Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File:                     1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier:          EX0nultawwYeY1+lljINVbtP5+ggfklG/XgjPAAnfaI=
Subject key identifier:   7A:DF:93:47:41:F8:33:81:EE:66:B2:F0:75:2B:D7:3D:CB:69:93:64
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number:          85
Signing time:             Mon 27 Jul 2026 09:55:56 +0000
Manifest this update:     Mon 27 Jul 2026 09:55:55 +0000
Manifest next update:     Mon 03 Aug 2026 09:55:55 +0000
Files and hashes:         1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: 9PRbOlbK9wYDb/dWZfptmWKeGcpI+8pNr12e728VJYs=)
                          2: 2B7DA728397E11F19603F3529B833773.roa (hash: 6jcLP2Ff5kNHQzJq73ID1QGceVd0PGeFk+UxM9roUcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Jul 27 09:55:55 2026 GMT
            Not After : Aug  3 09:55:55 2026 GMT
        Subject: CN=6a672b2c-56d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:9a:d4:a0:20:d8:ef:7b:00:bd:8e:91:78:
                    2d:e9:b8:f0:cb:87:5f:10:38:8e:ed:c3:f0:29:4e:
                    b1:06:b1:01:ab:ad:cf:a9:34:14:82:e2:7d:c4:f8:
                    22:70:ce:b4:5f:c9:85:41:57:ff:0d:91:ce:46:c5:
                    f6:b2:f0:16:44:32:57:fe:12:8d:9e:9d:1b:82:e5:
                    a6:f4:b7:9d:13:34:54:3f:78:ee:db:85:e8:27:ca:
                    0f:3b:9e:9f:3d:5b:d9:b4:f0:e1:ac:39:5f:e3:25:
                    42:e1:71:2b:85:fa:01:4d:74:0f:ea:1d:9b:9b:13:
                    4e:fc:92:22:64:d6:bb:0d:ce:83:70:50:0a:21:37:
                    72:47:a7:bc:a6:ab:13:33:ad:ba:06:05:6b:ec:9a:
                    6d:52:ac:74:00:b1:a7:eb:12:5f:35:e9:c4:c4:9b:
                    e6:80:fc:96:57:ed:af:fb:8c:d4:29:5c:61:91:06:
                    7a:59:30:92:fc:66:95:d0:ae:e4:30:1b:11:a4:bd:
                    60:e8:4e:65:26:01:ba:05:42:dd:f3:90:80:00:23:
                    b2:b0:72:47:d4:64:61:bc:5b:0d:39:70:5f:24:f9:
                    59:74:6a:96:17:bb:76:a3:a9:99:91:cd:96:8c:e5:
                    7c:a8:ec:51:5f:55:52:1a:7d:5f:26:a3:f7:95:bd:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:93:47:41:F8:33:81:EE:66:B2:F0:75:2B:D7:3D:CB:69:93:64
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:45:ba:98:8f:4b:86:57:57:04:5c:75:58:f9:01:e8:f4:79:
         f9:43:e0:76:84:f7:bf:c8:a1:26:10:0e:a5:41:ba:3d:85:e0:
         e9:1b:f3:1f:d9:ab:78:a9:cd:8d:ac:67:83:57:cf:47:c5:78:
         c0:d5:3a:37:6f:c0:a0:53:68:69:d8:1d:85:00:be:b3:83:4a:
         f6:b5:30:b5:ba:43:e5:41:82:e1:1c:ff:89:ca:8e:32:56:86:
         1b:d1:67:2c:a7:67:11:ce:9e:3c:66:ae:90:d1:d3:a0:f8:b8:
         2e:48:08:cc:67:a7:4e:c9:b3:b8:aa:22:c5:18:82:03:74:ad:
         57:57:b1:61:90:83:1b:a3:33:b8:d9:c4:79:a0:88:d0:b0:ce:
         f7:66:4d:52:a6:61:7e:c9:50:2f:e8:d5:b8:ca:6b:90:49:a9:
         2b:12:48:25:65:62:a5:b6:c2:0f:e3:4e:bc:ba:1b:e2:a2:0f:
         7b:3a:3b:aa:b8:5f:e4:a7:30:28:8f:76:b8:b7:28:37:fe:8e:
         a9:2d:d8:2d:c0:c5:64:3f:ed:0f:15:51:5d:af:4e:dc:08:8d:
         5b:70:74:b0:c3:73:ea:9a:e4:73:54:f5:cd:37:3a:9b:d8:eb:
         d6:7f:f8:e5:e3:59:be:39:e3:67:c1:e9:0c:73:a5:88:34:c0:
         ff:76:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:42 2026 by rpki-client