Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
File:                     3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json)
Hash identifier:          j+BTiBxst7U9Z5xNP5GWHHfuIbrhoqNXTUtbXAY9JXg=
Subject key identifier:   24:F0:DC:FE:CE:13:5E:35:D0:71:A3:26:ED:E1:8D:9F:A7:A9:16:6B
Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D
Certificate issuer:       /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
Manifest number:          0157
Signing time:             Thu 23 Jul 2026 06:38:47 +0000
Manifest this update:     Thu 23 Jul 2026 06:38:46 +0000
Manifest next update:     Thu 30 Jul 2026 06:38:46 +0000
Files and hashes:         1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: /Ucva9it4n53Rtj+Db1juP2vyKwmyY+7wLY4VmWdzfo=)
                          2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl
                          rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D
        Validity
            Not Before: Jul 23 06:38:46 2026 GMT
            Not After : Jul 30 06:38:46 2026 GMT
        Subject: CN=6a61b6f7-756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:26:cf:01:eb:ff:5a:ef:e5:da:8d:1d:96:
                    0d:72:15:5c:00:ba:c0:55:f6:f8:23:c3:2b:02:a7:
                    41:a2:17:00:fb:73:89:ed:3c:14:77:07:82:27:ab:
                    5b:37:41:af:ae:c8:7f:8a:8f:8e:5b:2c:60:7a:b0:
                    44:f0:1f:a5:86:99:84:21:8f:8b:51:f6:a9:4c:0a:
                    5c:29:76:cc:a1:ed:d8:be:6c:bc:bf:6b:fb:07:ff:
                    9b:fd:4a:e3:23:22:76:42:dc:1e:ce:b1:05:f2:b5:
                    6c:6a:9b:84:c0:5b:17:c1:13:7b:ac:01:6e:e2:ff:
                    73:21:b5:08:ac:b0:7f:d7:4f:1f:1f:fc:7c:81:28:
                    32:3c:d5:13:f3:35:a3:ab:55:df:83:35:51:a2:0d:
                    8f:61:84:e3:11:7f:ae:bf:f9:ae:97:8c:c6:b6:c1:
                    66:e2:61:c9:74:f8:af:2d:76:7e:db:8e:81:9d:b9:
                    c0:03:9f:74:fd:47:8d:6f:72:e7:41:cd:b3:e5:62:
                    e2:4a:76:6f:ae:6f:97:8f:c3:3f:a7:9d:03:44:d0:
                    ba:b4:12:97:96:ef:88:f1:8a:af:ac:63:bc:4f:e9:
                    96:b7:bc:63:df:52:16:37:33:db:30:ed:24:e9:19:
                    21:46:b7:68:c0:d6:c8:d5:de:d1:12:08:44:76:55:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:DC:FE:CE:13:5E:35:D0:71:A3:26:ED:E1:8D:9F:A7:A9:16:6B
            X509v3 Authority Key Identifier:
                keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:6a:b1:83:0f:26:84:22:aa:34:c5:33:f8:f3:5c:cd:46:
         f0:8c:21:03:98:89:c5:6e:03:f6:ee:95:59:d5:d8:96:dd:39:
         6d:07:4b:0c:13:ef:7a:d8:b1:8a:a3:a3:19:41:6d:70:07:22:
         10:f1:e4:83:21:92:23:15:26:38:d7:45:93:a5:6f:b1:91:96:
         be:48:a2:bc:a3:6f:c8:fe:ed:90:06:27:ec:ce:c8:3e:f8:4b:
         65:fe:02:27:fc:cc:8a:a2:57:da:dc:a9:0e:2e:cd:09:9b:45:
         d8:22:2e:e9:cb:1e:04:ec:fd:78:af:03:b5:29:be:1a:61:f1:
         38:22:8d:7e:8b:1d:9d:28:6e:c6:b6:dd:90:45:42:22:08:46:
         52:16:08:13:c3:fb:de:88:f1:6f:ef:b9:d6:43:58:cd:c4:fb:
         34:3a:07:2b:ee:de:f7:b9:65:ab:20:c0:1e:ab:18:de:17:1f:
         5a:26:60:34:b1:d9:52:e5:7f:db:e2:80:dc:2c:f7:f8:cd:79:
         47:da:fe:8a:80:ef:9b:07:6f:31:62:a9:47:1f:2a:41:c8:5e:
         bf:ec:16:b5:9a:b2:82:24:83:48:29:bc:af:46:b2:a9:bc:82:
         98:84:f3:d2:8d:8d:e2:6e:f2:bb:48:c0:3b:ea:a9:74:fa:6e:
         03:a9:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:11 2026 by rpki-client