Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
File:                     vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json)
Hash identifier:          9tw2wxOMQ2nBSEgT+O2Tx7k31K+FowUyIC2QBE7u+OE=
Subject key identifier:   50:DC:0C:07:C7:94:55:86:20:E8:50:07:E3:55:80:52:0A:BA:A1:2E
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Certificate issuer:       /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial:       0902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
Manifest number:          08F4
Signing time:             Wed 22 Jul 2026 20:47:07 +0000
Manifest this update:     Wed 22 Jul 2026 20:47:06 +0000
Manifest next update:     Wed 29 Jul 2026 20:47:06 +0000
Files and hashes:         1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: cN/+y61r343B8RxgBYztEUV3BioaZQ1mVVG7bX2UTl8=)
                          2: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: Cl5Iksm78xy4pdyZHSdPHHDj46EQ0DV5IDZjQy+nR+s=)
                          3: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: JbCPb2/G06LWsiRDNl/iJAib0NI/NVkqoq8wvubR2Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
        Validity
            Not Before: Jul 22 20:47:06 2026 GMT
            Not After : Jul 29 20:47:06 2026 GMT
        Subject: CN=6a612c4b-1e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:91:99:e1:1d:85:c6:5d:e5:ee:2e:09:61:
                    6a:0d:c6:6b:d8:77:72:20:45:e9:b5:f1:27:3d:67:
                    ec:e8:cd:42:f4:a5:e0:ba:92:30:b4:82:70:51:50:
                    39:41:58:31:76:32:40:e8:b4:29:e1:ea:e3:e2:74:
                    d9:93:0c:01:56:8d:2d:3a:bf:01:ab:59:2d:c9:5d:
                    a8:5f:09:0d:66:8f:2e:f2:71:c6:62:be:19:ab:f6:
                    05:cd:60:6f:44:d2:01:b8:10:5f:7b:23:9a:6c:a0:
                    9a:29:e5:4e:62:66:6c:a5:6b:64:b5:0c:21:13:11:
                    7a:7f:2a:dc:70:37:14:54:61:6d:b1:f2:e7:44:7f:
                    0c:ad:4c:2f:b3:fe:e0:92:c0:85:5e:d5:2e:b3:de:
                    14:fc:05:62:01:81:2e:2a:b9:84:ff:0b:e0:61:e0:
                    72:1b:7f:1f:3c:4f:50:fb:3d:c2:d9:84:7c:45:bf:
                    1e:a3:dc:48:fd:3d:d7:3a:ff:4d:47:07:d3:14:ed:
                    a0:32:49:5d:4d:37:16:25:a7:fb:87:ea:67:79:dd:
                    9a:ab:cc:b6:29:4d:09:ba:bf:24:85:3b:4b:90:4b:
                    41:30:97:15:27:ea:f2:6d:18:63:74:2e:ec:79:fd:
                    b2:0a:fe:4d:90:24:6f:a0:78:ab:b7:ae:6b:d1:a4:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:0C:07:C7:94:55:86:20:E8:50:07:E3:55:80:52:0A:BA:A1:2E
            X509v3 Authority Key Identifier:
                keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9f:8e:6c:8a:0a:e2:35:a8:d4:59:c8:22:db:1e:25:0a:08:
         a8:31:ec:37:50:33:0f:0a:1b:65:d3:12:3a:9e:cd:10:cc:23:
         76:a0:83:70:ab:8f:cc:5b:e5:bf:4b:47:a8:fc:48:3d:6e:9a:
         c4:1c:30:0f:c0:64:2d:60:08:b1:4f:8f:bc:52:3e:37:f8:99:
         81:6f:f1:f4:42:aa:54:34:b4:be:d9:33:21:17:6f:0d:c8:a7:
         aa:36:54:cf:d8:af:22:86:55:88:d4:df:85:61:8f:80:1b:e8:
         f6:c4:41:65:e6:73:53:c5:e3:27:28:fd:12:2c:01:fb:b2:c0:
         37:31:33:f0:99:5f:d5:25:d6:63:0e:95:77:a9:98:b4:6b:5f:
         12:c6:ee:34:7d:57:e3:b0:9c:ad:5e:d1:6a:a2:3d:f6:40:4d:
         73:cc:02:bc:11:3f:18:fd:b8:f4:e0:69:53:b8:c5:c2:67:6d:
         f4:0d:aa:80:b9:9a:84:8c:ac:29:8e:94:ec:c4:20:46:9e:f0:
         cf:ed:f6:3b:8d:7c:4b:ba:b3:ca:b8:55:d5:45:42:54:79:df:
         32:4f:7b:83:62:22:e6:a4:04:a9:90:d1:06:d4:fa:9f:de:d6:
         b1:ea:10:49:7b:d6:f0:10:02:3e:6f:be:1a:ef:8a:8d:45:24:
         5a:ca:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:57:44 2026 by rpki-client