Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File:                     sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier:          JFCuKK0r4pR6JjyudDapN5clrnP+00yDcTEX4SpK6MA=
Subject key identifier:   3C:5C:BB:83:D2:7C:56:5B:BA:2D:08:1A:E3:DF:95:F7:D3:A1:03:B6
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer:       /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number:          058D
Signing time:             Thu 23 Jul 2026 00:04:16 +0000
Manifest this update:     Thu 23 Jul 2026 00:04:15 +0000
Manifest next update:     Thu 30 Jul 2026 00:04:15 +0000
Files and hashes:         1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: hVzSdQO1gihVyRwXggJ5Ov3ylqMgj3rILsHdzDJmV44=)
                          2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: f53D5d+q3fUodPkmYKhBtis6mgmJc3a1K68eaX3leUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
        Validity
            Not Before: Jul 23 00:04:15 2026 GMT
            Not After : Jul 30 00:04:15 2026 GMT
        Subject: CN=6a615a80-1d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:46:64:35:aa:c3:b5:05:a2:0e:cf:0d:d9:
                    8f:4d:ff:8e:b7:e6:68:51:7a:e2:dc:ec:3b:e8:fa:
                    ed:31:12:02:5f:2c:4a:cb:8c:87:05:3d:ea:0a:25:
                    7a:59:6c:f6:6a:8d:ad:b5:28:8a:f3:f6:b7:1b:2f:
                    f4:9a:6b:d6:42:e1:ba:96:e8:26:c9:c8:11:88:95:
                    64:29:1f:b9:87:9f:93:a7:b2:bf:d6:83:a4:3f:da:
                    7a:da:43:1d:96:8b:76:53:f3:ca:c6:5c:ac:1d:ba:
                    d3:3d:c3:2e:97:be:1d:61:0d:8a:20:35:ef:ac:84:
                    a8:51:45:72:33:24:62:ee:f6:8d:4f:8b:0c:83:db:
                    11:06:b7:a8:07:43:4e:b7:54:f0:cd:ed:28:e9:28:
                    b8:e2:52:7e:9f:7c:d7:31:99:98:bf:a9:04:4f:82:
                    a8:44:f4:db:55:83:ab:aa:ab:a0:d3:b3:71:1d:9d:
                    77:fc:6b:5b:77:52:62:42:b1:b5:5f:61:98:cf:7e:
                    f4:36:8e:88:0a:f3:7d:9c:06:38:46:20:1c:fd:d7:
                    59:2d:86:12:e6:b7:84:e1:b0:29:c8:72:7a:51:c3:
                    f4:75:86:89:bd:2a:f2:19:ec:ba:be:a9:36:fd:1d:
                    45:cf:df:45:8c:a5:0c:ed:4f:84:b0:be:d8:f5:da:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:BB:83:D2:7C:56:5B:BA:2D:08:1A:E3:DF:95:F7:D3:A1:03:B6
            X509v3 Authority Key Identifier:
                keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:bb:d0:b4:ca:18:8e:31:8f:3d:5e:f7:9f:ed:20:94:e0:
         91:58:28:49:5b:c7:10:00:ae:c7:89:e0:11:5e:03:d1:bc:56:
         1d:04:bf:f3:b5:03:00:b1:c0:20:17:34:a4:2f:c7:d3:c5:ff:
         8e:b2:00:b1:ea:31:d5:67:26:43:1f:e6:87:32:e7:4b:27:54:
         29:19:41:39:b3:3d:b3:5a:90:1e:67:c4:d9:1e:98:77:ca:6e:
         3a:78:fe:90:b7:8d:c1:56:cb:72:11:28:ae:3d:62:1a:1d:9b:
         1b:d3:6a:70:cf:f1:0d:95:de:ee:4d:bb:40:22:d7:05:8d:51:
         32:01:06:b6:6c:87:56:64:f3:56:0c:14:14:23:54:b2:90:cd:
         df:f5:75:23:7e:12:37:6b:85:fe:06:42:fc:85:b0:f8:11:a4:
         e9:ad:5c:6a:a5:55:19:d1:2f:5b:b0:e6:51:db:d8:06:f5:bb:
         1f:df:db:cd:18:b4:7c:60:c3:ca:11:b9:be:07:3a:5a:e9:8f:
         ec:79:f9:b0:c4:8f:93:4b:ee:82:58:3a:14:38:e8:1d:c1:d8:
         35:f6:92:c4:7c:5d:21:5b:f3:76:3e:2e:85:5e:8f:e0:39:df:
         84:53:e3:12:10:4e:a5:87:6c:90:eb:1e:e1:43:25:56:b1:48:
         e9:2f:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:12 2026 by rpki-client