Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
File:                     0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json)
Hash identifier:          fMBHLlYuY9P+PxuPFRy7s5y3d+P0W4K2EJ3Hbf5JhXs=
Subject key identifier:   DA:52:2A:04:38:3D:E3:ED:A9:FB:7B:94:4A:38:88:6A:05:26:E0:6A
Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
Certificate issuer:       /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
Manifest number:          0233
Signing time:             Mon 27 Jul 2026 04:05:33 +0000
Manifest this update:     Mon 27 Jul 2026 04:05:32 +0000
Manifest next update:     Mon 03 Aug 2026 04:05:32 +0000
Files and hashes:         1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: ZXgoUpGyqmAN0DhOmW/W4wXMCJAM/ZIW5mRxROCpvCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
                          rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
        Validity
            Not Before: Jul 27 04:05:32 2026 GMT
            Not After : Aug  3 04:05:32 2026 GMT
        Subject: CN=6a66d90d-8742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:37:b3:98:ef:38:42:52:f9:ce:51:f2:5b:
                    45:5c:16:1a:ac:7f:cf:d9:33:0d:10:d0:25:74:93:
                    2c:53:6a:86:cc:ba:ed:76:00:4e:3e:8c:1c:be:39:
                    99:f9:3f:24:82:6c:71:85:fc:0e:1c:6d:5a:5b:3d:
                    65:da:d9:e1:c9:f0:ce:87:30:93:5e:c8:8d:06:8a:
                    3d:6e:8a:ff:ad:24:20:70:cd:c4:88:cb:d6:56:3d:
                    11:62:8a:62:f3:5e:68:3a:5d:98:fb:58:dc:08:53:
                    bb:31:b9:5d:0a:25:b7:00:df:ff:a3:51:09:b5:62:
                    6b:8d:ea:36:e2:cb:70:7e:15:cc:63:49:dd:54:2a:
                    39:fb:20:53:ce:de:c6:6d:6d:64:34:1b:16:26:2e:
                    4e:04:dd:dd:83:9f:16:cb:a1:a2:53:b2:ff:e1:39:
                    92:3d:88:00:5f:e1:2a:ed:ac:f9:f4:39:55:6e:3b:
                    b5:e8:99:4b:56:71:f2:1e:49:b1:31:77:16:7c:67:
                    ce:d5:0a:14:72:5c:3a:1c:d7:eb:ce:f1:3e:af:54:
                    84:5a:12:37:36:aa:19:86:8b:d1:6c:92:53:f7:c7:
                    7e:95:b5:f5:78:68:be:26:c8:80:03:c8:29:64:9c:
                    62:4b:81:92:7e:0b:c4:ac:ff:7f:36:71:2e:96:b9:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:52:2A:04:38:3D:E3:ED:A9:FB:7B:94:4A:38:88:6A:05:26:E0:6A
            X509v3 Authority Key Identifier:
                keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:7d:7b:1e:0f:f3:e3:82:8f:09:4b:bb:3e:97:02:68:21:
         71:c0:be:12:e8:76:ee:8b:c9:61:94:4c:fc:9d:3b:6a:37:eb:
         d0:29:b2:40:65:12:de:9a:79:84:41:f7:c0:f4:e7:73:3d:fa:
         51:f5:ad:f1:ff:c3:c3:b6:58:a5:5e:20:40:db:e2:19:4e:5c:
         b5:ad:cc:61:87:2b:a0:1b:15:b2:fd:34:b5:07:a8:df:d3:1e:
         20:d2:0a:8a:60:65:77:50:92:15:03:f6:d3:8c:95:55:31:19:
         47:38:32:fb:a4:75:68:3e:f1:a7:d1:15:05:99:2e:9e:77:5c:
         7c:98:eb:7e:b8:5b:8b:8b:f2:11:a3:60:c9:63:fa:70:64:d5:
         91:97:59:a4:15:24:98:88:31:f5:8b:0c:4f:e1:58:47:77:c1:
         7d:75:00:c2:09:03:75:6a:1e:eb:87:03:bf:69:2a:cf:c7:a6:
         a4:a7:d2:9a:d9:8f:07:05:01:f3:ce:55:f8:21:eb:23:e4:e1:
         81:f9:68:19:5a:cb:56:e3:ae:2f:b5:e2:8c:09:89:76:06:71:
         86:a1:0b:96:3c:8f:7a:89:7d:0f:b5:55:98:3f:21:4d:24:44:
         d2:ae:ec:9f:91:1c:10:5d:8f:f5:5e:9c:02:65:74:b5:3c:50:
         48:ca:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:32 2026 by rpki-client