Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          s8/CSB9NxfZIVaX7l24u65YkTYx64aVIzPJb5iYhxek=
Subject key identifier:   BF:19:E5:5E:C1:1E:D4:16:A1:7F:91:F0:63:F9:87:BD:EB:57:69:C8
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       0954
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          0934
Signing time:             Wed 22 Jul 2026 20:42:44 +0000
Manifest this update:     Wed 22 Jul 2026 20:42:43 +0000
Manifest next update:     Wed 29 Jul 2026 20:42:43 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: pThmfVBeC3Q66pf3HZihwqPfDlUTooUueIOYjj2AvVY=)
                          2: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: OKp4FrMM/70sWLoITS6ZEZdodRxEqyoRybrxPzxTh/c=)
                          3: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
                          4: ABDC2CE87EAF11F1B80EBCC267A30FBC.roa (hash: ukUJEgX9lQ5VeOWBPATywGFlg6QgIS8tcmX0+Cesd+M=)
                          5: AB4610AA7EAF11F1B80EBCC267A30FBC.roa (hash: X3ZUS5c7YNv6h1DWtLHYPdbyqcCD2SWsBkXcjr1SmB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jul 22 20:42:43 2026 GMT
            Not After : Jul 29 20:42:43 2026 GMT
        Subject: CN=6a612b44-85cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:34:85:4b:e7:49:c5:b2:37:93:62:63:96:
                    26:f6:11:2d:2c:9e:83:54:25:f3:f5:64:b8:0b:1b:
                    91:77:50:6a:01:53:18:11:e1:d2:30:bc:31:ee:e5:
                    ae:44:5c:14:db:d5:a6:1e:3d:7f:4a:94:03:2a:75:
                    15:20:36:e2:da:7c:6b:e3:a4:04:b5:d3:26:6c:16:
                    46:9d:ca:bb:d5:19:cd:c3:59:ed:20:6a:dc:e5:6a:
                    17:d5:f1:aa:cd:4e:03:da:9d:6b:fb:10:9e:5a:28:
                    fa:f1:40:43:b3:10:c4:79:fc:20:72:f5:24:23:d7:
                    af:63:8f:88:74:be:b2:1d:4b:a4:3d:1c:69:94:a8:
                    c5:eb:c9:ef:31:c9:22:fd:ff:8b:87:a6:0c:e2:55:
                    fc:40:79:37:e8:68:28:8a:12:ed:64:dc:05:0e:72:
                    d7:87:16:8f:33:7f:78:64:c2:07:c1:63:38:0b:04:
                    8b:eb:ea:28:dc:2c:10:f8:ee:e2:f0:30:c5:37:d6:
                    dc:a7:47:3d:cb:e6:73:99:20:94:1b:10:41:e6:48:
                    d9:98:41:45:90:ba:13:55:d7:94:33:55:ac:9d:09:
                    fa:cf:34:c3:0a:d3:f0:15:aa:23:25:5d:ff:1a:cd:
                    cc:ee:52:bc:85:f0:e1:7d:6e:9d:74:ce:39:fc:5c:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:19:E5:5E:C1:1E:D4:16:A1:7F:91:F0:63:F9:87:BD:EB:57:69:C8
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:34:f6:43:da:dc:71:2e:9b:8c:1d:29:11:14:ec:32:94:
         62:4e:13:82:03:5a:d1:1b:56:01:4b:38:a6:62:c0:d1:cd:ac:
         1a:67:7a:56:ff:6b:c6:b7:9b:36:2b:b8:76:6c:9a:2a:8e:37:
         fb:96:67:ef:48:20:f2:19:e6:4e:77:2b:9f:bb:f1:b8:b2:f8:
         85:4d:1c:1a:2f:64:0c:cc:84:bb:38:2c:61:9c:9e:65:e8:fa:
         a1:00:75:92:0d:7e:cb:80:7e:34:d8:17:3f:8e:ae:c5:18:f5:
         09:ef:2e:ea:67:d3:29:f1:42:ec:2d:93:6b:b5:22:75:16:87:
         2d:ab:47:e5:d7:74:7a:d0:d2:d9:04:ec:aa:70:79:79:d5:36:
         4c:8f:2d:c2:05:4d:4d:90:b7:49:93:5a:27:99:88:88:fa:6c:
         10:14:72:88:e8:ad:9f:ef:42:81:8b:f4:5a:10:fc:49:5a:a2:
         46:ab:98:36:3a:56:fa:2f:9c:07:64:6b:81:0a:48:d4:6c:e0:
         b6:d5:b2:68:3d:a5:7c:ae:4c:bc:d0:2d:99:5a:fb:ca:2f:c6:
         ad:fa:60:a7:c1:18:3c:dc:0b:63:c6:a7:49:44:95:dc:20:99:
         bc:c8:da:a7:d8:12:8e:df:17:fe:ce:46:45:b1:ed:08:21:8b:
         a7:42:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:35 2026 by rpki-client