Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File:                     X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier:          DXR0crYXZ2MjGaeUJI12goZMzlZl69xD74uhuPornKo=
Subject key identifier:   04:61:9D:C8:81:87:66:A8:DF:54:77:A9:0F:94:CE:21:93:F0:B3:B1
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer:       /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial:       08C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number:          08B1
Signing time:             Sun 26 Jul 2026 21:12:44 +0000
Manifest this update:     Sun 26 Jul 2026 21:12:44 +0000
Manifest next update:     Sun 02 Aug 2026 21:12:44 +0000
Files and hashes:         1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: X+RMjWmn2Z7AVtuTGy2gHib0MFzoiTJEeUFNwdNLKtU=)
                          2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 4+lHA5+XA6q3WA0a7feDPb9rgvNk8uk4zcP3rt42nhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
                          rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249 (0x8c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
        Validity
            Not Before: Jul 26 21:12:44 2026 GMT
            Not After : Aug  2 21:12:44 2026 GMT
        Subject: CN=6a66784c-5586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:06:f7:ba:ec:fd:ff:5e:73:b9:3f:95:69:
                    fc:51:8f:f6:09:08:23:b8:5a:28:eb:bb:ef:3c:d9:
                    fa:14:77:e0:be:b0:2e:9a:95:79:4d:06:bb:f1:ac:
                    e9:d9:f9:8f:98:eb:5c:71:75:29:b4:3f:cc:dd:30:
                    0d:ff:5e:46:68:4b:84:fe:a8:03:73:b7:32:1c:6b:
                    e3:d0:36:f7:82:4b:21:87:6b:83:f4:dc:19:36:8b:
                    ab:c8:96:70:8c:e8:35:08:31:aa:a2:9a:57:aa:3b:
                    c5:68:32:ee:10:69:df:dc:57:d9:d9:fa:3f:c5:14:
                    9a:a5:e3:4b:76:c5:d2:b0:1b:20:b7:62:fc:89:ea:
                    8b:c2:56:bf:8d:5b:73:19:93:62:ea:29:1e:44:b2:
                    17:37:af:57:a3:7a:c5:5a:0c:d2:e2:86:fe:e3:1b:
                    31:19:e4:9d:9b:26:17:92:65:85:97:de:f6:a4:ea:
                    51:d9:62:cb:64:94:af:b6:19:b2:29:d2:fd:e3:82:
                    a3:ca:91:74:a6:4f:09:84:6d:38:8f:b4:36:33:21:
                    b7:8b:d4:51:4c:da:bc:32:6d:9f:aa:b1:20:eb:2d:
                    0b:39:e5:cf:96:45:df:8c:28:a5:e5:4e:70:d1:20:
                    5a:4b:03:d2:85:bd:c8:2a:8e:2f:aa:64:fc:0d:b8:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:61:9D:C8:81:87:66:A8:DF:54:77:A9:0F:94:CE:21:93:F0:B3:B1
            X509v3 Authority Key Identifier:
                keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:f5:a1:44:31:26:02:2e:ea:a6:e5:01:d8:7a:b4:ab:b0:
         cf:ca:07:c8:03:40:f7:00:b1:b2:e2:21:9a:b8:85:f4:e2:29:
         da:6b:66:d4:a0:9b:50:ce:40:94:d8:64:5a:8f:ce:58:ec:53:
         0f:89:32:00:38:da:e8:c2:98:45:9e:3a:d0:c0:e1:0f:87:8e:
         8d:68:4d:3c:30:66:d8:f5:e2:ff:5c:b3:cf:6e:7f:0f:38:36:
         9e:58:3d:d4:17:7c:d5:f4:1e:37:87:b2:66:0e:e6:40:0d:78:
         1c:d5:5b:37:48:36:09:5d:f9:04:bc:b6:76:2c:45:94:18:1d:
         69:af:33:d5:f5:e0:c3:1e:3b:46:b6:b6:12:32:c2:84:3e:55:
         33:61:db:ae:59:48:de:a2:fd:e1:89:06:11:b6:e2:fb:1d:ef:
         88:77:b1:4b:71:57:10:fb:a1:bc:0c:ea:20:27:91:0e:0b:09:
         24:c9:1e:82:57:a1:8e:aa:88:ed:cb:c9:63:98:8e:cf:e7:d5:
         30:3f:d1:ea:ba:12:0b:04:b2:4c:df:2a:5a:ff:cb:9f:78:b5:
         f7:11:bc:e6:93:58:e3:a3:3e:e8:68:bb:6e:9a:8a:0e:04:fe:
         20:53:22:8f:f2:c3:3d:35:84:06:e4:ad:5a:1a:7b:1a:0a:11:
         71:3c:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:56 2026 by rpki-client