Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File:                     _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier:          13bt0GrfoRLi6xt8JKca/1u+InR+a61WI0FUb5u9M38=
Subject key identifier:   A7:80:CB:26:A8:4A:10:A8:39:63:B2:9B:B4:5B:ED:62:47:6F:D8:A9
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer:       /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number:          BB
Signing time:             Thu 23 Jul 2026 08:51:35 +0000
Manifest this update:     Thu 23 Jul 2026 08:51:34 +0000
Manifest next update:     Thu 30 Jul 2026 08:51:34 +0000
Files and hashes:         1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: LD3i4iJwsTGNJRumnvN5LTRciTbBC8dHydJ36PnSqQM=)
                          2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
        Validity
            Not Before: Jul 23 08:51:34 2026 GMT
            Not After : Jul 30 08:51:34 2026 GMT
        Subject: CN=6a61d617-3c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:b3:63:47:99:e4:c1:d0:f1:b6:74:a7:3d:
                    6f:ad:76:0a:cd:fb:cf:3b:01:d0:18:fe:5f:3e:a6:
                    f6:cc:0a:d2:d7:bb:58:6e:ee:d3:77:c9:de:e7:e8:
                    57:7a:95:50:56:71:37:63:1e:26:fb:77:0a:99:1f:
                    9a:bd:d8:55:46:ec:eb:75:38:14:dd:bb:6a:c8:bc:
                    08:f5:0a:81:4a:69:bc:68:f0:44:ea:6f:98:3c:cb:
                    5f:b9:17:5c:4e:68:7d:97:16:17:84:a2:7c:01:fd:
                    13:96:f3:b1:e9:52:b6:da:ab:c8:cc:85:24:05:2a:
                    d2:75:dc:ab:c4:1d:3c:91:24:c8:2c:47:5d:59:b3:
                    7e:27:3f:35:31:d6:56:ee:ab:9b:ec:7c:2d:2f:ab:
                    5e:55:63:8f:3e:36:9c:c7:f1:d6:b1:ce:90:05:0b:
                    5f:1f:c7:c6:36:20:22:aa:49:4e:e3:d7:da:1a:12:
                    03:88:55:83:7e:20:04:57:87:e0:70:96:66:06:db:
                    b6:10:ba:c3:d7:44:c6:36:80:25:25:f0:f2:1d:a8:
                    57:49:ef:53:6a:c4:63:42:7b:0e:2e:ae:97:45:81:
                    0c:ff:f2:8c:73:ae:98:a8:27:7c:92:1c:37:64:3c:
                    a1:de:ba:1b:35:44:1f:b0:92:da:57:eb:50:64:8e:
                    84:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:80:CB:26:A8:4A:10:A8:39:63:B2:9B:B4:5B:ED:62:47:6F:D8:A9
            X509v3 Authority Key Identifier:
                keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:74:b0:50:6a:7a:be:44:25:8a:58:62:74:a2:76:35:bf:
         cf:7d:0a:d3:a5:02:fc:d7:2b:13:c0:83:4a:b5:58:e1:48:84:
         ee:28:5d:a5:b4:77:67:c1:b9:f8:de:51:a8:7f:4f:0f:31:1d:
         1c:d5:99:24:18:80:a2:8e:b6:3d:e4:2d:5f:20:ca:dd:27:c2:
         51:7e:ab:e1:b2:1d:55:06:b9:5d:e4:36:d4:1d:e0:d8:f7:76:
         b9:48:ae:c8:b3:e7:aa:38:68:f8:2a:0f:3b:9d:2a:b4:25:e9:
         05:32:d5:c3:d6:51:a5:a4:db:b0:7c:de:99:02:d1:6b:59:f4:
         00:22:97:9e:d4:cb:9f:09:0e:fa:b5:8f:31:9d:5c:25:1d:91:
         34:30:bc:84:b3:f3:da:cd:51:08:ca:00:2d:34:7f:83:c5:95:
         da:5f:a2:89:f9:ac:39:79:02:68:2c:c6:3f:a7:6c:73:35:9e:
         ac:51:78:21:e7:72:43:8d:01:df:95:7d:b8:92:45:f3:65:1f:
         36:4e:46:e2:4f:d5:e8:15:0c:53:89:19:87:16:07:c5:c3:c0:
         ea:04:cb:91:15:7d:0f:0b:e9:a4:c1:93:34:d7:21:dc:70:c1:
         ca:6c:dc:73:6b:26:ae:16:1f:52:4b:83:59:fd:46:8d:f9:97:
         bd:e8:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:24 2026 by rpki-client