Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File:                     rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier:          zSbotyaLncSM1Fhmm8f/fxzJy7OnV79OIeD1Rg/7O0Y=
Subject key identifier:   2E:4E:BD:D0:AA:5B:18:01:1B:5F:F2:32:00:90:31:2B:E4:83:E3:CC
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer:       /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number:          0394
Signing time:             Mon 27 Jul 2026 03:01:16 +0000
Manifest this update:     Mon 27 Jul 2026 03:01:15 +0000
Manifest next update:     Mon 03 Aug 2026 03:01:15 +0000
Files and hashes:         1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: 7kDd3gPq3jzi4zUdEq+rSYjhmW3wyU88mZQtK1YtzmE=)
                          2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
        Validity
            Not Before: Jul 27 03:01:15 2026 GMT
            Not After : Aug  3 03:01:15 2026 GMT
        Subject: CN=6a66c9fc-f78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:3f:a4:8c:6c:9c:b9:31:c5:40:bf:8c:33:
                    a2:74:fc:f3:c5:90:ec:f8:6d:d9:22:88:68:d4:ce:
                    bb:ae:3b:c2:2c:f6:05:76:93:67:ff:50:c2:23:2e:
                    c3:2c:9e:85:27:b2:6d:a6:3a:22:81:76:27:a0:c6:
                    6a:15:07:c0:0e:42:99:ca:77:a7:ad:f2:22:c2:5b:
                    b0:af:ae:7f:a9:9f:66:a9:49:f7:85:d4:16:e1:59:
                    16:b2:0b:04:3e:fc:b6:a8:2d:86:33:d4:fa:db:96:
                    3a:c3:be:ff:bd:29:a2:1b:fd:fe:93:32:98:fa:0c:
                    5a:80:d7:fb:ac:bf:8f:92:f5:f1:3c:73:5e:15:46:
                    7f:2d:c5:94:e6:ec:15:31:df:a3:b1:bc:f0:9f:85:
                    0a:8d:94:2a:db:23:d4:a6:bc:9f:0b:d4:9b:a7:75:
                    13:e5:16:a7:67:b6:fa:fb:02:81:25:e9:cd:53:da:
                    76:32:4f:8a:26:fc:e7:b5:33:ea:3e:8f:91:28:f7:
                    f9:d1:44:21:c0:c7:29:a8:7a:1b:e1:62:5f:17:8c:
                    72:06:ac:4f:2e:55:c7:df:46:87:15:19:88:d3:4a:
                    70:87:f9:00:28:8c:52:3b:5a:89:d9:3a:4f:c8:4d:
                    e9:19:b1:59:25:96:e3:b4:6c:8f:09:a4:c6:b8:71:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:BD:D0:AA:5B:18:01:1B:5F:F2:32:00:90:31:2B:E4:83:E3:CC
            X509v3 Authority Key Identifier:
                keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:b9:a1:c4:42:23:fe:78:f3:95:b7:47:39:d4:90:45:23:
         07:94:ed:40:36:4f:74:2e:47:6d:22:b6:92:fd:7d:3a:ae:f6:
         53:d5:a3:c2:08:96:43:8a:eb:be:14:fd:8b:4c:7e:d5:e5:c3:
         8e:76:3a:0a:67:77:1d:26:0b:1b:c2:d2:2e:26:ff:8a:71:40:
         3b:dd:1a:0e:55:7f:78:6a:34:ab:20:ef:47:e2:05:f4:ca:58:
         c8:d4:e8:72:55:26:86:9f:cd:a7:39:c2:22:9c:02:5b:0e:74:
         d9:62:07:b3:ac:63:64:76:b6:1e:ec:9f:49:fc:f7:5d:48:2b:
         83:b6:ff:dd:27:a4:61:9a:b0:2e:b8:09:6d:7d:fd:a2:c4:7d:
         bf:16:5f:f0:fa:e6:e7:55:65:72:99:c2:93:ac:b2:6e:57:c2:
         93:c2:e0:6a:7b:c1:19:3f:a0:b4:bf:09:d4:07:f4:37:ed:30:
         11:b0:46:0d:37:ed:58:d7:d0:0d:a9:7b:58:35:d9:fb:68:56:
         71:4b:4e:7c:7d:eb:50:61:c1:5d:d0:b0:64:5d:b7:01:43:be:
         e5:d8:99:e3:d1:37:58:ad:ec:80:52:89:4c:cc:42:71:50:b8:
         6c:26:86:fb:81:a9:d2:b9:1f:a9:12:0a:87:ef:bc:c1:c8:c9:
         bf:9b:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:41 2026 by rpki-client