Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
File:                     Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft (raw, json)
Hash identifier:          SfZQAcPmLNlF2U7i0LQf6gDAS6raxqEtMPjLWYg+/jA=
Subject key identifier:   DA:CF:3A:A3:40:0B:88:D1:D7:17:6C:65:38:A9:1E:6B:2B:8C:6F:55
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Certificate issuer:       /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
Manifest number:          06
Signing time:             Thu 23 Jul 2026 11:19:10 +0000
Manifest this update:     Thu 23 Jul 2026 11:19:09 +0000
Manifest next update:     Thu 30 Jul 2026 11:19:09 +0000
Files and hashes:         1: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl (hash: O+5FoIJL9Z8+Nik5QgQMJZqLkIsqvoa0er0tS7Jn4A8=)
                          2: 03AD58B881BA11F1AFA7F5BA63A30FBC.roa (hash: LQgZVNJXiwnEUGUm2X1GTQRbnRviK3JSG+cSffSy6Fs=)
                          3: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (hash: 0VxHPVZ4YVNrrIIbimS1zczqvyzHEUrXRQ0L2H6QDOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
        Validity
            Not Before: Jul 23 11:19:09 2026 GMT
            Not After : Jul 30 11:19:09 2026 GMT
        Subject: CN=6a61f8ae-34f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:73:c2:69:03:c3:98:98:cc:78:04:35:bb:
                    a8:d2:c6:9c:1f:9e:63:b7:66:34:89:8e:e3:e9:da:
                    05:07:bc:54:8d:01:4e:cb:ab:49:f1:89:bd:26:93:
                    a1:e0:f2:75:00:af:c0:4a:b9:05:d2:f8:a8:87:2b:
                    0d:63:d6:b8:dd:c9:27:df:14:71:bc:46:fe:71:4d:
                    6f:49:ea:bf:1b:91:a2:38:0b:8c:62:d7:23:f2:98:
                    a7:31:01:33:19:d3:18:08:d3:98:33:2f:0e:6a:2d:
                    f8:3b:d3:c3:3b:21:e9:64:d5:b6:87:4c:94:ae:8c:
                    7c:0a:32:ee:08:82:83:d5:9a:58:05:d8:26:01:8a:
                    55:d7:94:7e:9f:78:9d:6d:fb:2a:58:34:32:08:4e:
                    70:91:b1:de:38:5a:bd:67:27:15:fc:60:39:27:41:
                    66:da:70:76:a8:be:86:1b:29:63:96:33:e1:2a:84:
                    4b:4a:34:8f:b4:e0:e9:ad:d5:02:0a:ff:4f:a6:a6:
                    f9:b3:2c:aa:96:d7:73:71:b6:01:40:ab:b8:ed:b8:
                    ac:57:c2:a7:55:68:c4:e9:09:71:f7:42:9a:de:10:
                    20:c6:71:07:2a:03:3d:89:0d:88:b2:fc:e0:e7:fa:
                    23:fc:d7:c6:09:07:01:cf:0e:ec:c2:49:fa:f1:98:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CF:3A:A3:40:0B:88:D1:D7:17:6C:65:38:A9:1E:6B:2B:8C:6F:55
            X509v3 Authority Key Identifier:
                keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:a4:35:24:ae:ab:b7:28:7d:a4:f1:33:53:b4:7b:04:2d:
         96:ed:6e:80:8d:b2:4e:97:e2:13:51:5e:d7:76:43:62:c8:4e:
         ab:4b:0d:5e:21:c2:27:e6:7b:44:8f:ce:c5:d8:cc:8d:58:d8:
         9b:6f:76:7d:02:d1:98:fa:c1:bf:29:da:70:57:90:2f:f6:68:
         2b:21:4f:4a:c6:89:51:a4:bb:32:64:c8:bc:df:69:ac:b2:82:
         05:92:ca:c2:44:bd:8c:8a:c5:4c:ce:a2:fc:ef:d7:99:d5:3d:
         7b:36:41:6f:be:86:4d:51:75:fd:37:51:46:11:be:cf:8f:9d:
         07:7d:69:6a:74:30:80:6b:05:d8:9c:a4:8d:22:cd:c0:dc:aa:
         cf:d5:a2:f7:d8:a1:e7:8c:7e:73:5c:df:04:31:a2:a7:34:15:
         6d:42:94:98:48:67:ea:5c:be:01:2a:de:cd:6b:72:c8:09:f5:
         a2:01:c9:f4:c2:e7:c7:0f:66:4e:ee:00:68:32:51:6f:4a:78:
         53:32:20:45:98:e1:91:85:e2:db:36:ce:f6:b1:1c:75:9b:8e:
         e6:db:b0:20:90:d4:35:a7:00:80:63:a3:b8:a6:19:81:b9:c0:
         98:4e:5d:4e:e8:1f:64:11:bb:f4:bd:aa:4b:cf:5c:f3:88:c3:
         b7:1e:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:01 2026 by rpki-client