Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File:                     1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier:          IBv6m+u4A8qKZONfLBIxTiHZXSiZniA5aqSXC2IDDG4=
Subject key identifier:   F4:CB:34:24:54:BA:19:BD:BD:FF:A1:F9:D4:88:5D:04:AB:F5:2F:42
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number:          0550
Signing time:             Wed 29 Jul 2026 00:06:50 +0000
Manifest this update:     Wed 29 Jul 2026 00:06:49 +0000
Manifest next update:     Wed 05 Aug 2026 00:06:49 +0000
Files and hashes:         1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: IbkMiZWa9B+xVe3T0y1S/ZnCcQaguRZT/bTuqUdClow=)
                          2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: TDZ9GRT7CbtPoByROT6gvRqDQKkISdui8U28+wGu2U8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: Jul 29 00:06:49 2026 GMT
            Not After : Aug  5 00:06:49 2026 GMT
        Subject: CN=6a69441a-22fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:89:20:db:fd:99:0b:7a:c5:20:8c:a6:89:
                    c1:78:36:53:62:7b:99:1f:40:af:58:f7:8a:14:2b:
                    35:6d:91:19:9a:94:c5:9e:ef:56:67:54:d1:a8:c6:
                    18:af:2b:27:e4:ac:a8:e4:f6:d9:1d:49:85:1a:f7:
                    be:2a:85:80:f2:dd:dc:ab:42:b0:b0:fb:6c:d1:85:
                    6d:b6:86:39:f5:49:6b:c1:4b:d0:a2:9c:fd:6c:ca:
                    5e:50:a5:dc:79:8e:23:93:8b:9a:1f:f2:00:57:98:
                    06:91:29:da:02:18:7b:62:a6:cf:6b:96:fe:f8:49:
                    c4:a1:bf:d2:dd:ff:55:dc:74:ca:25:30:d2:86:5d:
                    42:42:18:5e:08:4d:66:96:c1:6c:c0:c4:25:49:a8:
                    ae:54:2e:c0:c8:2d:ae:ca:18:58:bf:25:09:ee:c8:
                    a2:43:5a:c6:25:70:90:e0:6f:4b:2f:9a:85:d4:ea:
                    ad:85:15:cf:0b:13:63:3b:62:aa:3b:79:19:a6:c6:
                    97:48:3c:21:b1:84:23:74:34:07:d2:e9:aa:fa:fe:
                    8d:fa:6c:02:61:f4:d2:61:9a:f8:83:80:2d:08:55:
                    f2:36:3b:3e:ad:70:12:b7:1b:98:d9:40:61:42:00:
                    d6:2b:c3:a2:8b:45:7b:30:e8:72:1a:bb:f5:e7:65:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CB:34:24:54:BA:19:BD:BD:FF:A1:F9:D4:88:5D:04:AB:F5:2F:42
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:75:c6:49:fe:39:8b:0c:82:b8:58:5c:2e:d6:34:87:b4:55:
         84:2b:ad:07:6e:dc:51:16:6e:c3:9f:11:6a:9b:39:04:24:51:
         26:7c:fd:12:7f:f6:18:aa:54:fc:06:02:1b:5c:ec:7b:4e:be:
         6b:a4:50:4d:68:17:c9:1e:a2:7f:55:90:f9:7b:22:ed:77:de:
         0f:b7:e8:e5:de:71:14:ee:2e:7e:77:d0:d3:8f:92:e8:51:17:
         a7:70:f9:1b:87:1e:05:5c:7f:2e:d4:00:90:fa:e1:96:b2:65:
         18:bf:38:f2:c5:96:46:04:e3:62:9b:63:81:c7:67:96:86:d3:
         f6:eb:7f:18:42:06:ec:0c:5a:dd:2d:ee:b6:3f:74:b3:71:6c:
         b2:26:e6:78:96:85:9e:6b:d3:24:77:3a:f2:38:98:bd:dc:69:
         d3:ef:c8:84:c1:45:76:7a:01:76:0d:78:cf:d4:7e:b7:c9:93:
         5a:55:ce:43:26:d2:0e:6c:47:74:de:c7:be:fc:2d:b3:c3:71:
         d6:3f:43:1e:b6:3b:d2:ab:1d:62:9c:d5:02:92:56:46:0c:d2:
         77:97:ed:1f:62:36:1c:43:16:b8:0b:74:3d:af:bc:18:51:63:
         e7:e1:47:d4:09:13:53:80:6d:9f:d0:f3:11:a0:92:ce:1c:7a:
         35:07:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:17 2026 by rpki-client