Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          CG9O+L3ZRmCTZa70+l4ERIooBLfeDnGCYJBc5jh1tNA=
Subject key identifier:   1B:EF:D4:35:B0:70:61:93:0E:33:7B:AA:7C:F3:14:ED:2A:20:B4:C7
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       0648
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          05E7
Signing time:             Wed 22 Jul 2026 16:23:55 +0000
Manifest this update:     Wed 22 Jul 2026 16:23:54 +0000
Manifest next update:     Wed 29 Jul 2026 16:23:54 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: +4heEyHITX0FxbQlVWjzxE2kejVQ+zIYBT3ODJ8KC5U=)
                          2: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
                          3: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
                          4: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
                          5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
                          6: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1608 (0x648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Jul 22 16:23:54 2026 GMT
            Not After : Jul 29 16:23:54 2026 GMT
        Subject: CN=6a60ee9b-ef0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:06:8f:b3:11:63:f5:d9:ca:b8:f8:dd:89:
                    6f:cb:67:0f:db:df:69:96:90:ae:ad:d6:bc:8a:af:
                    57:13:d3:df:37:81:b8:87:be:fb:23:75:f9:1d:d4:
                    42:a5:d9:10:5c:3f:97:fd:ae:a7:38:5a:5f:7d:7a:
                    aa:90:82:22:b7:ec:cf:d6:3d:90:22:44:a3:7c:53:
                    66:35:41:13:c3:f8:a3:47:a0:59:03:0d:34:1a:fc:
                    1e:05:12:99:b2:a8:34:2b:b8:00:c1:f5:a8:2a:39:
                    5f:a5:66:5d:8f:0f:1f:c5:0b:39:bf:0a:c6:43:b7:
                    aa:39:48:26:82:f9:cd:96:47:4c:37:23:53:d1:45:
                    0c:ab:26:1e:5c:bc:34:26:a5:31:73:dc:9d:d9:48:
                    cb:17:d6:13:e7:18:9d:b3:21:96:8a:7e:96:6f:ab:
                    6d:5a:e8:f0:5b:5c:82:92:18:7e:f5:69:bb:c2:48:
                    61:ce:9a:0b:e7:ec:93:b8:fd:ca:36:8d:b5:59:ea:
                    a3:3c:93:3f:cd:44:ba:28:9b:06:c2:b5:fd:8c:69:
                    8d:b7:75:3e:18:42:50:34:b5:83:ad:c9:41:6a:ba:
                    af:4c:9e:4d:5c:02:fb:58:d9:17:f5:91:4a:3b:50:
                    43:08:ee:41:3c:22:87:8b:3a:53:94:9a:4c:1a:79:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:D4:35:B0:70:61:93:0E:33:7B:AA:7C:F3:14:ED:2A:20:B4:C7
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:8f:64:3d:fa:02:01:ec:d8:94:06:f4:21:a8:23:d5:25:
         ab:ce:c4:1d:ae:74:e6:81:36:69:e4:60:d3:2f:b0:e8:c4:6e:
         95:79:04:a9:85:54:12:17:6d:d2:3f:34:97:19:2e:6c:e2:f0:
         2c:8e:77:a5:16:4d:79:be:90:f6:ba:b9:ee:a2:0a:31:42:f8:
         5b:37:f9:78:ad:c9:87:c5:17:a9:ec:d9:47:56:1b:85:2a:8f:
         1a:f5:b3:0a:c0:ef:c7:95:31:7f:89:53:a7:ad:75:77:68:1b:
         8a:13:1d:eb:37:7e:4f:4f:6f:d3:9d:85:ae:e2:eb:1a:f1:f0:
         7f:5a:0f:10:72:f4:40:20:ec:92:ca:7f:8f:14:71:02:0c:a6:
         c1:19:85:58:4d:02:bf:b1:c1:88:67:95:df:c6:03:7f:e7:5d:
         52:d6:8c:97:e7:e1:10:77:78:48:3d:2e:01:28:bf:c1:d4:16:
         e2:b4:4f:a8:50:73:a2:ae:d4:23:a8:7d:ce:9f:ec:86:5a:04:
         89:35:71:1d:96:f8:07:4d:d7:7e:42:ff:8e:a6:21:47:02:40:
         d2:73:cc:43:7b:d8:a3:13:9e:5a:11:b2:fd:c2:f1:4f:1d:f1:
         a3:27:6c:af:bb:1d:72:c9:27:77:4c:5e:e1:de:f5:d9:9f:d6:
         fb:11:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:12 2026 by rpki-client