Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
File:                     tDpaYNRoBqaf_vfGdiGexLqLo20.mft (raw, json)
Hash identifier:          VkGhGjkVTLZUBpCEe4gEdz8ddAwkU72M7LWQJEy8PZ8=
Subject key identifier:   28:6E:1D:9E:D3:14:33:B7:ED:BC:5F:2C:E5:AC:5C:11:BD:07:31:74
Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D
Certificate issuer:       /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D
Certificate serial:       2C6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
Manifest number:          2C47
Signing time:             Fri 24 Jul 2026 15:37:33 +0000
Manifest this update:     Fri 24 Jul 2026 15:37:33 +0000
Manifest next update:     Fri 31 Jul 2026 15:37:33 +0000
Files and hashes:         1: tDpaYNRoBqaf_vfGdiGexLqLo20.crl (hash: BvC0rs05zhLaNlmEveeDk3xhLsrJoov6SOT3wj8NzXU=)
                          2: 43487B18BF1811E9A2C00E63C4F9AE02.roa (hash: iD/ZZuFi7/RhaL5/ToA8PIzL2/6qCFz6N1JbxCrgnXQ=)
                          3: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (hash: HzrAoaY9JYPA2q5sXzU/LWx/s6FAhl2YIVATDmW8pSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl
                          rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11375 (0x2c6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D
        Validity
            Not Before: Jul 24 15:37:33 2026 GMT
            Not After : Jul 31 15:37:33 2026 GMT
        Subject: CN=6a6386bd-d61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:4e:2a:c0:fd:06:7d:dd:6e:d3:a1:f3:8b:
                    a9:76:aa:26:18:0d:3b:37:fb:90:f1:fd:71:36:60:
                    c5:7d:dd:ea:33:80:b0:23:02:19:27:2b:66:01:2f:
                    97:b2:34:1a:22:da:bf:86:53:f5:dd:20:bf:16:fb:
                    57:c1:d8:35:a9:91:f2:25:6a:32:34:9f:fa:9d:b4:
                    e9:1c:80:7a:2a:ac:84:da:24:13:d4:53:42:19:62:
                    ab:89:f1:bb:ea:f9:e6:d3:ce:ce:be:1a:5b:ff:d7:
                    1b:68:a3:1c:68:80:72:6f:c3:35:f6:99:af:6f:32:
                    f6:8a:80:ba:77:e0:01:e1:f5:e6:78:36:b3:08:e2:
                    9e:13:3f:1e:bb:6f:bd:39:de:35:69:08:04:b3:96:
                    71:ba:9a:02:a2:9e:04:d0:e5:2e:9a:72:2b:53:b4:
                    80:89:42:71:21:c1:0f:19:c4:e7:d7:a0:e5:84:16:
                    62:b2:89:7a:3c:58:87:8b:a5:2d:14:3e:8d:2d:1f:
                    b3:7a:b8:07:b8:41:0e:8d:41:c3:b9:26:ca:75:ab:
                    3b:5e:26:99:3b:f5:a1:a0:0a:01:08:66:3b:a6:6d:
                    29:95:e6:d6:cb:0e:fc:ab:f9:9d:bb:d7:b9:02:73:
                    40:71:ad:f9:3b:8b:d4:6d:05:e4:33:e6:38:43:15:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6E:1D:9E:D3:14:33:B7:ED:BC:5F:2C:E5:AC:5C:11:BD:07:31:74
            X509v3 Authority Key Identifier:
                keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:bf:99:bc:9a:cb:2c:6f:b1:e6:9d:d6:56:c0:49:7a:1b:
         93:3e:4f:9c:f0:51:51:f4:36:25:b8:78:40:a8:77:2c:f1:38:
         30:5b:97:3f:12:9a:72:0a:5d:9d:e9:92:77:97:70:3d:78:73:
         72:47:4c:fb:02:52:3b:0f:f9:b6:34:f8:b4:d0:11:ac:12:2a:
         59:b4:5e:33:cf:ff:e3:19:51:72:b2:9d:ba:25:1e:ad:d2:12:
         dd:6f:49:0f:7a:49:dd:d8:e4:55:32:db:f4:72:5d:f1:8c:4e:
         e1:dc:64:33:07:fb:44:0b:a4:20:5d:c0:90:99:92:0d:46:e6:
         8d:75:ef:f0:97:dd:75:06:e6:59:1c:e6:09:b6:12:2e:15:e9:
         8c:1e:89:06:e4:81:1d:23:d4:89:e2:6b:60:40:44:cc:c4:97:
         c1:6a:84:a8:4e:24:6a:62:90:33:bc:5d:56:10:c2:ee:79:59:
         af:1f:8c:f7:b0:fa:cf:89:0f:85:94:1f:14:d0:df:ea:68:b5:
         08:b4:e5:b7:4a:df:ce:a8:ae:15:7a:b1:9f:20:f4:c3:dd:24:
         51:55:7b:72:14:fd:17:0d:3b:7d:15:68:54:bd:5f:54:7d:23:
         80:b0:5f:3f:5e:6f:c0:13:4f:6a:af:32:72:14:b7:d3:30:32:
         49:ad:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:54 2026 by rpki-client