Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File:                     dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier:          CgChj2H+23ubmDkGW47P/OELUMAvgvO2yrWWtqHVVos=
Subject key identifier:   74:1D:2E:B2:EA:EF:BF:12:54:1D:F5:62:4C:37:BC:28:87:3C:EF:42
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer:       /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial:       0D49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number:          0D0C
Signing time:             Wed 22 Jul 2026 18:43:41 +0000
Manifest this update:     Wed 22 Jul 2026 18:43:40 +0000
Manifest next update:     Wed 29 Jul 2026 18:43:40 +0000
Files and hashes:         1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: +DaPUgwdFPmbU2F8ebn5FGrepZJ+LbT8di17Xl8mOmw=)
                          2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: LowaWp7qm1ZrOD8Fkf5D763sZqEhXEDxVq8xLp3xfhs=)
                          3: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: hZp7olEbo87CPfwcpXGolxxsRwDGl7OYM854o3cjQGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
                          rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3401 (0xd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
        Validity
            Not Before: Jul 22 18:43:40 2026 GMT
            Not After : Jul 29 18:43:40 2026 GMT
        Subject: CN=6a610f5d-fb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:9a:d1:2a:56:29:d7:74:76:1d:9b:ae:be:
                    52:52:4a:a5:3d:1c:9f:7c:16:81:0c:5b:b2:36:99:
                    09:7c:c7:07:c7:ff:c4:f5:11:94:0e:c6:5a:7c:fd:
                    03:3e:f4:46:d0:e7:3f:d2:c1:80:81:b8:f7:0a:71:
                    50:0f:c1:29:7e:58:83:09:ab:b8:96:3f:55:3c:c6:
                    26:f0:b0:7e:d9:18:a0:ce:a4:33:77:82:96:6f:fd:
                    ed:42:67:4e:d7:89:8e:ac:f8:e6:22:9e:18:28:cc:
                    28:4b:be:bd:64:c4:09:ee:61:2f:c4:41:85:d0:35:
                    83:5c:41:de:4f:9f:48:d9:d2:ff:24:fc:8c:d6:74:
                    55:00:de:3a:bf:2c:d6:a4:9d:f0:03:0c:4e:be:4a:
                    47:bf:30:43:aa:1e:df:ea:d3:ae:92:50:89:61:f5:
                    aa:e4:d3:c6:96:3f:e7:c7:48:a3:46:8f:c8:1f:75:
                    4d:94:c4:21:3b:65:28:59:c2:fb:92:ec:f3:95:ed:
                    b7:b6:a1:67:6f:8c:ee:75:6b:cf:e8:bd:a2:59:fd:
                    8e:ee:ce:64:20:ba:5f:e3:e3:92:77:e2:7e:98:d7:
                    f4:25:8b:8b:de:fa:33:5d:a6:06:77:bf:68:aa:45:
                    48:84:18:ba:4c:be:91:86:dd:cb:c5:ad:46:6c:37:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:2E:B2:EA:EF:BF:12:54:1D:F5:62:4C:37:BC:28:87:3C:EF:42
            X509v3 Authority Key Identifier:
                keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:57:75:11:b0:9c:a9:dd:92:be:3b:ee:b0:49:66:23:66:98:
         54:7f:cb:45:36:c1:ba:5b:39:6f:c9:10:5d:2a:6a:50:ac:9f:
         49:fb:7d:1a:88:ea:2a:53:91:a8:70:3d:db:39:5b:2e:fc:9e:
         ba:2d:33:74:a8:2d:99:8f:aa:84:61:52:e5:82:5c:46:b6:85:
         2b:27:f2:7b:2d:0a:f0:9e:28:8b:4b:43:c6:74:48:b0:9d:b1:
         0c:f5:55:14:2b:d3:e7:30:cc:d7:91:89:dc:8b:1e:c4:54:6f:
         12:37:c7:cd:08:1c:e9:fb:35:7b:fc:2f:d2:c4:37:cd:99:d8:
         67:6e:e3:33:b9:0f:58:b7:a2:e4:90:e5:cd:b1:7d:8a:32:db:
         ea:6d:1e:d0:5f:7e:97:ae:1e:3f:45:0c:79:45:5b:e2:31:73:
         0e:f6:bb:75:ec:0d:4f:68:dd:eb:71:9a:71:c1:79:2b:fe:18:
         1c:06:ee:6d:a3:e9:0f:0b:6b:2e:ab:68:20:ad:b5:f3:28:63:
         eb:fe:e6:27:c6:62:c4:e0:4d:b1:7b:e7:d3:0f:48:60:07:54:
         2d:b0:9b:ac:1e:13:db:ed:ba:c7:b2:73:4b:03:22:be:2b:54:
         d4:90:d7:c6:7a:34:45:d2:0a:b1:4e:45:26:0d:7a:36:a6:f4:
         2d:ed:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:54 2026 by rpki-client