Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File:                     l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier:          p03JqWoKA7hndtgE9IOsyIGM68UQxjT98em+pH/UK+c=
Subject key identifier:   F6:25:03:02:40:6E:64:09:4B:61:8C:1E:7E:D7:34:62:57:FF:72:24
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer:       /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial:       0C28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number:          0C06
Signing time:             Wed 22 Jul 2026 19:10:44 +0000
Manifest this update:     Wed 22 Jul 2026 19:10:44 +0000
Manifest next update:     Wed 29 Jul 2026 19:10:44 +0000
Files and hashes:         1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: mQvTn2DOzzfU7j1/UkN4V5ZKVqerPu0kaK6NEc6x1UY=)
                          2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=)
                          3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
                          rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3112 (0xc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
        Validity
            Not Before: Jul 22 19:10:44 2026 GMT
            Not After : Jul 29 19:10:44 2026 GMT
        Subject: CN=6a6115b4-5b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:19:5c:84:68:3b:f8:e5:92:63:0c:23:b2:98:
                    6f:68:e5:6d:a2:c8:f9:92:30:f7:79:3c:42:ad:a0:
                    e2:42:36:37:6e:d0:f9:f3:31:da:e9:da:ee:6d:db:
                    05:80:34:5e:86:08:da:93:14:78:47:fa:22:96:cf:
                    e3:cc:87:3d:31:4a:13:92:c8:86:e6:22:ac:17:b0:
                    e1:d8:e1:ab:5c:ec:21:f0:29:d4:db:14:41:a7:c8:
                    46:98:35:ce:b3:b5:3b:76:28:d8:ed:b8:ac:6a:35:
                    f1:fd:e3:e4:f9:c0:58:46:72:c9:4d:51:ec:57:f2:
                    8a:33:29:56:5e:05:96:62:c3:f5:6e:76:61:47:ce:
                    a6:c7:51:e1:79:f8:2e:90:8c:32:66:87:42:67:15:
                    ad:5e:48:38:32:bb:7c:43:ea:ff:d8:cb:57:03:c8:
                    d8:5f:31:ba:9a:15:2e:30:1b:f5:f8:00:a7:db:6b:
                    9e:c1:d9:c5:d0:c0:b0:0e:67:34:20:eb:72:33:43:
                    03:fd:cc:b7:31:34:5a:d3:dc:0a:a4:f9:8d:b9:e0:
                    b9:5b:6b:0d:a5:d2:55:c9:b4:a7:af:c0:e7:c4:8b:
                    cf:39:67:25:ff:14:89:f2:c8:b7:9d:25:d6:66:65:
                    e7:09:b9:f4:a4:ed:1f:c9:26:04:42:00:75:9c:d1:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:03:02:40:6E:64:09:4B:61:8C:1E:7E:D7:34:62:57:FF:72:24
            X509v3 Authority Key Identifier:
                keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:ff:7a:19:f9:f4:b5:33:7b:4b:f3:89:ad:17:ad:c4:2e:
         ee:16:db:9b:fc:5d:ba:40:22:78:1d:92:07:a0:ea:0f:09:40:
         b1:1e:13:7e:5a:72:21:77:83:58:38:8b:05:37:cf:4e:47:6c:
         f3:22:2c:10:dd:b2:7e:36:40:ef:9d:78:0f:6e:2f:6a:ed:54:
         e9:0e:d0:08:65:38:ae:df:98:7a:77:c9:ff:f7:ea:dc:b1:b6:
         28:48:30:6a:e6:bd:cf:11:d8:0d:fe:c2:41:fd:dc:6c:f0:85:
         69:7a:d9:fe:80:db:1c:8a:38:37:ad:66:e7:58:0a:3d:9a:ce:
         9f:44:91:a4:a0:ed:ba:e5:a3:74:4e:59:69:c9:f9:13:1c:c7:
         67:6e:af:fc:7b:4a:a0:99:ce:4f:bb:10:74:c3:87:22:1e:96:
         35:57:ec:c8:66:7b:0c:87:a1:ef:88:c0:d7:a6:f4:65:b2:ee:
         60:90:2e:22:23:ee:dd:8a:5b:58:05:1d:7b:9c:cc:e3:60:e3:
         7a:05:5b:08:e4:47:5b:e8:b6:99:0b:28:31:a5:b8:3a:ee:d3:
         76:59:71:cf:4e:be:2d:e5:0c:37:70:b1:3d:bd:eb:28:be:6d:
         03:b6:1e:35:46:b7:fb:31:94:7d:1b:77:15:dd:e0:83:6d:1e:
         bd:72:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:34 2026 by rpki-client