Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File:                     -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier:          AQlM0ML7Q4zlmFZPPLLK8ELcJEmFZ50NRQlrViIz9LA=
Subject key identifier:   C8:1C:B5:42:4E:1D:62:95:07:66:C9:75:86:95:2D:41:A8:9E:99:06
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer:       /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number:          016B
Signing time:             Thu 23 Jul 2026 06:26:08 +0000
Manifest this update:     Thu 23 Jul 2026 06:26:07 +0000
Manifest next update:     Thu 30 Jul 2026 06:26:07 +0000
Files and hashes:         1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: +PnmFU5QlwmZt89uOVSW5IrUzsp0a6jCboYtUicY7rU=)
                          2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=)
                          3: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
        Validity
            Not Before: Jul 23 06:26:07 2026 GMT
            Not After : Jul 30 06:26:07 2026 GMT
        Subject: CN=6a61b400-a78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:42:b7:dd:d0:b2:2b:ff:a0:30:55:9e:ba:
                    fd:81:26:62:62:5e:7a:47:4a:c6:ab:b4:11:58:5b:
                    f4:59:be:03:4b:03:75:bb:db:84:dc:85:83:89:5e:
                    4b:86:02:b8:e0:d6:31:23:46:5f:24:41:dc:ed:ea:
                    a8:ab:09:90:b7:fc:53:be:c5:6f:a2:8c:7c:ff:62:
                    30:f8:d3:9e:72:58:ee:3e:9a:ab:60:84:70:06:ef:
                    45:cc:cd:1e:67:52:be:37:a8:45:62:cc:a8:f9:0e:
                    92:93:27:87:ea:a7:bc:98:d0:72:d0:8a:dc:3e:ac:
                    d8:f6:72:c3:e1:5e:6f:5b:b5:e0:8c:88:8a:d8:21:
                    c5:43:f8:a1:8e:36:30:85:ab:c6:40:a9:9e:24:68:
                    bc:d8:18:43:89:3e:2a:7e:ce:64:a8:22:8d:b5:18:
                    4a:6b:fc:d3:d2:ca:bf:df:26:51:7b:9d:e6:2c:a4:
                    ed:dd:3d:69:77:bf:6e:d5:b2:dd:3c:f8:46:bd:23:
                    ef:59:3a:22:66:83:91:8b:68:46:e3:63:a7:4d:95:
                    54:58:8c:f8:b8:22:b5:83:af:bc:ad:c6:ee:59:8d:
                    a4:0d:63:4d:4d:01:27:65:2e:ee:db:79:2e:8a:c7:
                    1a:69:2c:a7:5d:e7:ff:7f:a2:71:4a:b7:a7:7e:71:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1C:B5:42:4E:1D:62:95:07:66:C9:75:86:95:2D:41:A8:9E:99:06
            X509v3 Authority Key Identifier:
                keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:7e:48:81:96:42:27:63:44:26:5a:e6:03:4b:dd:6e:f1:
         82:38:45:93:6a:fd:58:96:ec:cb:05:92:98:dd:39:5c:3c:27:
         b4:8d:d6:da:ac:41:e1:83:64:c4:e4:6c:5c:9d:90:b4:a9:2f:
         ed:a7:84:80:ca:b3:4e:ba:dd:d7:50:0a:1e:14:02:1f:64:c6:
         aa:88:05:bb:ba:f1:55:cb:0f:65:e1:90:84:ef:c0:10:e0:6d:
         33:83:ba:27:03:52:34:f3:7d:f6:46:7c:41:dd:e3:5c:71:1d:
         30:20:f3:75:05:a6:59:ae:14:09:3e:d8:45:41:53:ba:73:4b:
         84:b1:9d:10:2b:fe:2a:b1:2c:41:6b:dc:03:6f:19:57:b7:6b:
         0d:51:e3:3a:b4:aa:22:76:46:70:69:97:10:52:af:a5:20:0a:
         97:cd:56:79:64:c3:12:6f:46:f4:37:3e:72:21:9f:d9:46:a7:
         62:7b:9d:fe:17:d8:2d:1a:3e:d3:f1:4c:fd:9b:a9:26:24:36:
         1d:6d:83:84:e2:77:1d:f7:f1:d3:26:3b:0c:62:40:5d:53:dc:
         7d:56:bc:ed:42:34:b3:c3:16:d1:61:43:ee:0a:b5:6c:b9:19:
         9f:23:78:65:88:b9:31:ed:8a:26:b4:d0:96:71:a4:38:f8:1b:
         09:0c:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:56:50 2026 by rpki-client