Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
File:                     rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json)
Hash identifier:          u+QKJhhMYvF85jToWCeLUzWylB8JWCwayQWUD2lB5oc=
Subject key identifier:   C9:59:67:F5:63:4B:12:F0:DD:43:2E:AD:60:85:0B:59:8E:07:91:9F
Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
Certificate issuer:       /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
Manifest number:          01CA
Signing time:             Mon 27 Jul 2026 05:25:11 +0000
Manifest this update:     Mon 27 Jul 2026 05:25:11 +0000
Manifest next update:     Mon 03 Aug 2026 05:25:11 +0000
Files and hashes:         1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: Vg58sxa+6FgXscSD/V9225muhgDJTG5A52CHQEJTk/U=)
                          2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: Z1cqE+byBhamVYt8m6TD+SMQZ7V+S/UmeqhVRsfA3MA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl
                          rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
        Validity
            Not Before: Jul 27 05:25:11 2026 GMT
            Not After : Aug  3 05:25:11 2026 GMT
        Subject: CN=6a66ebb7-01ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:e0:a0:de:bb:33:d4:12:d3:57:df:38:ef:
                    f1:cd:a5:ef:32:95:62:47:71:2c:ef:d2:93:b3:0c:
                    45:43:8b:68:cc:a3:07:8b:a1:ef:7f:6b:d6:6a:47:
                    1c:7c:66:d4:2f:c8:41:2a:60:ff:da:7e:8e:0c:ce:
                    6c:a4:14:d1:f8:97:79:39:60:55:d2:ec:ca:b1:37:
                    a9:6d:3d:d3:97:dd:bb:38:1b:85:e4:90:69:06:4c:
                    09:d1:de:b4:ce:d3:a0:7a:73:20:6d:2f:7b:a7:83:
                    ed:cd:ac:2a:10:ac:17:73:84:76:2d:a4:18:48:b3:
                    39:8a:19:eb:1e:bc:c3:3b:2c:e8:8b:95:57:11:e0:
                    ab:39:30:fa:d5:db:8c:d3:a7:45:99:89:83:6a:2d:
                    ad:2d:83:ff:e1:f8:4c:85:04:36:1b:c2:2f:97:d7:
                    27:6a:9a:a5:02:9d:36:5b:94:66:3c:c7:4c:6b:89:
                    3d:3f:47:e1:9c:7c:5a:f0:df:d9:e8:5d:11:96:2a:
                    c6:24:e2:54:33:24:cc:b0:69:de:58:33:90:d9:2b:
                    33:5b:41:07:1c:2a:cf:a8:6e:c9:fc:41:25:0a:96:
                    7d:a6:b4:f7:e1:b6:55:99:7a:60:0c:c6:1a:ac:7f:
                    48:1e:73:e5:b0:e9:06:0f:8e:ad:41:e6:85:5f:b1:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:67:F5:63:4B:12:F0:DD:43:2E:AD:60:85:0B:59:8E:07:91:9F
            X509v3 Authority Key Identifier:
                keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:22:99:2e:13:7c:d7:79:17:97:54:8b:dd:9c:fd:00:c5:0d:
         ac:cd:ff:55:45:21:5d:27:40:4c:20:ec:79:b2:d1:ec:e8:a2:
         7c:50:b6:8b:de:bf:0c:e9:93:4f:cb:c3:30:45:db:aa:6e:18:
         fd:e3:b0:c5:41:0c:2d:ca:0c:b4:f7:8e:29:13:42:da:ba:48:
         35:60:c3:c5:ad:62:78:c2:fa:a5:fc:92:0c:37:9a:2b:2e:c9:
         d4:f7:57:52:e6:a1:bd:e2:6e:22:9a:4c:9c:47:68:da:8f:db:
         22:71:bf:24:47:57:76:f5:d5:8f:c2:6b:44:25:2e:81:90:43:
         ec:a4:79:2b:d0:2a:65:a2:83:ae:cb:f6:3e:01:e4:f0:87:c2:
         d3:14:b0:d9:a6:bf:18:38:0e:94:5c:a8:c7:dd:8c:45:8d:17:
         e5:a0:66:a0:49:91:52:d0:09:18:08:f3:07:a1:19:e0:8b:b3:
         a5:70:c6:7c:06:55:84:60:55:16:ef:bd:18:7f:12:8e:ac:11:
         aa:59:c8:c4:22:83:87:7b:e7:c7:e9:75:d0:5b:c3:7d:2d:94:
         70:6d:ca:49:a7:1c:ab:56:6f:f2:f4:c8:e8:92:0f:2b:7b:b5:
         2c:0d:7a:dc:93:73:51:0b:18:47:6a:f8:6e:2b:ed:f9:b3:08:
         1e:0f:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:56 2026 by rpki-client