Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File:                     g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier:          XvI8V2PNhWR4r1fQ3Bg0xAfYEbZYYe59DNyZ6f6cN5w=
Subject key identifier:   5E:DB:AC:10:F8:15:6D:76:B3:C1:8C:8B:80:DC:91:DA:43:A0:3B:FE
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer:       /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number:          08BB
Signing time:             Wed 22 Jul 2026 21:01:03 +0000
Manifest this update:     Wed 22 Jul 2026 21:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:02 +0000
Files and hashes:         1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: /ZsbwSckMF8js8oG8OABvyNInzagz3W/DhvPgSpajYM=)
                          2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=)
                          3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
                          rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
        Validity
            Not Before: Jul 22 21:01:02 2026 GMT
            Not After : Jul 29 21:01:02 2026 GMT
        Subject: CN=6a612f8f-d42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:ee:f9:8f:07:6f:1b:ca:e9:f3:2e:aa:9a:
                    2e:3b:fe:0f:db:24:97:28:82:54:e6:25:d7:ad:36:
                    b2:16:c2:1b:7d:ef:d6:75:f8:a4:67:e3:7d:46:8f:
                    2e:07:f1:0a:a0:2d:bb:02:c3:ba:17:3c:d0:10:c3:
                    39:6b:15:c3:12:de:07:6e:f7:f1:89:53:82:63:26:
                    25:81:a8:b7:89:17:77:89:5d:12:4a:41:8e:3b:95:
                    19:fb:17:08:ff:a9:4f:ff:3f:f1:29:27:00:2c:76:
                    16:14:e3:5f:99:b5:83:3d:f2:25:72:fb:f7:ca:7f:
                    50:5e:d3:23:16:12:b9:16:73:ea:5a:3d:f5:09:e7:
                    55:02:9c:d7:34:96:5a:7b:37:62:8f:f6:3a:d6:b7:
                    76:45:2d:a1:de:21:8e:21:be:4b:4d:ac:ac:31:ee:
                    be:16:8f:d1:af:47:ef:79:e3:0b:63:34:6e:58:b5:
                    19:93:1b:63:fe:04:94:1c:9f:b4:79:99:64:56:b1:
                    77:c8:20:fb:03:13:73:af:7b:fd:bf:31:82:fb:cf:
                    ee:cf:d8:3b:71:53:06:d9:45:40:ea:54:07:dc:53:
                    ac:66:de:7c:c0:de:fe:7f:18:90:cc:0a:80:ba:b6:
                    a3:1d:55:53:1d:1e:df:6f:56:8a:93:42:25:59:5e:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DB:AC:10:F8:15:6D:76:B3:C1:8C:8B:80:DC:91:DA:43:A0:3B:FE
            X509v3 Authority Key Identifier:
                keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:f2:4a:9d:9c:fa:6a:0e:bc:c8:19:df:be:ad:8a:a7:95:
         94:9b:28:e2:a5:b4:fa:e3:71:57:af:81:70:a9:53:72:44:5b:
         70:b0:eb:28:a0:cb:76:d6:d4:b4:d0:9c:ba:8e:3d:87:63:0f:
         9e:f3:ef:cc:86:3f:33:6a:62:35:25:78:ca:23:72:b7:7d:c1:
         31:a1:64:51:85:bb:03:68:d6:85:4c:06:e4:c9:1d:44:41:de:
         c2:27:0f:46:4a:5a:23:27:5f:9a:24:90:4d:08:ff:45:0a:b7:
         12:2d:41:3e:53:cb:04:bf:fc:ae:6d:3d:06:91:f6:32:1f:00:
         cd:d7:79:64:64:9d:5a:76:af:ad:20:0b:a8:3a:d5:34:56:8a:
         7f:99:ac:02:74:ee:21:c5:04:90:49:84:28:36:8c:d3:f4:ac:
         e9:44:96:02:55:a5:c8:7f:a8:02:e2:da:68:e9:8c:63:5b:ba:
         70:b7:30:45:9d:c9:e6:d4:f8:1f:4c:8b:c4:c5:5a:60:a5:a8:
         fb:13:83:7c:e6:99:48:65:22:4c:e0:f2:a1:6d:35:9a:8b:f6:
         cf:b2:69:f2:0a:82:ec:eb:d2:52:e3:a7:a1:02:8b:ab:fd:1d:
         b2:24:6d:3c:27:22:f2:4d:96:8c:d6:5e:45:64:94:15:0b:2c:
         3a:69:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:12 2026 by rpki-client