Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File:                     Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier:          h8zZcl0WfjKlY8S/f4QeE2MoWAd2zRIphEaHs/FP1XE=
Subject key identifier:   3F:69:83:B9:4E:C0:32:E1:B9:1B:C7:21:5A:9E:89:55:DA:05:E9:00
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer:       /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number:          5A
Signing time:             Thu 23 Jul 2026 10:12:40 +0000
Manifest this update:     Thu 23 Jul 2026 10:12:39 +0000
Manifest next update:     Thu 30 Jul 2026 10:12:39 +0000
Files and hashes:         1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: SJEVnRlZop9hurnqICV7x2AkLIrYJ4WkWxiuKmNsaWQ=)
                          2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: 74mwc9LQpW/L2dkBvxUUTHTqTkYyfx6a6uTfz8A4a5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
                          rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
        Validity
            Not Before: Jul 23 10:12:39 2026 GMT
            Not After : Jul 30 10:12:39 2026 GMT
        Subject: CN=6a61e918-60c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:84:5b:a3:c3:ba:ab:00:b4:c5:66:66:42:4e:
                    ce:ad:52:ab:34:5c:33:c6:f2:00:fa:a8:8f:43:e0:
                    21:c6:29:fd:c0:f4:74:84:87:9b:26:43:cb:b2:24:
                    49:88:75:aa:5b:5c:fe:f7:bf:1a:43:24:35:20:6f:
                    d2:92:18:37:f7:f4:8e:f4:1b:a9:f3:fa:f9:ce:d0:
                    cb:a2:e3:90:ba:f5:93:71:94:e7:e4:ea:73:16:5f:
                    ab:df:ad:c1:a5:a8:4d:18:48:99:8c:e3:b1:69:ac:
                    52:a9:83:82:e0:c2:c6:ac:d0:37:fd:2d:f3:30:37:
                    77:48:69:c9:85:e4:6e:ae:19:58:bd:61:65:07:6c:
                    f5:7c:6f:c2:40:53:ad:00:4f:a6:76:16:75:7e:eb:
                    fa:c7:13:25:70:1c:97:a1:c1:48:46:aa:0b:5c:e1:
                    81:e2:a5:a5:4d:32:f1:b9:3a:77:05:0e:a8:7e:0a:
                    c2:68:5c:8b:f9:74:6a:77:02:0c:41:ce:21:2a:00:
                    4e:7b:34:77:9a:fb:9d:d7:36:80:0f:bd:a1:ba:e9:
                    a8:90:b9:20:a4:97:89:fa:d4:38:8d:cd:d0:e6:9b:
                    6a:f7:b5:f4:5e:a0:37:4c:d0:91:e5:9e:4a:08:4d:
                    b0:5c:11:45:67:5e:6c:ed:79:ce:1e:cd:2b:c4:b5:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:83:B9:4E:C0:32:E1:B9:1B:C7:21:5A:9E:89:55:DA:05:E9:00
            X509v3 Authority Key Identifier:
                keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:3a:5c:bf:2a:52:6c:bf:ba:2a:6d:79:14:fa:f0:c8:21:
         0e:35:13:a5:6d:19:23:fb:68:d6:8a:40:96:48:78:6f:f2:33:
         c9:c2:fd:63:79:3a:10:74:5f:b4:fe:81:a5:95:d8:02:64:99:
         38:ee:2b:1b:fa:15:e6:f3:17:8e:cc:7b:80:65:bb:64:57:47:
         a5:d8:ef:16:50:73:9b:03:ef:7b:3a:7e:76:76:38:a2:bf:7b:
         57:af:dc:7d:60:47:61:50:87:81:0e:c0:67:0c:37:90:cb:16:
         cd:92:c1:23:62:62:43:e2:2f:df:c3:7e:fd:65:db:c3:ef:8c:
         43:7c:92:24:d6:c9:b6:37:ae:a1:38:7c:7e:e6:4e:17:a0:fb:
         f5:f6:9f:a4:ac:15:4c:4e:19:22:68:ff:5d:e4:f9:3b:91:1a:
         7e:96:e6:7a:11:26:e9:93:4c:c4:45:54:0e:85:81:41:1a:8e:
         2c:4b:d5:b3:71:d9:6c:ed:c0:29:8b:c4:9b:8c:95:06:40:73:
         ad:33:d1:af:16:a5:8a:03:0d:ed:73:15:7a:57:80:c5:87:5b:
         2d:22:11:5e:a3:ff:9b:2d:89:83:51:c4:8e:11:09:85:23:38:
         fd:e9:ad:43:6f:ca:1b:cc:f4:b9:ac:93:4e:00:8e:fd:e3:83:
         40:21:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:21 2026 by rpki-client