Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
File:                     SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json)
Hash identifier:          P5AX/O4MXn3STJqpAcG6VvfrxjJG/Kf7RJpt/SCuq8c=
Subject key identifier:   44:95:38:EE:AF:3F:3F:A6:26:78:8D:E0:32:71:EA:0C:2D:22:3C:9E
Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
Certificate issuer:       /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
Manifest number:          67
Signing time:             Thu 23 Jul 2026 10:00:02 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:01 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:01 +0000
Files and hashes:         1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: gwTZgSzp1ZfCjZqDuo/a/jUY2PivkpCxcPeOeRyE76A=)
                          2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
        Validity
            Not Before: Jul 23 10:00:01 2026 GMT
            Not After : Jul 30 10:00:01 2026 GMT
        Subject: CN=6a61e622-cd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:d5:da:c1:88:96:e2:0b:e0:7f:b1:31:e0:
                    de:9b:e6:06:63:db:e5:0d:a0:a6:76:9f:c2:58:ea:
                    d3:25:0b:b2:9a:45:ca:c1:08:13:b7:f3:f9:1b:41:
                    06:b4:96:d4:c1:7a:9a:39:be:31:9b:ba:79:47:d3:
                    10:78:ea:d0:0a:41:72:18:4a:96:89:86:30:7a:e5:
                    b0:ec:8a:b0:be:08:9c:aa:5c:81:20:6d:4b:cb:64:
                    d5:ae:89:a2:d5:b8:f7:8d:c5:9c:26:94:2f:7d:40:
                    b2:c0:79:99:f2:27:b5:dd:81:32:3e:3b:b3:f5:e2:
                    f9:17:41:ce:9a:57:ad:1c:42:82:eb:41:96:5f:5a:
                    95:00:60:e2:77:82:e5:4e:21:88:ed:a0:df:9d:54:
                    6c:30:f0:b8:15:56:ca:d1:65:55:94:a3:35:00:ef:
                    01:86:24:e9:8e:0c:cd:55:e2:39:ca:2e:55:5b:0e:
                    ba:04:ff:28:0f:42:38:6c:b6:11:1b:76:f8:1d:a6:
                    68:1d:21:23:a1:fa:91:2b:db:07:83:08:ac:ac:ce:
                    af:82:e4:97:01:17:da:f8:a2:19:5e:0c:88:33:a3:
                    df:b4:a3:5f:eb:03:10:68:74:45:3a:c3:8f:95:17:
                    e3:fb:1d:37:7a:a2:5f:94:62:a6:87:87:7a:9c:1e:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:38:EE:AF:3F:3F:A6:26:78:8D:E0:32:71:EA:0C:2D:22:3C:9E
            X509v3 Authority Key Identifier:
                keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:9c:05:0e:b0:45:4a:67:c2:72:f5:3b:ae:29:21:17:0a:
         d7:c2:e6:0b:f7:ba:54:2a:07:46:2c:f4:b8:78:2e:68:f2:28:
         c8:a2:8a:5c:1c:82:6e:a1:be:63:bd:c0:95:3b:ae:8f:e1:1d:
         cf:12:fa:32:2b:b5:dc:4a:69:51:c1:fd:f3:0a:18:e8:81:f0:
         94:41:c2:35:19:1f:26:ed:75:86:87:c5:f4:b9:c4:2a:68:a6:
         58:bd:41:aa:a8:ef:ce:8c:80:4c:78:5b:96:58:a1:7b:94:a2:
         b2:58:d5:47:6c:09:d1:de:9f:bf:52:d4:88:23:e3:e1:41:bc:
         7f:96:db:50:2b:49:ad:89:b6:a5:5f:7d:55:08:1f:d3:c9:2f:
         f2:90:55:a7:b5:5a:e3:12:f4:2b:30:d9:b2:ca:fc:69:17:95:
         d7:22:5f:72:8d:6a:4f:ba:e5:65:f5:9c:ee:6b:f1:b4:36:f0:
         76:cc:b0:42:ae:2e:88:ed:ac:ac:73:b6:c9:54:ec:d2:4a:e0:
         c6:a3:8c:25:ae:67:35:b2:6f:e5:be:4f:3c:a6:2e:04:4c:71:
         17:8b:33:c3:f0:da:68:44:be:b4:e4:30:c2:5b:ed:1f:b9:36:
         ec:cd:53:6a:ac:f7:aa:52:28:d8:4f:e4:09:a9:4a:25:75:84:
         55:48:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:21 2026 by rpki-client