Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File:                     sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier:          2MFWukeE+v9hCuPVi6jwGECFKldWo5FVltwwa/NbGaY=
Subject key identifier:   87:A7:00:8A:2E:6F:82:44:49:51:DF:5D:05:DD:2A:D3:BB:10:15:DA
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number:          0123
Signing time:             Thu 23 Jul 2026 07:46:31 +0000
Manifest this update:     Thu 23 Jul 2026 07:46:30 +0000
Manifest next update:     Thu 30 Jul 2026 07:46:30 +0000
Files and hashes:         1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: nL9wNvSYDhs8Zai/QFYK9mUN3VDeAFN2De0iND43yHw=)
                          2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: Jul 23 07:46:30 2026 GMT
            Not After : Jul 30 07:46:30 2026 GMT
        Subject: CN=6a61c6d7-54fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:75:52:b3:93:03:a6:00:9b:6b:a8:39:30:
                    29:91:76:02:e3:2f:cd:4c:34:8d:7a:56:b6:25:4e:
                    db:e4:2c:2f:d6:c1:62:1e:9c:4c:79:4a:44:6a:7a:
                    2d:42:6d:7a:37:b5:54:46:14:51:6e:50:1e:d8:d6:
                    fb:61:52:a4:b3:d0:38:5d:9f:d0:b4:8a:ec:e6:47:
                    a6:95:aa:cd:65:8c:db:55:44:2b:d5:f7:8b:82:2f:
                    fb:7d:83:99:58:24:ec:2e:67:a5:bf:47:ff:b0:5d:
                    68:bd:91:72:56:fe:11:9e:43:89:b8:4e:c7:80:5b:
                    ed:14:ef:a2:6f:ab:2b:95:2f:28:08:22:78:6f:57:
                    83:6b:cc:0c:15:fa:9b:06:41:36:14:da:a3:21:d2:
                    6d:60:f8:90:b8:42:bc:de:c1:29:80:1c:21:6c:63:
                    54:62:68:07:95:84:80:79:76:8a:1d:29:eb:13:53:
                    40:47:41:85:f5:55:be:c9:3d:db:66:be:61:2a:7c:
                    ef:6f:f4:b9:2d:27:ef:33:d1:72:3a:76:63:b1:e1:
                    62:7a:b5:5b:d2:6c:77:e3:77:b4:94:86:cb:0b:26:
                    80:60:b9:f1:82:04:d2:b3:41:43:19:50:0d:0f:9f:
                    5f:19:b3:a5:af:0c:a8:39:e5:72:da:1a:66:56:12:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:00:8A:2E:6F:82:44:49:51:DF:5D:05:DD:2A:D3:BB:10:15:DA
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:05:20:65:7e:a7:7d:51:c3:cd:95:71:6f:c5:d9:8a:6e:75:
         59:c6:e4:3a:0a:8a:df:a5:02:aa:77:9e:00:2b:5f:49:2c:c8:
         e9:fb:79:36:94:85:38:59:e0:57:44:d0:19:40:df:13:52:87:
         83:23:ef:f1:6d:d9:6f:d6:46:39:f2:b4:27:5e:ae:04:7b:4c:
         b7:7f:47:e0:1b:56:ca:7c:84:af:08:85:aa:19:74:bd:75:13:
         71:14:1d:e3:35:a4:76:fb:c2:22:4c:a0:56:d8:94:23:18:3b:
         79:e4:b5:7b:5c:af:a7:63:8b:dd:1f:34:6d:20:ee:5c:e8:9c:
         78:a6:3b:8d:71:78:15:28:f9:e9:a0:5f:ab:4c:3c:3e:3a:cb:
         a3:1a:78:5a:6a:54:20:8a:11:58:a2:12:ea:4f:68:08:b6:50:
         a2:e5:21:ae:74:9f:4e:3b:d6:8a:56:ec:ce:4e:fc:20:ff:f0:
         95:32:e7:00:e4:c5:3c:89:d4:af:ca:da:5f:be:86:67:25:a5:
         48:b2:e4:4c:80:1d:c2:e2:d5:92:bd:e7:51:52:d6:ce:de:43:
         49:f4:64:5f:6e:2b:c9:d4:f3:28:ae:2a:6a:9d:a2:f8:6a:00:
         25:b3:e9:e7:57:43:d0:b1:c0:94:5e:a4:5c:5a:aa:6d:59:e1:
         9e:b2:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:55 2026 by rpki-client