Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
File:                     Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft (raw, json)
Hash identifier:          mIEDqlTKxAEGsbUklulyXjG1OQ/KrFCsKCPc1sgr8bY=
Subject key identifier:   CF:6D:EB:E3:36:5B:F7:EC:B4:0E:00:D7:F1:01:F2:D1:C9:70:3B:0C
Authority key identifier: 32:FB:20:BE:5E:28:48:5B:BF:A8:33:E8:02:4B:86:E9:98:2D:DF:6E
Certificate issuer:       /CN=A91D4413/serialNumber=32FB20BE5E28485BBFA833E8024B86E9982DDF6E
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mvsgvl4oSFu_qDPoAkuG6Zgt324.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
Manifest number:          2D32
Signing time:             Wed 22 Jul 2026 15:59:02 +0000
Manifest this update:     Wed 22 Jul 2026 15:59:02 +0000
Manifest next update:     Wed 29 Jul 2026 15:59:02 +0000
Files and hashes:         1: Mvsgvl4oSFu_qDPoAkuG6Zgt324.crl (hash: TvGun6MzYlGHnoMrXdMR8JOxUUGA8mYWC3oWqLTM/hk=)
                          2: 97FA1AA841F811F1B8AFB543A8EE528E.roa (hash: c8vnrUnAU28XMTNHVv3+lvOZFEuSl74tN6k11xfDYvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.crl
                          rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mvsgvl4oSFu_qDPoAkuG6Zgt324.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4413, serialNumber=32FB20BE5E28485BBFA833E8024B86E9982DDF6E
        Validity
            Not Before: Jul 22 15:59:02 2026 GMT
            Not After : Jul 29 15:59:02 2026 GMT
        Subject: CN=6a60e8c6-c40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:26:97:eb:0a:65:0b:f8:3a:3d:cf:51:58:
                    4a:9b:61:e3:8c:c8:2e:19:e2:45:d4:50:59:94:e2:
                    1f:00:73:70:a9:dc:28:46:a1:d4:f1:3e:18:70:05:
                    db:b7:c9:6a:21:78:0e:53:c6:3c:f4:62:18:59:f2:
                    fb:00:30:02:b0:53:dd:cc:40:18:0e:51:73:3b:82:
                    02:e2:4d:0c:11:b6:c3:80:68:4f:14:7e:cb:26:d1:
                    07:47:fc:60:d9:36:73:60:bf:d2:42:d4:e5:3c:49:
                    60:de:bf:4b:29:03:79:4b:ee:30:4b:e6:65:71:ce:
                    f1:92:9e:88:c9:3b:18:1a:0d:e4:fa:ca:d8:ad:32:
                    65:e4:d6:9f:00:27:fd:2f:35:8c:84:8c:5d:11:df:
                    c9:18:ef:06:98:a1:47:1a:b2:10:fe:a7:a5:ea:c6:
                    c2:cd:68:71:33:e5:86:8a:3b:64:d8:49:52:b3:8f:
                    d7:37:c6:28:19:80:a7:e5:9b:4b:7c:74:c2:dd:c7:
                    9d:30:d9:b1:98:a2:d4:be:84:cc:44:d3:11:e9:8f:
                    5e:d8:86:2d:ff:cf:5b:69:2b:27:57:8b:aa:32:70:
                    48:f0:1b:e5:5a:a0:7e:88:a2:0b:f3:e3:27:15:6a:
                    93:98:5f:da:f1:93:d8:e8:9e:12:81:5a:19:23:bb:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:EB:E3:36:5B:F7:EC:B4:0E:00:D7:F1:01:F2:D1:C9:70:3B:0C
            X509v3 Authority Key Identifier:
                keyid:32:FB:20:BE:5E:28:48:5B:BF:A8:33:E8:02:4B:86:E9:98:2D:DF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mvsgvl4oSFu_qDPoAkuG6Zgt324.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2d:42:3d:00:eb:15:0c:24:89:20:04:3f:f7:85:dc:34:6c:
         ed:16:ea:eb:9e:c6:25:2e:86:77:c5:b0:31:6a:6c:86:1e:b7:
         c3:51:a1:26:f9:77:52:b6:e0:ad:16:88:77:5b:c5:16:4d:6d:
         c8:b4:e8:2f:77:fb:d7:93:da:87:04:dc:71:4a:08:27:11:23:
         ab:01:91:e4:26:c3:e8:dc:b6:84:2b:dc:af:79:6d:46:5b:08:
         97:b6:d5:8a:aa:b4:6a:be:8a:e5:3e:d5:5e:40:9e:fa:d0:86:
         af:81:8d:01:05:cd:bf:76:d8:e3:b1:a7:a6:fe:7a:de:81:f1:
         1f:61:2d:a1:7a:1e:a9:70:12:c1:ed:04:ef:c3:64:e3:bc:5f:
         ca:d0:f5:3a:8c:7e:92:ac:32:c2:ae:28:34:13:a6:01:65:23:
         e8:bc:4c:93:fd:72:83:e9:de:d2:13:cb:8b:2a:71:c2:d9:ef:
         e8:71:46:db:a7:a3:11:b5:52:a0:2c:4e:d5:da:64:64:e6:13:
         26:9c:34:6b:fd:d7:7d:b2:dd:62:1e:07:85:02:90:da:4e:05:
         66:82:92:66:39:d4:0e:19:b8:f0:65:73:2b:25:a0:9d:77:69:
         94:28:98:ac:1a:21:53:c0:aa:16:96:2f:65:8f:6b:4e:6b:36:
         31:ab:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:29 2026 by rpki-client