Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File:                     dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier:          z6zgxXXZTLyel4fDLzppZ8GDr8L13g4h4EG6Bz8v6k8=
Subject key identifier:   48:40:4B:77:20:0E:F6:BF:BB:33:D5:B5:2C:A4:0C:8B:5E:0B:86:8E
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer:       /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number:          AE
Signing time:             Mon 27 Jul 2026 09:17:16 +0000
Manifest this update:     Mon 27 Jul 2026 09:17:15 +0000
Manifest next update:     Mon 03 Aug 2026 09:17:15 +0000
Files and hashes:         1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: Rh1mzk/tKyI8HJokwpQgP8nCnTjzVrfWXju8ifpOlho=)
                          2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=)
                          3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
                          rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
        Validity
            Not Before: Jul 27 09:17:15 2026 GMT
            Not After : Aug  3 09:17:15 2026 GMT
        Subject: CN=6a67221b-a3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dd:83:90:02:b4:3b:98:07:32:d4:c2:2f:ef:
                    9d:a5:02:28:31:23:52:1a:fc:5e:78:83:9e:0c:b1:
                    c1:24:cb:89:66:f1:ce:de:fc:85:ba:89:37:d0:2b:
                    6b:de:bc:07:47:ba:42:b5:c0:61:94:17:1c:b3:e5:
                    57:37:f5:f5:9a:c8:bf:d7:60:7f:21:b7:cd:c5:dd:
                    a5:6c:e1:65:65:72:ef:4f:4b:86:43:a3:5c:4c:76:
                    9b:00:e9:04:92:9e:80:17:86:0d:86:cd:1f:e2:9f:
                    75:01:d5:0b:04:37:b1:d0:a1:63:2e:b3:04:91:5e:
                    0f:19:af:aa:90:44:07:e9:55:da:ff:5d:01:59:09:
                    25:dd:e3:95:9b:24:49:d4:e4:ce:62:dc:37:8f:f9:
                    b0:fe:66:dd:57:75:f4:55:42:ac:ef:a7:59:fa:ce:
                    c9:d0:67:75:c2:e0:73:0c:03:71:96:a3:99:72:c2:
                    77:5c:e0:a0:11:a9:32:bb:d5:a3:4d:81:3f:88:77:
                    9a:15:a9:4e:5b:fe:0d:bb:5d:d5:0e:79:50:e0:c1:
                    15:8c:6c:0d:f2:c7:9f:28:a1:8d:c0:ae:62:a8:65:
                    80:5a:f0:93:e1:ee:f8:f0:62:50:22:ed:30:c4:00:
                    31:ff:fc:1c:e7:04:86:86:ad:da:ee:eb:06:b7:38:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:4B:77:20:0E:F6:BF:BB:33:D5:B5:2C:A4:0C:8B:5E:0B:86:8E
            X509v3 Authority Key Identifier:
                keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:88:61:bb:1f:f8:af:92:8d:01:33:51:cf:cb:d9:97:f3:
         0b:45:a8:d1:b6:54:39:be:2e:20:25:4f:40:91:f8:8c:a5:07:
         f8:f6:d0:0c:6d:79:3a:ec:fe:4f:da:65:62:d4:37:39:5b:b5:
         6f:ba:bb:23:bf:7e:5f:ea:5f:d0:47:7f:50:5c:7b:17:26:df:
         78:6a:40:39:08:a6:51:7d:79:af:93:ae:3c:82:f1:16:c9:97:
         39:f2:e8:c4:88:39:69:66:1d:ba:de:6d:87:1f:d8:ae:d9:7d:
         c0:7c:5a:ef:c3:b4:35:d5:9e:de:af:54:2c:40:66:7a:e6:59:
         e5:27:57:84:20:2f:d2:a0:a7:d8:8c:2e:24:56:42:eb:7a:8f:
         41:e8:40:c5:59:d3:dc:35:7b:da:14:c2:5c:6e:81:e9:87:bc:
         b8:37:b6:d8:f6:39:f9:30:30:02:94:fa:52:bf:60:cc:a7:ff:
         69:1a:ba:5c:c7:2f:2f:65:b2:d1:5b:31:b7:d4:a5:45:06:2c:
         43:6c:60:08:40:44:79:a5:0a:22:4b:e1:12:f7:9c:32:ed:e8:
         f2:99:e6:fd:8c:af:b8:a7:c6:4e:08:bf:e4:6d:54:2c:0a:17:
         4c:3b:f6:ab:f0:12:bb:be:b9:0f:78:b8:e3:32:25:f3:e6:16:
         26:e2:14:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczQjYxMTAvBgNVBAUTKDc1MTFDQjMxM0VCODNGMUMzOTAyQUE2M0M0M0I3QTAz
NkFDQzYzMTcwHhcNMjYwNzI3MDkxNzE1WhcNMjYwODAzMDkxNzE1WjAYMRYwFAYD
VQQDEw02YTY3MjIxYi1hM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6d2DkAK0O5gHMtTCL++dpQIoMSNSGvxeeIOeDLHBJMuJZvHO3vyFuok30Ctr
3rwHR7pCtcBhlBccs+VXN/X1msi/12B/IbfNxd2lbOFlZXLvT0uGQ6NcTHabAOkE
kp6AF4YNhs0f4p91AdULBDex0KFjLrMEkV4PGa+qkEQH6VXa/10BWQkl3eOVmyRJ
1OTOYtw3j/mw/mbdV3X0VUKs76dZ+s7J0Gd1wuBzDANxlqOZcsJ3XOCgEakyu9Wj
TYE/iHeaFalOW/4Nu13VDnlQ4MEVjGwN8sefKKGNwK5iqGWAWvCT4e748GJQIu0w
xAAx//wc5wSGhq3a7usGtzhmbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhAS3cg
Dva/uzPVtSykDIteC4aOMB8GA1UdIwQYMBaAFHURyzE+uD8cOQKqY8Q7egNqzGMX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNCNi81NDgxQUZDMDgx
QUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4dzVBcXBqeER0NkEyck1Z
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RSSExNVDY0UHh3NUFxcGp4RHQ2QTJyTVl4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNCNi81NDgxQUZDMDgxQUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4
dzVBcXBqeER0NkEyck1ZeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf76IYbsf+K+SjQEzUc/L2ZfzC0Wo0bZUOb4uICVPQJH4jKUH+PbQDG15Ouz+
T9plYtQ3OVu1b7q7I79+X+pf0Ed/UFx7FybfeGpAOQimUX15r5OuPILxFsmXOfLo
xIg5aWYdut5thx/Yrtl9wHxa78O0NdWe3q9ULEBmeuZZ5SdXhCAv0qCn2IwuJFZC
63qPQehAxVnT3DV72hTCXG6B6Ye8uDe22PY5+TAwApT6Ur9gzKf/aRq6XMcvL2Wy
0Vsxt9SlRQYsQ2xgCEBEeaUKIkvhEvecMu3o8pnm/YyvuKfGTgi/5G1ULAoXTDv2
q/ASu765D3i44zIl8+YWJuIU4g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:12 2026 by rpki-client