Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File:                     pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier:          9aZxX5ADdEf5fR8UWglDE9SEt6zFI8NpJ/5KHf+GoDU=
Subject key identifier:   6E:AE:5B:16:D3:3F:9C:9F:39:F5:6D:51:02:9A:29:E9:71:30:B7:6D
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer:       /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial:       0741
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number:          0739
Signing time:             Wed 22 Jul 2026 22:29:28 +0000
Manifest this update:     Wed 22 Jul 2026 22:29:27 +0000
Manifest next update:     Wed 29 Jul 2026 22:29:27 +0000
Files and hashes:         1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: da4mwiWhTpOY90kwkeQESp9/L2al1+WZTBFzUAjX9rk=)
                          2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: 9HJlbi50cF2Fxh6WrQDmZeGcmpmSEkLRIgCF7xNLfio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
                          rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
        Validity
            Not Before: Jul 22 22:29:27 2026 GMT
            Not After : Jul 29 22:29:27 2026 GMT
        Subject: CN=6a614448-48d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:e8:21:bd:ce:20:d7:7c:8f:d1:cd:40:d9:
                    13:1c:f7:9e:57:10:a9:d0:30:34:6a:ea:8c:c0:86:
                    66:1a:0b:bc:76:1f:68:dd:21:5c:47:42:46:5a:14:
                    ff:11:86:77:40:e5:a5:ff:dd:b0:4e:9f:5b:e9:4b:
                    c0:fd:f1:81:fa:92:31:20:29:53:ff:1b:13:6e:40:
                    e0:95:50:29:7f:36:17:ee:93:27:cd:13:97:d3:9e:
                    e4:b4:7f:4f:c6:a1:1d:83:60:81:1e:85:9d:ef:6f:
                    2b:61:08:ab:85:f2:1f:db:79:0c:01:33:10:9b:6e:
                    a4:48:32:24:7c:00:ad:a5:a3:46:7b:7a:ed:d4:8b:
                    4f:c3:4d:97:fb:49:20:2f:9c:22:96:2a:29:a3:d7:
                    ba:fd:63:25:4c:b3:f4:13:c0:58:25:06:4f:f6:ec:
                    f0:87:6d:cd:85:7c:40:c5:0e:31:cc:a4:b6:08:5e:
                    8c:dc:2e:38:e4:ad:ac:0c:49:35:61:b6:e8:81:60:
                    bf:d6:8f:bd:fd:34:d3:46:82:de:0f:90:a6:03:ba:
                    b6:3f:93:18:b3:9c:a2:50:e4:60:86:23:a2:1e:20:
                    71:80:bd:c3:8c:b9:a1:56:0c:e0:ed:45:0f:d2:c5:
                    60:10:a7:64:44:37:89:1b:7f:fc:a3:8a:45:67:6e:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:5B:16:D3:3F:9C:9F:39:F5:6D:51:02:9A:29:E9:71:30:B7:6D
            X509v3 Authority Key Identifier:
                keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:d7:b3:d1:85:5d:d4:47:99:7c:97:05:39:3b:b8:94:c2:
         c5:b0:9a:38:fd:a3:46:40:ce:29:d0:50:b5:3d:10:86:28:28:
         57:7e:fd:3d:f0:ef:01:21:5e:1b:83:b2:ab:9e:8d:9c:ae:1c:
         aa:08:6f:62:df:01:7f:74:51:5f:57:2d:b8:d6:43:eb:15:f6:
         1b:43:75:71:de:81:fd:2c:8a:fa:70:57:76:dc:75:7e:65:f6:
         ce:b7:99:4b:2f:4e:1b:17:40:65:11:79:ae:d9:07:e8:0a:66:
         c5:19:e4:3c:ac:50:77:b6:dd:87:e7:0c:47:15:be:95:e2:d7:
         21:42:b2:85:d6:55:0a:ea:19:9a:f7:32:20:17:9a:c7:a2:d9:
         dc:51:51:14:af:eb:70:54:13:7d:a8:dd:b9:54:ed:63:69:a0:
         05:91:95:d0:cb:0f:66:70:d4:7f:f7:b8:16:9d:3f:ee:8f:57:
         50:67:78:f4:09:8a:4c:6c:73:8d:1c:69:b6:27:66:b3:56:ca:
         f2:48:5d:92:fa:91:a0:68:ea:94:1b:e0:f9:eb:38:53:63:be:
         f8:25:2d:d6:64:e3:57:52:d6:ca:7d:38:80:2f:13:07:27:5d:
         03:3b:e9:42:8e:31:64:9c:86:6f:47:7a:99:f9:a5:90:63:d6:
         66:eb:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:07 2026 by rpki-client