Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
File:                     _jiW4ypTasqUGSZZYmVzarowoWA.mft (raw, json)
Hash identifier:          cM2xcKh8ZCX9d9R2L5gzFKm1ZJttTnzCf6Ha/jXBlNg=
Subject key identifier:   3B:23:79:EA:58:97:7C:44:A4:74:AE:A8:B0:12:E1:C8:07:01:16:96
Authority key identifier: FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60
Certificate issuer:       /CN=A91629D4/serialNumber=FE3896E32A536ACA941926596265736ABA30A160
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
Manifest number:          0A
Signing time:             Mon 27 Jul 2026 11:36:50 +0000
Manifest this update:     Mon 27 Jul 2026 11:36:49 +0000
Manifest next update:     Mon 03 Aug 2026 11:36:49 +0000
Files and hashes:         1: _jiW4ypTasqUGSZZYmVzarowoWA.crl (hash: 964SaP7SPL/vgWS3sY5G29/1p9lc4oxBsSZ/xPWNIkE=)
                          2: E89A614284AC11F1A2853A1C8EA30FBC.roa (hash: VPhwajy+N2wSuiXdOPatR57VMIgQE7fhTICmlszMMqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl
                          rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629D4, serialNumber=FE3896E32A536ACA941926596265736ABA30A160
        Validity
            Not Before: Jul 27 11:36:49 2026 GMT
            Not After : Aug  3 11:36:49 2026 GMT
        Subject: CN=6a6742d1-0521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:b9:3a:60:74:ec:d8:65:41:8d:97:36:cf:
                    a7:35:41:ee:85:3d:a0:6e:16:67:a1:e5:35:bf:dd:
                    2b:79:95:26:fa:01:f0:6e:83:11:60:e2:91:b3:9c:
                    02:48:9a:0b:72:e0:2e:e1:a5:de:12:85:7a:38:21:
                    00:f7:f1:bd:ad:be:02:c1:0b:d9:de:5b:d8:d1:ad:
                    bc:43:9f:5d:41:68:2f:17:75:bd:c6:c6:81:5c:5b:
                    2a:af:fe:24:22:1f:57:a6:e8:bd:c6:cf:b6:43:b9:
                    4e:a1:46:a3:9d:c5:2a:9a:f5:00:7d:66:bc:cf:c6:
                    92:f4:22:d2:41:96:4a:01:3a:05:63:d9:58:10:04:
                    5c:5a:b7:01:0e:4c:d3:82:0a:1a:99:8f:97:18:61:
                    b1:4e:01:be:07:26:0b:13:d1:38:5e:50:76:49:3f:
                    1c:f3:7c:38:a7:29:74:0c:77:ff:55:05:79:3c:8c:
                    c7:1a:28:1f:ec:d5:19:d8:23:88:df:5c:a3:a0:de:
                    7f:1f:2c:79:32:40:76:7b:78:18:42:29:67:38:cc:
                    a6:0f:ef:df:d5:29:54:b5:66:73:64:7e:0c:6d:a2:
                    f3:58:a4:48:2a:3f:b2:fe:52:67:2d:6b:3d:2f:a6:
                    0f:d2:9f:5c:24:10:60:2e:ad:89:96:9c:e1:76:62:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:23:79:EA:58:97:7C:44:A4:74:AE:A8:B0:12:E1:C8:07:01:16:96
            X509v3 Authority Key Identifier:
                keyid:FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:e9:a7:7a:bb:d9:b4:14:b7:29:47:40:6d:d3:ad:81:09:
         5d:96:6e:90:e5:33:48:62:32:13:5f:38:a5:d1:9c:f4:41:b0:
         45:ed:cc:a8:f1:51:08:53:8b:8c:4f:3e:1a:11:06:f7:75:f9:
         02:fc:02:e4:21:2d:f6:91:5c:b5:41:73:ec:01:bf:c1:9c:77:
         7a:42:a6:29:9c:86:bd:f7:d7:b2:45:8b:b6:09:70:00:73:ca:
         5d:40:68:19:94:22:14:7e:8a:8e:57:59:d0:42:6d:b3:cc:1e:
         12:04:c5:f3:c0:73:ef:42:f2:56:71:b0:0f:69:90:69:1e:58:
         dd:90:de:84:e1:dc:c0:56:0a:7f:64:85:72:8d:8a:e7:72:7c:
         db:aa:c9:3d:5d:68:0f:ba:88:9f:40:62:7c:d4:4c:c6:dd:d2:
         e2:6a:ae:1a:d9:15:18:9a:88:3a:d4:fe:e6:d4:37:82:9c:bb:
         5a:64:d7:05:5c:68:28:81:e0:5c:d8:11:5a:2f:3a:ab:06:8e:
         8f:35:fd:3d:0a:b0:01:8c:14:71:b6:38:bc:3e:6a:04:64:8b:
         a6:18:91:21:3a:93:5b:3c:4b:d6:08:4a:91:ee:85:6b:9e:c5:
         23:5a:7a:96:ba:2d:1c:ff:79:ea:a2:8e:95:2f:64:60:b4:d3:
         a4:bb:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:59 2026 by rpki-client