Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File:                     vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier:          KlKESVLcUx0Sxl4k1bJbL/eWpPHVgR9MAbpjdwRkQeY=
Subject key identifier:   AB:1F:3B:C6:24:FA:73:52:8A:2E:0F:CB:0D:40:16:29:72:74:3B:90
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       0629
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number:          0618
Signing time:             Wed 22 Jul 2026 23:33:24 +0000
Manifest this update:     Wed 22 Jul 2026 23:33:23 +0000
Manifest next update:     Wed 29 Jul 2026 23:33:23 +0000
Files and hashes:         1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: G74B820e8fQwjiM8mQrx0ZXrzlbRUods3PET5lU8o1Q=)
                          2: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: x4TIcXHDDXWE6cxEb0z58vwY9a1AwvZmTTAZuYFQgdk=)
                          3: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: H+/gL9GOC5rLy94c2j0ly4aLXYfukKwRD5D8FRI8cvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: Jul 22 23:33:23 2026 GMT
            Not After : Jul 29 23:33:23 2026 GMT
        Subject: CN=6a615344-d3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:6b:47:a8:9a:48:4a:4d:ba:3d:91:23:a4:
                    16:e3:f5:6f:8f:63:1c:3c:80:28:48:90:63:19:3c:
                    79:3d:d2:c9:2b:a0:ea:62:8f:82:30:86:69:1c:63:
                    59:46:c7:b2:4d:7e:09:7a:4c:4f:14:27:ac:d1:87:
                    28:dc:79:8e:cc:c2:c4:8e:cc:df:59:d3:06:3d:f5:
                    4e:ff:cf:b5:d3:65:37:d0:b8:6e:20:04:56:40:3a:
                    7a:7d:60:4b:c6:fb:25:76:34:7a:d2:28:7a:2d:74:
                    ad:ca:c2:fc:77:b2:c9:ea:30:c2:3b:03:8b:92:de:
                    88:6c:d7:54:c1:e3:b9:74:b8:55:06:fa:4b:46:91:
                    bd:95:38:44:f9:53:a3:4f:e8:ee:93:f3:bd:61:3b:
                    7d:c6:91:ff:77:42:2b:d4:d1:0d:5c:d9:09:50:7e:
                    09:88:f2:94:39:b0:81:6b:88:1e:6a:32:d4:da:19:
                    d3:57:bb:b3:c3:bd:5e:d5:b2:16:12:34:7b:c1:3b:
                    ee:2e:09:13:e6:16:5d:30:ea:5b:9e:ae:8c:05:38:
                    28:cf:92:21:6a:dd:d0:62:4f:59:8e:43:28:c6:78:
                    59:15:e1:e2:a0:5f:fa:25:0b:e9:c8:ba:d3:ac:83:
                    43:14:11:18:bf:4f:c3:84:41:c9:77:f9:f2:6b:52:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1F:3B:C6:24:FA:73:52:8A:2E:0F:CB:0D:40:16:29:72:74:3B:90
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:33:63:d1:43:c2:c3:25:03:bf:22:dc:76:fd:ad:d3:fe:ad:
         d6:42:bb:08:5a:06:0a:b3:74:bf:00:2f:92:72:37:2f:3c:79:
         20:e7:fb:46:d9:6d:46:e7:c7:1a:1e:0c:c1:f6:89:58:99:80:
         9e:80:7b:67:40:97:21:ee:da:ac:79:39:bc:ea:fb:e4:ad:77:
         72:3a:48:8d:16:62:aa:9e:a5:62:60:b2:9c:3d:7c:d5:d8:99:
         29:91:46:3a:74:db:cb:2b:71:18:8d:e4:3a:ce:22:66:19:02:
         74:0e:f6:85:44:42:06:ef:b6:43:a6:3a:6d:58:75:8a:af:ea:
         72:c3:6c:54:9e:a7:e3:c5:ab:54:cf:57:ce:db:d6:93:f2:7a:
         53:e5:bd:67:7e:c3:cd:91:e3:c8:ba:19:80:c9:6a:2e:4b:81:
         c7:86:e1:b8:44:40:83:0f:2d:86:2b:c5:4e:ce:d1:23:3b:5c:
         07:3f:b2:34:f8:c2:7d:3b:93:2b:46:58:b1:e0:e1:96:f9:b3:
         42:ed:04:e7:fb:1d:b0:4b:ff:ef:cf:ca:1a:18:e7:89:ae:67:
         25:a0:bf:97:09:09:d8:9c:79:95:63:68:c9:33:eb:f1:dc:18:
         1a:15:91:04:55:7e:67:00:92:42:21:03:ad:09:4b:8c:20:ad:
         ac:87:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:27 2026 by rpki-client