Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File:                     Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier:          6amM+W70/+K4z+a5aFV08T0ApQR3TUyWmxOhVLTrIeA=
Subject key identifier:   7D:0A:B7:AD:40:F7:33:27:8C:30:75:6E:87:8F:1A:82:68:9E:46:94
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer:       /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number:          085C
Signing time:             Tue 28 Jul 2026 21:20:12 +0000
Manifest this update:     Tue 28 Jul 2026 21:20:11 +0000
Manifest next update:     Tue 04 Aug 2026 21:20:11 +0000
Files and hashes:         1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: tYA27S0AjbdZo3645J96in6mfjVm9szFGWUsmU5eHwc=)
                          2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
        Validity
            Not Before: Jul 28 21:20:11 2026 GMT
            Not After : Aug  4 21:20:11 2026 GMT
        Subject: CN=6a691d0b-ad34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:e3:9a:36:e7:d0:ba:5c:4d:ec:37:43:1a:
                    8d:8b:ad:a1:35:dc:f9:c6:e0:2f:56:9f:1a:6f:b2:
                    04:6b:d4:08:4a:b8:2e:fa:b3:a3:34:ec:4d:ac:a6:
                    ef:98:90:68:57:61:7e:88:cd:5e:ca:b2:51:82:68:
                    fd:53:84:ff:bf:4f:9c:d2:56:af:06:e8:c5:8c:33:
                    eb:f8:bf:73:5e:18:82:ea:c5:fe:c2:6b:3e:bc:15:
                    b0:24:d5:cb:a5:64:54:3b:73:b0:2c:4f:d8:48:26:
                    59:54:f9:5d:fc:bd:0e:d1:1d:0e:b0:2f:03:2f:bb:
                    f4:46:3a:cc:3a:1c:26:04:d9:73:ff:e6:6d:12:5e:
                    35:23:44:fc:0b:bd:e3:62:e8:48:bf:dc:3d:b5:c2:
                    86:a4:dd:ad:57:20:4e:26:89:e5:cb:ab:08:89:44:
                    ee:b9:34:67:7d:55:21:48:2e:0e:cb:79:58:1a:35:
                    2a:7a:33:d5:a8:71:cc:2f:18:42:7b:80:4b:72:48:
                    c8:ec:43:5f:89:03:d7:a3:2c:44:5a:28:dd:80:b2:
                    e8:86:0b:6e:60:3d:6c:bc:cb:bb:78:aa:13:52:42:
                    93:03:3a:e5:c5:03:02:49:50:3a:dd:4b:58:6d:48:
                    f4:d2:9a:29:08:f0:f9:c6:4a:e2:d2:1d:ce:09:4c:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:B7:AD:40:F7:33:27:8C:30:75:6E:87:8F:1A:82:68:9E:46:94
            X509v3 Authority Key Identifier:
                keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:2f:09:ff:fd:43:76:fc:6e:7a:ab:f0:cb:ee:b7:a1:fd:06:
         2f:9b:17:e9:5f:49:69:56:d8:73:77:05:03:94:41:a1:ca:be:
         6b:5d:a4:77:6c:90:26:29:aa:b8:e1:97:4c:49:b1:d3:35:d6:
         d7:5a:67:72:08:45:00:62:f7:75:6d:5f:d0:a9:7f:d0:8d:79:
         cf:38:65:cf:ae:3f:96:a6:9c:c0:fb:a2:2f:07:87:38:be:60:
         a5:8c:33:ce:fd:41:1b:28:53:11:95:b8:e6:09:8b:35:41:20:
         35:e3:85:f1:76:d1:c6:80:a3:9b:d2:65:ad:49:90:f4:b5:0a:
         5a:42:03:ef:63:e4:00:0c:cb:1d:f8:61:57:77:4a:aa:fa:0d:
         31:59:72:bf:b4:d6:fa:ca:aa:a1:6d:3b:b2:3d:a8:ef:7b:de:
         19:81:e1:ef:28:74:12:89:c5:5f:b2:e3:d8:25:1e:3d:d6:b9:
         11:f3:be:dd:a9:cd:84:01:3d:6b:af:4c:77:cf:22:1e:f1:58:
         65:d1:dd:fa:7a:ff:ac:cc:73:f8:d3:74:06:0a:f7:64:ce:d4:
         c2:7a:65:96:ec:88:24:e9:0a:a8:bf:96:c6:62:f4:04:5c:aa:
         97:1b:bc:af:c8:20:8d:90:05:d0:c3:d3:f1:21:6f:af:bc:8b:
         9e:ae:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:01 2026 by rpki-client