Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File:                     nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier:          q/M9mGNIDQ9vNB+gZcnEpFqrI4SRTFXjHnLOK4o4BtU=
Subject key identifier:   40:1C:AE:5B:48:BC:D5:1A:55:79:71:79:76:7F:FA:65:9D:02:72:C9
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer:       /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial:       0637
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number:          0621
Signing time:             Wed 22 Jul 2026 23:32:42 +0000
Manifest this update:     Wed 22 Jul 2026 23:32:41 +0000
Manifest next update:     Wed 29 Jul 2026 23:32:41 +0000
Files and hashes:         1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: B6YVBiJWJwQiuoNVRwUQ5QFxUCc2O6fkryyHYsxgU80=)
                          2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: hofwfPS1+TvM0/WkparMoyPsYmdvk20TYWiYyP/0qBw=)
                          3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: /QFvUN14R1O1KVpjrV19SJEs/S3B1Q2N0TzOckdFv0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
        Validity
            Not Before: Jul 22 23:32:41 2026 GMT
            Not After : Jul 29 23:32:41 2026 GMT
        Subject: CN=6a61531a-18fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:5c:70:cb:44:d7:fb:f3:56:10:d1:8d:77:
                    74:8f:8c:c7:01:32:c2:4b:9e:d9:13:cc:ee:9c:40:
                    41:09:ed:55:df:96:d4:6d:9f:5f:1e:7d:9f:01:90:
                    87:eb:5f:47:75:02:c0:fc:df:d4:a2:d3:19:02:ed:
                    54:d4:09:77:c6:f0:fc:ca:59:fb:e4:c8:7e:5c:57:
                    8f:3f:4d:4d:f7:00:43:81:12:08:d9:26:18:9d:5f:
                    9c:e3:9f:15:ed:72:49:7c:8c:7a:86:11:90:d4:83:
                    4d:bd:ac:92:de:db:5e:b6:36:ce:88:c6:07:54:a2:
                    ec:72:e8:14:e0:c6:5d:05:f0:ab:72:7a:23:55:10:
                    31:c7:dd:ba:42:2f:04:b9:09:86:3a:29:9d:e5:02:
                    6d:d0:8c:a5:d5:79:d6:03:21:8b:d6:50:ab:fe:f4:
                    48:2d:6f:62:bd:3d:b2:fc:d7:13:89:94:b9:57:e3:
                    b0:75:c7:aa:2b:9d:66:de:d5:f5:94:82:c7:73:b4:
                    83:13:65:e9:bb:c1:74:00:eb:e7:9b:7d:7c:e2:36:
                    2f:78:2c:78:3b:3e:90:d3:8c:27:3e:53:de:c0:fa:
                    f1:76:d2:8f:ff:49:8d:ea:13:a3:99:32:45:c3:b3:
                    58:96:a6:f7:47:9c:b1:6a:80:5c:f4:0c:31:e2:f5:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:AE:5B:48:BC:D5:1A:55:79:71:79:76:7F:FA:65:9D:02:72:C9
            X509v3 Authority Key Identifier:
                keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:4b:92:07:d4:79:ec:c2:f3:03:db:86:45:63:9e:b9:69:
         28:7a:8a:bf:bc:f5:58:8c:32:5e:bd:52:ee:41:cc:3d:7e:22:
         38:f7:33:bf:ca:83:98:4e:4a:07:7e:3f:61:ae:e2:c6:34:e5:
         a2:e2:b3:4d:8b:b3:46:87:6d:3e:c0:bc:05:44:db:ab:f3:39:
         ce:8a:d4:51:b3:62:8e:7e:8b:b4:0e:5a:1f:e6:c4:3e:82:bf:
         ad:6d:ce:a4:69:ef:37:22:b5:7c:a9:12:1c:fe:e5:6d:43:79:
         cc:6b:e0:da:43:31:be:36:83:eb:bb:62:27:24:c9:62:36:96:
         92:8b:99:ab:ed:7e:a0:74:f7:67:4d:56:0a:52:d1:1b:1a:9b:
         8e:04:e2:14:44:44:4d:56:a0:91:dd:ae:e9:8a:f1:37:d4:44:
         2f:8b:a6:b0:72:90:82:80:81:50:96:e3:e5:9a:00:5f:a4:c4:
         d4:ed:f3:3f:f1:8b:04:c8:a9:cf:9e:56:ea:c2:be:bb:5a:70:
         0e:4d:10:5b:f2:4f:18:c2:06:04:3c:d5:03:b9:2b:04:88:cf:
         c4:70:1d:e7:a0:8b:d4:d6:7a:c3:91:30:1c:2f:af:06:5a:3d:
         d0:8b:4c:c8:23:f9:76:66:84:33:15:0c:f6:7c:b8:b9:16:ec:
         1f:06:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:54 2026 by rpki-client