Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File:                     2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier:          9oxC1PwcJB2D3qNKsfyRde+oz7UuYsy+hvt4OyzgeyE=
Subject key identifier:   A7:01:BD:B4:6F:EF:52:6F:C7:39:B7:23:06:4F:EF:B0:ED:A4:AB:32
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer:       /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number:          031B
Signing time:             Mon 27 Jul 2026 02:17:46 +0000
Manifest this update:     Mon 27 Jul 2026 02:17:45 +0000
Manifest next update:     Mon 03 Aug 2026 02:17:45 +0000
Files and hashes:         1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: kwMfqBCQ5/oPLLXiyQZigfSb70VoIGVKEtHNI9NnRvs=)
                          2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: tluEXRfv1yfj6g2yuqwe5cSshlgt2BkkJs3C6pzFBNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
                          rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
        Validity
            Not Before: Jul 27 02:17:45 2026 GMT
            Not After : Aug  3 02:17:45 2026 GMT
        Subject: CN=6a66bfc9-7c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:c5:87:79:5d:9a:2a:d3:d7:1f:69:db:be:
                    9a:10:0b:11:d1:75:30:82:f0:43:ab:13:2d:0f:ca:
                    23:95:29:eb:07:c6:a0:d1:66:51:ec:ec:09:e3:6c:
                    7b:83:ce:e5:d2:26:a2:48:dd:70:9c:24:3b:bf:24:
                    e3:09:1b:2e:2b:4f:22:f4:65:bd:5b:a8:7e:83:e6:
                    3e:25:13:9a:33:3f:a3:d5:83:e0:23:97:2b:08:aa:
                    49:46:02:26:65:60:75:6d:5e:60:21:be:6f:0e:bd:
                    b4:90:37:c9:cd:7a:66:a4:83:68:37:d3:fb:cd:62:
                    8f:8b:a3:45:6d:86:fe:24:0b:da:1a:91:82:8c:bd:
                    0a:e0:e3:fe:2e:a9:07:54:0f:68:33:a4:a1:09:84:
                    98:e6:8b:0e:e9:ba:29:1f:cb:31:6e:81:df:8a:29:
                    ae:49:63:a1:0b:eb:e6:16:84:2d:54:44:41:cb:07:
                    90:7e:34:07:ed:55:eb:85:d8:2a:3c:9e:3d:fd:1a:
                    5d:5f:3b:0b:fb:7e:34:80:7c:12:cc:53:0a:fa:61:
                    6e:60:0f:9b:f2:2e:92:39:3e:07:30:49:da:18:85:
                    84:93:87:04:78:13:dd:d8:b0:fb:f8:28:aa:85:77:
                    cd:54:3b:9a:b2:09:d4:1b:c2:71:b9:1c:03:53:00:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:BD:B4:6F:EF:52:6F:C7:39:B7:23:06:4F:EF:B0:ED:A4:AB:32
            X509v3 Authority Key Identifier:
                keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:18:6d:3f:fa:7b:70:ff:27:03:4d:9d:1d:05:da:b3:54:
         93:8b:b1:58:7c:b7:f6:d5:41:4e:5e:34:59:bb:c2:5d:6e:7d:
         d9:fb:4b:24:0c:42:73:b4:ac:4b:de:2c:9b:e8:43:0d:d7:95:
         46:ae:2f:9a:12:5c:56:e1:d5:a8:01:c2:82:82:c1:62:4e:4a:
         a9:62:3e:6c:f5:13:53:0d:6e:39:7e:70:d0:aa:c3:ea:7a:b7:
         53:d5:3c:c3:59:8a:f7:b0:3e:97:17:a5:c0:1c:72:4e:78:00:
         10:62:27:91:20:71:eb:77:b3:60:27:e3:7f:70:94:a2:99:40:
         61:36:98:91:39:96:e4:c9:6a:2a:79:cc:06:11:dc:62:86:c3:
         ec:8c:83:dd:46:4e:90:47:33:50:4d:02:ea:22:61:09:4e:47:
         b3:fe:55:9c:f1:ac:88:ad:9b:23:93:be:b1:44:de:d9:67:25:
         3a:69:e9:04:8c:f4:92:17:e0:12:c6:39:df:89:f3:29:d0:e3:
         dd:99:90:54:2f:bb:9f:21:55:82:5c:47:80:fa:17:54:57:bd:
         50:88:e6:13:96:69:ec:c7:8d:22:15:23:d8:88:09:62:ec:77:
         bf:d3:25:0e:6f:b1:29:a3:81:e9:31:4e:56:a3:87:e6:00:31:
         e5:2a:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:41 2026 by rpki-client