Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          V6vm2TwfKfb5tm+pwHDhAVIZU1DzE9+l3aVfruvjMi4=
Subject key identifier:   A2:85:1F:81:97:D5:0A:A9:F7:07:EF:41:1F:60:12:38:30:10:06:44
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          01D9
Signing time:             Mon 27 Jul 2026 05:14:57 +0000
Manifest this update:     Mon 27 Jul 2026 05:14:56 +0000
Manifest next update:     Mon 03 Aug 2026 05:14:56 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: rESQhUG49PY+DTHT1NSM29NhtPqoz4thzsIQZApzuC0=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: Jul 27 05:14:56 2026 GMT
            Not After : Aug  3 05:14:56 2026 GMT
        Subject: CN=6a66e951-61e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:14:c9:53:7e:23:65:00:5f:06:d6:86:b8:
                    f7:6c:18:c3:58:64:fe:ec:a9:8c:ec:2e:b4:6a:0b:
                    97:59:d8:e5:4e:df:ed:99:0c:a6:e8:91:05:81:51:
                    92:eb:9d:af:0c:fa:21:1d:43:9b:e1:51:80:81:9e:
                    36:3b:1d:da:c7:b7:cf:1e:bb:71:24:c1:50:a4:3c:
                    54:a1:bb:c4:9d:59:62:1b:08:32:63:97:d5:0a:b5:
                    b9:7e:00:ad:48:f9:17:ee:b8:10:1b:be:06:30:2c:
                    5f:be:fb:ed:e7:ab:4e:11:f6:ae:57:ec:31:d9:07:
                    56:c5:c6:ff:c4:dd:d0:a4:9d:ed:1c:85:4b:10:36:
                    3c:ca:29:2e:52:81:19:72:7d:1d:4f:4d:84:de:4d:
                    f7:fc:3a:4a:8b:76:3b:29:e8:c9:ec:f9:71:c5:ca:
                    37:60:14:ef:5a:95:3a:ec:1c:8b:3e:5f:73:bf:b9:
                    bb:e2:38:0b:91:72:de:9b:67:2d:0f:ac:68:40:d7:
                    57:16:ff:11:0b:4d:69:e7:7e:c8:93:05:73:4a:2d:
                    7b:6d:b0:5b:f6:d8:4e:cf:a0:61:f2:61:89:be:d0:
                    51:05:33:ce:48:d6:f0:3a:1e:92:05:fb:fa:59:4d:
                    4d:47:67:a6:f3:ac:07:4d:a5:c3:da:65:f4:4c:bb:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:85:1F:81:97:D5:0A:A9:F7:07:EF:41:1F:60:12:38:30:10:06:44
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:50:c4:b3:f1:18:25:25:1d:37:8e:5d:1c:b5:26:dd:e7:
         5a:1e:ee:08:15:6f:74:8a:5f:96:ba:f4:28:f0:f6:ae:1e:f9:
         82:ce:05:5e:4e:23:06:a5:31:14:1a:28:9e:f0:3a:88:15:cd:
         6c:db:31:c8:e5:52:69:25:3d:d7:c7:43:3c:de:02:a8:0d:41:
         78:10:98:e5:4f:4c:9b:74:ad:ed:49:d2:a1:e4:c7:6e:b5:20:
         1a:62:f0:85:2a:21:75:22:82:8a:db:15:1d:1b:d3:49:8d:6f:
         51:09:85:7c:3f:2b:b7:1a:89:79:51:d0:e7:94:da:1c:bb:6a:
         3a:cb:0e:d6:65:02:ba:9c:40:38:c3:c1:a5:e7:63:ac:05:cd:
         2c:59:7b:79:3f:cc:41:07:f0:d6:f6:eb:40:cb:0d:4d:fb:dd:
         ef:43:39:a1:2a:79:75:19:51:d5:a6:0c:d3:2a:95:c8:ed:55:
         0a:18:60:cd:b5:96:f0:8b:c6:6b:e1:15:f5:f7:09:7f:92:a5:
         41:aa:be:1b:01:a5:09:5a:6c:36:6b:b2:73:bc:37:72:f3:06:
         f7:76:02:de:d0:94:c0:d0:16:f1:17:10:ad:7b:6e:f9:ce:f9:
         89:ba:5a:e3:4f:64:63:b6:87:c9:69:2f:e4:84:d5:2a:51:27:
         0a:ac:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:30:23 2026 by rpki-client