Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File:                     aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier:          2yTSXRQ43FIiRhmAj9EVqclBUdtvtVf7xUR7KJg7Uoo=
Subject key identifier:   F7:18:F0:F9:C5:E2:FD:70:95:D3:D1:13:48:C8:1E:F0:37:90:82:87
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer:       /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number:          012A
Signing time:             Mon 27 Jul 2026 07:42:09 +0000
Manifest this update:     Mon 27 Jul 2026 07:42:09 +0000
Manifest next update:     Mon 03 Aug 2026 07:42:09 +0000
Files and hashes:         1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: 0G9aQqHo2YC8yg1PCrun1oK2Zf3vwB/3pL8hKIYRHaU=)
                          2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
                          rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
        Validity
            Not Before: Jul 27 07:42:09 2026 GMT
            Not After : Aug  3 07:42:09 2026 GMT
        Subject: CN=6a670bd1-edb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:f0:6f:44:07:14:41:0a:f4:f3:e8:02:a4:
                    40:92:d0:2c:9b:1f:5c:62:26:a0:09:1c:de:1d:06:
                    dd:7d:2a:31:47:ee:9d:4f:c5:eb:59:fe:43:51:71:
                    a7:b8:87:0f:78:37:53:79:c7:57:39:e5:d2:b0:24:
                    86:de:de:ca:db:19:dc:bd:e8:11:43:38:19:1d:06:
                    99:80:15:57:24:72:55:a5:23:d8:40:a6:dd:62:8d:
                    55:b0:76:33:51:76:cd:cb:58:01:7b:8d:df:40:8e:
                    97:f4:02:6b:2d:e4:e9:c9:4b:36:12:f6:2e:ca:99:
                    a7:3e:d6:d5:d2:69:b2:f7:24:12:59:f3:2b:dc:e4:
                    38:61:13:d7:43:b2:83:0d:45:18:1a:06:b0:69:e8:
                    4f:ae:ce:f9:cb:28:3e:17:f4:19:45:07:c6:98:d6:
                    cb:55:ab:80:c1:fd:65:32:a0:fd:f3:89:1f:f3:1e:
                    3f:ea:fd:69:7a:9c:94:20:56:d4:3f:d7:75:58:ee:
                    e0:71:6e:0a:c0:c9:13:8e:bd:a0:15:90:50:f0:25:
                    27:ca:79:45:0e:68:fb:7a:12:81:4a:26:31:e3:7b:
                    1f:6e:12:8f:78:75:7e:9a:20:18:72:e8:df:0f:67:
                    7f:cc:f9:12:fa:64:64:03:28:a9:a2:c0:9c:f1:71:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:F0:F9:C5:E2:FD:70:95:D3:D1:13:48:C8:1E:F0:37:90:82:87
            X509v3 Authority Key Identifier:
                keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:38:14:7a:34:1c:1a:20:f5:4a:b3:ca:ff:27:c0:24:72:db:
         7b:9b:19:14:11:e0:29:b2:9d:42:49:52:35:18:44:cb:23:f7:
         2c:cb:f0:ae:f9:f3:72:ed:33:65:14:e9:71:a2:54:51:6b:d7:
         84:1e:09:d0:eb:8f:ed:b2:06:a6:db:29:7b:b7:78:d8:cc:31:
         e7:72:0a:db:10:5a:6c:10:fa:b8:32:3e:3e:ab:15:22:14:ae:
         48:40:5b:f9:1c:58:8b:01:7a:36:0f:42:b7:41:6f:fd:2c:00:
         a9:5c:d3:fd:e2:20:b1:b6:bf:67:91:b6:3a:f9:e5:0f:bd:ef:
         a4:45:8d:36:25:9c:a5:49:1e:01:22:7b:8b:49:4f:0b:9c:0a:
         a0:a0:fc:e9:a2:0e:e2:12:da:63:38:4a:86:75:61:65:46:c7:
         b1:95:de:13:03:55:79:ff:d8:02:d9:04:ff:25:9c:01:d5:ec:
         24:13:62:b4:4d:d4:28:5d:d8:e1:e6:c4:8d:47:07:aa:a7:35:
         6e:25:97:aa:a2:fb:43:62:38:af:ca:49:50:96:b1:7d:17:c7:
         49:6e:ad:df:13:8c:ff:4b:6a:08:e9:2d:74:d3:e5:17:77:92:
         c5:ef:e0:22:e0:86:90:60:ba:25:b5:d6:97:8c:ea:9c:c4:c8:
         12:02:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:44 2026 by rpki-client