Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File:                     m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier:          FR8euCbPU4wa8lxW0vSlI06xAKTgg8cdMEgtCw9g3Xw=
Subject key identifier:   8C:AB:3E:BF:E2:6D:D1:B1:2F:2A:29:90:F4:0C:9D:DC:8E:BF:2B:90
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer:       /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial:       0927
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number:          0912
Signing time:             Tue 28 Jul 2026 20:39:36 +0000
Manifest this update:     Tue 28 Jul 2026 20:39:35 +0000
Manifest next update:     Tue 04 Aug 2026 20:39:35 +0000
Files and hashes:         1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: epmqrDaP3z8HUdnSjpktbSVLajfI5ApQZCJPAEO4rO0=)
                          2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: YPbeDjdDrkgdtJsPgvrwPZ2BBqcDiS5zZJirMIpSbAY=)
                          3: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=)
                          4: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: N+uHaG3MJr82cfnEajXUFCCao7Ru1SBdTbuDh04l7Ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
                          rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
        Validity
            Not Before: Jul 28 20:39:35 2026 GMT
            Not After : Aug  4 20:39:35 2026 GMT
        Subject: CN=6a691388-98ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:75:fc:2e:94:a8:1e:cf:67:f9:ef:19:91:
                    27:3d:02:bf:6b:07:5f:32:9d:37:38:a1:57:58:54:
                    15:d4:c6:09:b5:9b:c1:fe:28:80:3a:fb:91:4c:0c:
                    0d:a4:a3:8a:43:71:f3:38:c4:26:a2:a3:06:54:87:
                    0c:91:90:d5:24:e1:a1:d6:48:d1:5d:15:10:06:34:
                    50:60:54:af:43:fc:cd:3e:70:b4:c9:d2:ea:e8:59:
                    fd:dd:7e:53:72:70:67:53:64:1d:b3:7e:fc:9d:b3:
                    de:b6:10:4f:48:90:29:99:43:b8:b9:e9:af:68:cb:
                    5d:42:9c:e4:a3:e3:a3:e5:c6:a8:0f:2c:d0:28:44:
                    fa:69:51:9a:86:4d:40:64:6b:ae:3b:6a:51:a1:5b:
                    ae:6a:4f:e7:b1:db:d8:a4:21:c5:b9:a0:6c:6f:5e:
                    fe:a5:9b:e2:36:7b:b7:c5:af:a9:f4:98:6b:a0:d0:
                    d5:0d:4f:ea:c2:89:8a:a5:80:ed:75:f2:da:c4:32:
                    10:ae:4d:37:31:20:fb:3c:c5:84:bf:7a:f0:f8:03:
                    5e:90:b4:3f:df:9d:9d:49:48:b0:14:a7:47:38:eb:
                    6e:ec:69:15:74:0c:c6:e5:07:e4:58:07:42:c5:82:
                    e1:48:48:70:38:dd:34:ed:8f:c6:de:1a:61:48:ed:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:3E:BF:E2:6D:D1:B1:2F:2A:29:90:F4:0C:9D:DC:8E:BF:2B:90
            X509v3 Authority Key Identifier:
                keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:d3:d6:fb:cc:c3:55:7e:88:ac:6b:1d:95:06:50:5c:30:
         84:6d:43:fd:4d:cf:d2:2f:cd:a9:ce:f9:2a:e3:15:56:6c:ef:
         68:a9:c5:ec:6f:c0:08:c9:dd:0c:c2:60:5c:b7:ed:5d:a7:a6:
         13:e8:ae:3d:35:9d:e2:f4:83:fe:00:10:fb:b3:17:fe:1b:c5:
         65:95:c7:b7:90:2f:fa:75:5c:fb:a7:76:c2:a6:33:60:ec:63:
         9a:84:b9:9b:2c:06:27:12:eb:22:1f:08:e5:99:4e:ff:8d:5a:
         ff:80:d4:0c:5b:d0:b5:d3:d6:50:ff:12:a7:ea:ae:4b:7f:ae:
         8c:7c:30:6a:27:88:e1:b9:ea:9f:d5:cb:7a:9b:f2:43:1c:5e:
         2e:21:aa:4f:11:1c:0e:fc:a1:14:22:01:97:2f:dc:67:e3:88:
         82:39:fc:f6:64:77:6a:90:da:d3:5d:a2:a9:fb:d9:dc:df:7e:
         76:90:d5:e4:fa:82:b6:a7:63:b3:f8:f2:1d:39:6a:8f:05:ba:
         5e:01:00:0f:6d:42:4e:c9:12:6c:c9:5e:64:1c:86:a7:b6:5c:
         4c:60:07:e4:a9:64:f2:bd:6f:4b:d6:0e:89:0d:16:59:ff:34:
         15:c7:89:b3:9d:0b:3f:86:01:fd:3e:ef:4a:39:54:ba:a6:b7:
         ed:76:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:03 2026 by rpki-client