Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
File:                     t45_48stS1oeuSimkLxled-IG-k.mft (raw, json)
Hash identifier:          BCFq6t+eOJj2V71rl80zc1rzEMM4Di+MNSBoiNwu6oY=
Subject key identifier:   8F:F7:BB:C2:E2:AE:EF:DC:10:67:58:28:69:76:20:F0:A0:41:4E:68
Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
Certificate issuer:       /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
Manifest number:          01A0
Signing time:             Thu 23 Jul 2026 05:42:03 +0000
Manifest this update:     Thu 23 Jul 2026 05:42:02 +0000
Manifest next update:     Thu 30 Jul 2026 05:42:02 +0000
Files and hashes:         1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: oUNm6AD54tqHRwyeC5jNJD4qOHXX41NSQZ4ZEeKeggw=)
                          2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: z7i+8JDtkwBXsJiBRuHLiPii7t2O94h0fmBQOSB0Z+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
        Validity
            Not Before: Jul 23 05:42:02 2026 GMT
            Not After : Jul 30 05:42:02 2026 GMT
        Subject: CN=6a61a9ab-249c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:37:5e:4b:88:91:5e:e1:9e:e3:f0:3a:f2:
                    50:32:f9:8c:60:36:e5:f9:71:c0:7b:db:cf:0d:72:
                    78:70:7e:33:79:44:33:d7:b6:9d:84:17:3c:81:d7:
                    f2:85:6a:0c:b8:98:f2:64:9a:d4:96:1c:38:60:3b:
                    9b:2f:3d:18:0c:e5:9b:59:5f:72:e1:c5:36:bc:5f:
                    9a:f4:75:f9:72:9e:61:f5:fa:9b:43:0e:0c:f4:65:
                    43:4e:02:65:00:79:7d:9a:a6:85:bc:f7:39:e7:9e:
                    b4:d1:23:4d:8b:af:ba:50:33:d9:22:8d:af:87:24:
                    b0:99:a5:57:64:75:7b:46:e0:83:62:d1:67:a5:de:
                    cf:4d:b0:89:3f:57:fc:8a:8b:42:d8:a1:1d:26:c9:
                    a9:9f:60:b0:a0:85:b9:c3:a6:5f:61:e3:df:ca:8d:
                    aa:04:6c:c3:7c:d8:69:80:0c:20:96:29:43:17:ed:
                    92:75:8e:6b:a8:06:22:94:d0:0c:88:b3:e9:10:94:
                    45:42:c4:f5:a1:e0:5d:1e:3f:44:c9:3b:17:ae:c2:
                    8d:06:3f:5e:6b:2a:7a:9a:78:b9:48:ef:ef:b9:ae:
                    4c:be:08:e3:5e:a1:60:ba:97:90:d8:52:91:00:e1:
                    95:be:eb:ce:36:b1:4f:81:98:57:02:bf:59:4f:96:
                    b8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F7:BB:C2:E2:AE:EF:DC:10:67:58:28:69:76:20:F0:A0:41:4E:68
            X509v3 Authority Key Identifier:
                keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:e9:6a:95:19:32:46:c5:c3:31:71:46:a8:3d:cf:85:fc:
         04:fb:5a:c7:a9:b3:52:f0:a4:92:7c:26:3f:03:6d:d5:69:38:
         17:be:cc:6f:84:c8:87:eb:9e:54:80:fc:dd:90:7a:df:0e:82:
         26:d2:99:ed:ce:17:93:2f:4c:30:24:f8:d5:c2:63:72:2e:2d:
         a1:40:3c:b0:b6:b1:a5:d0:f0:36:fe:a8:8a:67:5d:cc:8c:6d:
         b6:5e:98:9d:e4:4d:f2:e1:e1:21:f4:e3:6e:5c:56:15:53:a0:
         98:15:7d:39:59:50:37:49:c4:8d:d4:7e:ca:ff:d5:dd:05:ce:
         ac:b0:14:14:44:f1:3d:df:f8:e8:9e:4f:a7:51:84:b4:16:58:
         77:59:1e:2a:96:70:b6:86:9f:7a:29:fa:0c:22:bc:45:e5:2e:
         17:8b:28:2e:6a:e5:c3:99:9b:27:48:6b:2a:86:ff:81:61:1c:
         bd:73:9c:8a:45:7b:ee:a8:c3:dd:a8:f2:f2:e9:c4:74:0a:1b:
         67:8b:a9:0e:45:3d:02:80:72:f4:7f:81:89:d9:ce:2b:c8:03:
         46:e6:97:01:39:a4:74:42:50:42:d7:12:6a:2f:c4:06:79:46:
         d3:11:68:1b:ce:af:8c:d7:4d:c1:2a:8d:89:a2:07:37:f5:0d:
         fe:88:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:35 2026 by rpki-client