Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
File:                     9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json)
Hash identifier:          UU9Ta5bmfKUOjqu/p+MO3DIAFkTJAL60pIBPIRqCueY=
Subject key identifier:   7C:69:18:19:48:BB:B0:AF:6A:2C:0E:67:C5:76:CF:8E:91:A0:FE:3E
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Certificate issuer:       /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
Manifest number:          02BE
Signing time:             Thu 23 Jul 2026 02:31:39 +0000
Manifest this update:     Thu 23 Jul 2026 02:31:38 +0000
Manifest next update:     Thu 30 Jul 2026 02:31:38 +0000
Files and hashes:         1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: nqXZhsNNM+7uBDnx9PRwMNG8NpKYUZw2HcHXOsK/KGI=)
                          2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: aGkSuS0d5kC8SSbfjCl/wREw36WuVh33R9qpSzjLESg=)
                          3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g=)
                          4: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75
        Validity
            Not Before: Jul 23 02:31:38 2026 GMT
            Not After : Jul 30 02:31:38 2026 GMT
        Subject: CN=6a617d0b-d6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:3d:3b:b6:cf:ec:11:70:5e:dc:09:d9:12:
                    eb:91:65:bc:97:34:7f:2d:e9:a4:da:5b:cb:2d:b9:
                    0d:1c:5e:c7:3f:6e:c6:ff:18:2a:de:c6:c7:f3:eb:
                    58:d1:7f:2b:74:fb:59:5e:eb:42:31:e2:cc:8a:d1:
                    95:9f:14:4e:46:21:df:74:51:16:f6:0e:b7:ba:23:
                    f3:37:99:fc:db:ce:5a:79:12:f4:51:a9:4b:a1:1f:
                    02:8c:d8:88:ec:16:6e:13:9a:e5:96:9d:91:df:b6:
                    da:d9:ce:cc:02:03:fd:c3:69:43:c9:9b:10:ed:e3:
                    ab:7d:2c:d6:2a:bc:ab:47:b3:51:37:a9:7f:b4:87:
                    9d:76:3f:e8:20:74:61:76:e6:55:60:98:66:2d:21:
                    77:49:a4:6f:df:54:ee:9d:13:04:20:c3:e5:1c:07:
                    58:c7:9a:3f:1b:77:b1:4a:be:39:84:de:4b:86:95:
                    b7:2d:39:a9:1f:6e:2d:5e:21:d8:ab:84:84:77:9f:
                    cb:e4:46:75:fb:67:02:53:45:3c:34:77:4e:bf:67:
                    d6:82:fe:22:cd:db:cc:5e:ed:88:b8:c4:9c:f6:1c:
                    2c:1f:34:5a:23:5c:cf:bf:04:61:62:72:51:e5:26:
                    62:ce:f3:ce:fd:02:d0:02:04:87:13:90:f9:b3:56:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:18:19:48:BB:B0:AF:6A:2C:0E:67:C5:76:CF:8E:91:A0:FE:3E
            X509v3 Authority Key Identifier:
                keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:11:5a:52:ec:39:7f:4b:3a:48:eb:82:f8:15:c6:a0:d8:
         93:b3:d7:2f:8c:d6:27:9b:c5:77:ef:9b:70:6c:3e:df:45:9b:
         d1:bb:13:ec:79:33:3d:73:ba:3d:7d:86:95:e5:46:fc:1a:d5:
         76:82:62:f8:cd:f5:91:5d:69:34:31:b1:38:43:55:64:a9:87:
         4f:ee:36:01:aa:bd:45:f5:04:b5:63:5f:f4:f2:60:a0:46:33:
         f1:93:91:ba:54:e0:af:ce:1b:53:9c:cc:f4:db:eb:62:3b:62:
         dd:c7:34:8f:a3:a7:44:09:0e:47:b0:11:4d:50:4f:da:38:14:
         ab:2a:ea:fe:fc:b6:63:ba:39:16:4f:c6:8c:3a:0a:99:b7:c6:
         a8:be:91:a2:83:a5:c2:55:a5:9d:42:30:20:e9:c8:31:c7:0e:
         0d:d0:56:ba:3e:5e:76:bc:d7:b0:df:e7:34:d8:42:54:24:c6:
         b8:2f:c3:37:60:17:79:2c:8c:48:60:d7:dc:44:3a:26:c9:af:
         4a:56:c4:3d:99:37:24:85:b9:d9:11:d5:c8:e1:95:c2:9e:bf:
         3a:95:d1:54:3e:46:1d:10:e4:56:cc:88:be:dd:8f:5d:5b:83:
         e8:3c:41:5f:b9:e0:e1:5b:c2:64:f9:d6:6a:97:2f:f0:37:96:
         ad:cb:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:03 2026 by rpki-client