Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File:                     4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier:          4spmbqhQPes6CNFy/NTfUyC5hApx9Xv6QbPl1LXvYys=
Subject key identifier:   E9:50:D0:37:3C:41:D0:95:E8:BE:E0:53:B8:2C:BE:23:53:DA:B3:C4
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer:       /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number:          DB
Signing time:             Thu 23 Jul 2026 08:24:40 +0000
Manifest this update:     Thu 23 Jul 2026 08:24:39 +0000
Manifest next update:     Thu 30 Jul 2026 08:24:39 +0000
Files and hashes:         1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: qvIUcXn+UjwV75AP1WMrrlN60a53PLUC7D3OOaxCa5g=)
                          2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=)
                          3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
        Validity
            Not Before: Jul 23 08:24:39 2026 GMT
            Not After : Jul 30 08:24:39 2026 GMT
        Subject: CN=6a61cfc8-59f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:b2:68:7b:3e:38:64:2f:65:df:28:41:6c:
                    77:a1:ce:a4:06:0f:a4:69:3d:35:28:8b:76:88:dd:
                    a4:89:c2:86:e6:8c:39:6e:e5:e0:66:83:e5:90:59:
                    d2:ee:18:5b:08:aa:0b:29:39:eb:7a:76:05:37:b0:
                    8d:29:7b:10:06:ee:96:61:8a:91:5f:67:1d:f3:20:
                    d7:71:75:4d:bf:15:79:68:ce:c4:03:fd:0f:ea:76:
                    9b:30:f3:74:72:28:a9:9d:f4:d6:11:b6:ff:a4:58:
                    79:8b:c0:13:a9:f2:9c:f7:a4:06:b9:82:e3:49:6a:
                    6f:68:4f:dc:cd:14:73:b6:30:24:f8:59:40:df:9a:
                    df:d6:9e:f0:ca:d6:89:03:11:d2:b8:42:4d:40:a6:
                    f9:60:19:5a:67:ab:21:f6:5a:34:c8:2f:9c:56:41:
                    82:4b:a3:55:85:a9:60:7d:94:64:27:86:00:43:8a:
                    74:09:e1:0f:2f:df:bf:d0:69:ce:91:66:bf:84:1b:
                    1b:ca:8b:88:ef:a1:8f:69:f8:40:e2:fe:a9:e4:e6:
                    39:7d:be:18:b5:3b:ea:98:a2:ff:40:78:77:c0:79:
                    b1:8a:19:04:b0:da:d5:36:50:e0:c5:fa:e8:7e:76:
                    10:dd:81:53:dc:75:07:ee:49:c1:87:bd:1d:13:64:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:50:D0:37:3C:41:D0:95:E8:BE:E0:53:B8:2C:BE:23:53:DA:B3:C4
            X509v3 Authority Key Identifier:
                keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:57:11:f4:f0:7e:a1:df:fa:20:01:ea:5d:79:b8:6b:2f:80:
         17:56:5a:cc:d1:69:36:19:60:6d:ee:fe:e0:07:e9:f8:25:f7:
         f7:cc:2b:85:5e:ad:a5:4e:4f:ba:f5:05:e7:b9:09:1d:cd:d1:
         2e:67:b9:aa:9f:b7:d0:64:3b:57:63:26:72:c1:6b:ef:c0:e4:
         f9:3d:df:15:32:5f:eb:0d:05:64:cd:39:4e:5c:a2:66:b9:6d:
         7f:25:b4:56:37:c0:97:51:e1:5d:6a:6d:8d:23:5a:cd:b7:b4:
         04:54:2f:a9:1b:60:91:3e:7f:1f:bd:af:53:9f:df:6c:e2:0d:
         90:7f:0e:b9:a4:79:67:55:90:2b:97:b9:87:8b:f3:6a:96:d9:
         e5:88:61:f2:73:5c:6f:eb:8c:a8:eb:fb:d7:18:75:24:0e:e1:
         ab:5c:be:fc:d9:44:35:63:ad:10:47:0a:fe:27:91:c3:77:7c:
         33:59:09:c7:97:7e:ee:23:28:95:c1:15:07:3e:75:d3:ec:64:
         3e:70:8c:af:af:6b:3a:e3:f1:49:b0:7e:93:50:49:2e:7e:e3:
         13:40:86:4a:df:02:54:61:13:bb:22:4f:1b:78:be:88:a9:26:
         a3:c0:86:17:67:29:2f:cf:80:7f:9f:d4:79:56:9f:d7:fc:de:
         9e:98:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:30 2026 by rpki-client