B9qYFzObaC7t9g97GXGDV2Tg/F32s0RubeYcl00=
Subject key identifier:   29:01:70:0D:FE:66:4B:62:2F:27:BB:6D:76:BA:BC:EE:30:D5:79:DE
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Certificate issuer:       /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial:       0D27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
Manifest number:          0D1D
Signing time:             Wed 22 Jul 2026 18:25:06 +0000
Manifest this update:     Wed 22 Jul 2026 18:25:05 +0000
Manifest next update:     Wed 29 Jul 2026 18:25:05 +0000
Files and hashes:         1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: FyEnInPh30wVe6cn5l6VW0sM6IwOjcy2sPuFFrHhuQM=)
                          2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
        Validity
            Not Before: Jul 22 18:25:05 2026 GMT
            Not After : Jul 29 18:25:05 2026 GMT
        Subject: CN=6a610b01-aed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:78:ae:cd:a3:07:ec:18:d2:3a:7a:70:dd:7e:
                    95:9c:84:82:61:54:79:3c:a1:65:6e:0c:08:50:29:
                    e4:ab:76:67:09:e4:bc:64:97:13:83:f9:6c:35:00:
                    86:84:40:ea:9c:8a:a5:01:0d:5e:1c:92:01:9f:dd:
                    d2:0c:e7:78:e9:1b:be:b6:ae:ac:98:95:ce:97:b9:
                    be:2a:14:2d:f2:98:40:93:19:8c:41:01:32:f3:10:
                    56:89:5c:bd:63:a2:1a:88:78:e2:e0:62:bc:7e:c9:
                    3f:41:23:7a:ef:d6:8f:55:3c:3d:b6:be:fb:60:96:
                    44:85:26:f9:d5:22:0a:08:ad:d7:61:24:ca:95:61:
                    ba:8b:5f:ac:c5:63:a4:f0:63:ff:3a:0a:c7:0d:d2:
                    d3:58:13:8d:f8:fc:14:87:cb:82:06:4c:c4:9d:79:
                    67:1b:05:7a:28:66:77:14:45:3d:98:7c:57:63:67:
                    e7:c2:ef:39:2e:b9:77:db:3f:6b:bf:0f:02:0a:2d:
                    e6:c5:fa:f1:0b:a5:df:31:5c:0e:8c:57:22:2d:b0:
                    2c:ef:30:4d:e1:e1:4e:c9:10:91:3b:9a:96:ce:3f:
                    86:6c:50:34:c5:a3:a4:ec:11:27:a6:28:29:d2:1a:
                    f8:b0:e4:80:98:24:0f:90:df:9e:c9:22:65:9c:02:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:01:70:0D:FE:66:4B:62:2F:27:BB:6D:76:BA:BC:EE:30:D5:79:DE
            X509v3 Authority Key Identifier:
                keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:94:56:59:ef:b4:87:1c:ef:89:5f:40:8c:27:55:f3:c2:2a:
         c4:1a:d6:5b:35:52:a7:af:43:ef:72:e0:9d:53:91:f2:4b:3b:
         42:14:2a:fc:b7:f3:ad:39:46:e9:04:22:d2:18:6c:2b:c5:5a:
         4b:3a:5a:9d:e8:63:f5:51:8e:c9:ca:8a:56:95:42:3f:fa:19:
         0c:33:60:70:12:a7:55:f9:28:a3:57:81:d5:87:d9:a6:16:89:
         dc:b4:05:62:33:34:3c:0c:50:fd:62:f4:8e:7f:73:a6:6a:76:
         ac:4b:bb:4f:8c:4c:e0:09:eb:a5:20:7c:13:3c:6b:54:74:0a:
         e0:13:25:47:7b:18:4e:2d:1f:1f:bf:0c:2b:de:aa:c8:38:e0:
         dc:6b:31:6d:6b:b4:93:52:35:3d:73:ad:87:3a:30:68:31:3f:
         d6:02:a4:df:b4:0b:34:01:31:e9:be:5d:9b:25:6d:75:04:0c:
         c1:af:49:40:21:77:40:f0:67:64:1f:a3:69:2b:24:ca:94:33:
         33:ab:4d:da:5e:c4:8f:b7:c5:84:a1:91:2b:f0:bc:2f:8a:26:
         60:db:78:52:48:2f:2d:3f:a1:51:42:3f:e7:82:45:e0:00:bd:
         a8:0a:3b:56:0f:00:66:d8:20:6e:1c:d0:6f:ac:ac:20:0f:78:
         f5:03:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:27 2026 by rpki-client