Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
File:                     5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft (raw, json)
Hash identifier:          8e8TiNoMBtXJLZn0ABws8FZ6y7wrv83A825gCNwvEsc=
Subject key identifier:   14:D9:6C:79:53:82:0D:D9:D0:5C:A4:5D:C5:63:B5:27:7D:1E:95:7D
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Certificate issuer:       /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
Manifest number:          29
Signing time:             Thu 23 Jul 2026 10:51:31 +0000
Manifest this update:     Thu 23 Jul 2026 10:51:31 +0000
Manifest next update:     Thu 30 Jul 2026 10:51:31 +0000
Files and hashes:         1: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl (hash: vG0C0dK8z1Nq1pulj3eMsRvRwrDMv89ytWmZkg8HOmw=)
                          2: 36ACD53E49FE11F1B48580CBBD833773.roa (hash: 2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
                          rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
        Validity
            Not Before: Jul 23 10:51:31 2026 GMT
            Not After : Jul 30 10:51:31 2026 GMT
        Subject: CN=6a61f233-6b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:4b:0f:eb:0f:e3:f4:e1:02:9a:0f:4d:44:
                    89:0f:29:b0:61:85:e6:ef:50:46:19:f3:81:0d:20:
                    06:6e:76:0c:cf:e6:2a:bb:66:fb:6e:51:08:0c:fe:
                    1b:78:51:37:a9:0f:e9:66:f5:9f:86:eb:7a:8e:a5:
                    6b:f4:6c:24:ab:14:c9:30:b4:97:ce:a2:d4:50:76:
                    fd:c2:25:29:82:cb:d9:54:50:75:b1:37:cb:c3:45:
                    d0:52:59:f9:ee:73:78:b8:c6:54:42:39:e8:d1:14:
                    9d:9e:89:d9:b5:c9:18:65:89:15:9a:38:43:f8:36:
                    23:c6:14:94:15:2b:a2:c3:bc:07:b2:a9:f2:60:48:
                    41:6f:eb:3d:49:18:04:db:da:6a:50:78:51:04:38:
                    19:e9:63:48:4d:48:9d:89:3b:e1:9a:a4:4e:f3:ec:
                    21:f7:65:20:85:29:ab:35:5c:83:3c:41:18:e3:1a:
                    e9:3b:2f:8d:f7:24:74:80:41:58:6c:77:db:c8:ea:
                    5a:24:fa:cd:06:01:71:b3:13:7d:2c:85:61:0f:ef:
                    ce:b3:3b:5f:31:de:1f:d9:4c:f6:07:9f:c8:12:c2:
                    8f:35:e2:3b:e9:d7:af:0d:ba:b0:0c:91:14:2d:91:
                    96:0a:72:65:1e:26:8f:48:6c:15:e1:90:86:77:49:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:6C:79:53:82:0D:D9:D0:5C:A4:5D:C5:63:B5:27:7D:1E:95:7D
            X509v3 Authority Key Identifier:
                keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:20:0b:31:c5:95:6b:94:ec:aa:cc:d0:39:6d:4e:2c:9a:
         ea:2c:9f:8f:b7:71:17:7b:08:06:55:43:d6:6e:31:6f:6a:cb:
         b0:f8:a6:1b:17:6a:c3:80:38:81:b9:8c:a5:fe:14:3b:95:a2:
         26:b7:0a:c4:ca:b0:13:31:15:bd:7a:a8:4e:0d:f2:f8:5a:a8:
         37:cc:ca:e6:87:26:b7:d4:f3:24:27:3f:1e:6a:4d:38:15:79:
         d7:ff:4e:43:68:51:2d:a0:6b:32:d3:14:24:7a:be:49:1b:c8:
         bf:0a:05:98:58:13:5d:b3:78:1d:60:a3:bc:15:24:38:e9:65:
         d0:ea:01:06:00:6d:ed:bf:71:5c:f7:2f:8e:c0:42:a1:e4:90:
         19:f9:2f:10:82:53:a3:9c:82:b4:bc:4d:77:95:16:27:79:7d:
         54:f5:30:b9:8c:f3:90:1f:16:4d:62:e5:df:39:e7:dd:22:49:
         f2:64:21:6d:b1:37:04:b3:c8:05:ae:91:3e:95:21:eb:f3:c0:
         df:0c:95:88:6f:a1:31:b6:88:de:5b:9c:77:56:42:bd:d2:25:
         6c:31:2c:89:55:8f:eb:ca:a9:e4:03:78:ba:aa:d8:d1:e5:4d:
         c5:03:72:d1:c8:47:c6:d4:3d:fe:fd:17:be:c9:e5:c5:2b:41:
         22:8f:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:52 2026 by rpki-client