Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File:                     G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier:          zmcdkwu1ZvNRzKIJw569MC8aDhOD0Is9RxbhTTk0lx8=
Subject key identifier:   7B:FD:4A:1C:05:A3:68:31:FC:21:F3:F7:F9:67:FA:AB:DA:87:1C:60
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer:       /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial:       1240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number:          1210
Signing time:             Wed 22 Jul 2026 17:15:49 +0000
Manifest this update:     Wed 22 Jul 2026 17:15:48 +0000
Manifest next update:     Wed 29 Jul 2026 17:15:48 +0000
Files and hashes:         1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: 5wCTLu54/YNy25JZS7E2kXZ0QhcJ3nLNp6HFHuHbIR4=)
                          2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=)
                          3: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=)
                          4: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4672 (0x1240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
        Validity
            Not Before: Jul 22 17:15:48 2026 GMT
            Not After : Jul 29 17:15:48 2026 GMT
        Subject: CN=6a60fac4-66d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:f2:39:5f:76:0b:10:c4:fd:f0:83:31:14:
                    5e:8a:37:84:7b:ba:c0:0c:21:88:bf:99:3d:6b:d8:
                    87:1a:c4:f9:8c:f3:f8:95:2f:f9:09:38:12:b2:db:
                    22:d5:44:51:f3:b8:b4:24:6e:75:04:a4:8a:a7:a7:
                    8f:aa:df:3f:2f:5f:34:71:44:e2:a8:a3:db:03:6f:
                    23:b3:b4:78:17:81:7e:12:c9:1d:3e:45:07:27:96:
                    b9:8a:9f:ff:94:39:b2:ed:e5:d8:01:0e:84:dc:77:
                    49:18:7d:ac:eb:bd:12:67:33:a1:7e:ee:c5:50:a1:
                    31:da:2f:2e:75:0d:f6:28:03:5f:b1:13:09:c6:20:
                    76:8b:9e:6c:c2:f9:71:07:8f:cc:51:f7:d2:c7:73:
                    c1:59:f7:8e:62:eb:5d:49:65:78:6e:28:12:3a:b0:
                    c5:0e:b4:b5:ae:9f:9c:1f:b5:d0:37:20:6a:60:62:
                    6d:1a:dc:b7:bf:d6:f2:1f:b2:b5:0e:ad:33:4a:d0:
                    89:2c:8c:43:d7:09:1a:d6:e6:e6:08:ea:cf:65:79:
                    2f:23:48:36:dd:3a:8e:13:a4:25:11:a2:af:62:cf:
                    ff:34:c7:5f:9c:aa:57:0d:cd:eb:41:fc:29:b4:05:
                    74:79:97:b9:dc:ee:3f:27:8d:a5:50:27:4b:12:89:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FD:4A:1C:05:A3:68:31:FC:21:F3:F7:F9:67:FA:AB:DA:87:1C:60
            X509v3 Authority Key Identifier:
                keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:63:e5:c7:11:e3:1a:83:5a:85:28:26:c6:d6:c3:fa:27:
         bf:71:68:29:ab:2d:6a:be:f5:84:63:47:5c:d8:50:d0:9b:bb:
         d5:5f:54:d7:6d:47:62:85:43:fc:c8:3c:dd:0b:84:b7:00:5c:
         e8:b1:db:7e:19:d8:6a:a2:33:6e:5d:d7:42:a9:c6:ab:5b:89:
         87:de:ef:88:e1:22:4b:ae:5e:97:b6:47:6f:14:c2:02:36:c8:
         41:c9:73:d5:4d:fd:e1:c7:b3:f9:5a:f3:c2:70:a8:3e:af:ca:
         54:3e:2b:98:ed:45:9e:f5:79:64:c4:18:e1:3f:6a:05:21:f9:
         44:71:b9:a9:95:ab:50:41:32:cc:3e:c1:26:28:4c:1c:b7:3b:
         4a:76:e1:8f:6b:c5:01:49:55:fc:70:27:b2:30:07:40:03:82:
         a6:54:33:38:b5:92:5d:e0:53:5c:64:62:89:13:51:d9:5f:ae:
         32:91:00:7e:9b:35:3b:f5:22:bb:93:87:dd:0c:95:3c:26:2f:
         5b:38:29:c7:4a:7e:f5:5d:51:84:4c:a3:22:22:93:34:49:17:
         29:9a:39:5b:90:fc:d5:c9:fe:6e:bb:5b:42:9c:d2:cc:ec:5e:
         6b:48:f8:18:d9:ed:a8:5c:c0:ab:7b:7f:55:06:da:aa:0a:b7:
         cb:26:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:18 2026 by rpki-client