Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
File:                     cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json)
Hash identifier:          Qxn/EmxQBXyfkyb9Msqbu1KS/x5nj6g0PxiSb4MuPNU=
Subject key identifier:   1E:AF:BA:67:FB:E5:E2:CD:59:93:1E:81:09:49:3C:FC:E3:69:CD:51
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Certificate issuer:       /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial:       0D7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
Manifest number:          0D72
Signing time:             Tue 28 Jul 2026 18:06:24 +0000
Manifest this update:     Tue 28 Jul 2026 18:06:23 +0000
Manifest next update:     Tue 04 Aug 2026 18:06:23 +0000
Files and hashes:         1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: Mx1GvTYJtyraZTloOzz55ogN5fe2UPfmaIhBhQsl73c=)
                          2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: FgkzVKONq3CKLOrwQ7vibERQJu7ifecHOE3C3Y19pHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
                          rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3451 (0xd7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
        Validity
            Not Before: Jul 28 18:06:23 2026 GMT
            Not After : Aug  4 18:06:23 2026 GMT
        Subject: CN=6a68ef9f-06ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:af:d5:a0:5b:51:7d:1a:d7:c1:fa:40:63:
                    04:a8:8c:76:03:18:e4:36:e2:3a:63:12:54:ee:77:
                    80:c8:3e:a0:81:b0:66:ce:a2:f6:42:8a:09:1a:a1:
                    95:2b:9b:4a:27:80:3b:e1:c0:80:9f:b0:d1:65:63:
                    3d:0f:f3:62:c7:30:be:94:6c:23:cc:2e:ec:4b:bd:
                    49:36:fa:52:d6:62:3f:21:fc:94:81:19:25:7a:85:
                    db:57:4b:1d:d9:b3:54:f2:16:4c:81:b3:e7:eb:d5:
                    f9:7a:23:42:c8:79:fa:ae:73:27:88:31:b4:b6:5d:
                    96:09:ed:b1:f9:75:5b:41:42:fe:e1:49:67:c9:6e:
                    76:f6:2b:da:79:a8:59:43:6e:f1:6b:a6:50:48:e3:
                    49:32:9d:af:4a:36:00:2e:e3:ed:63:ee:ef:1c:62:
                    08:a7:6a:d9:98:1a:be:a9:f4:23:cf:16:91:0c:76:
                    79:24:03:d2:75:52:31:64:0c:93:3c:d5:03:c5:ed:
                    b2:aa:c5:05:78:4a:35:98:4c:9b:93:51:a7:eb:0f:
                    01:a5:c4:05:27:0f:94:e1:db:bc:60:86:16:2f:1f:
                    22:30:8f:db:c2:9f:dd:47:45:e6:26:0d:e4:52:2c:
                    47:82:05:86:4e:bf:72:28:9f:62:5e:1c:f1:da:13:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AF:BA:67:FB:E5:E2:CD:59:93:1E:81:09:49:3C:FC:E3:69:CD:51
            X509v3 Authority Key Identifier:
                keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:38:8f:6d:aa:0f:75:f8:5a:b3:cd:0a:f5:77:4b:d8:eb:
         1d:90:5c:51:b4:24:cd:a1:7d:37:09:cb:de:68:f1:2d:50:b2:
         d4:db:d5:53:fc:fd:f3:41:89:90:a9:91:12:af:05:e2:4e:6d:
         37:21:1e:bc:9e:e0:c4:4a:4b:5f:2a:2c:82:c6:85:7a:61:8c:
         38:52:9b:25:6a:e8:59:8f:65:c4:a0:38:67:30:e5:72:b4:8b:
         cc:ad:9c:07:fb:eb:fa:dc:0b:c7:0b:95:63:b7:cc:74:bf:87:
         7a:2b:3b:5c:89:06:45:b6:57:1b:f9:4e:26:41:41:f1:3f:3a:
         23:c8:63:a9:86:22:06:ec:d1:5e:d5:a1:d8:f2:e8:71:49:16:
         33:72:96:95:3d:c9:11:ec:58:e3:a7:15:68:a8:f6:03:86:74:
         7d:d1:55:81:b5:9f:a5:76:80:5b:cf:77:0e:02:0a:fc:ce:ad:
         5f:ee:3b:02:7f:f8:22:fc:9b:cb:96:57:fa:5b:a3:c3:cb:44:
         9b:0c:26:61:9b:b2:2d:f7:75:05:86:20:bd:f5:df:2d:f1:04:
         45:e2:3a:ae:73:05:18:f5:6e:e1:99:d2:e3:2b:a8:24:e9:7e:
         72:6e:b2:b2:bb:09:cd:ca:b0:29:55:97:b0:a6:d0:1b:62:ce:
         f6:2f:f8:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz
RDExNEU1MzYwHhcNMjYwNzI4MTgwNjIzWhcNMjYwODA0MTgwNjIzWjAYMRYwFAYD
VQQDEw02YTY4ZWY5Zi0wNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlKv1aBbUX0a18H6QGMEqIx2AxjkNuI6YxJU7neAyD6ggbBmzqL2QooJGqGV
K5tKJ4A74cCAn7DRZWM9D/NixzC+lGwjzC7sS71JNvpS1mI/IfyUgRkleoXbV0sd
2bNU8hZMgbPn69X5eiNCyHn6rnMniDG0tl2WCe2x+XVbQUL+4UlnyW529ivaeahZ
Q27xa6ZQSONJMp2vSjYALuPtY+7vHGIIp2rZmBq+qfQjzxaRDHZ5JAPSdVIxZAyT
PNUDxe2yqsUFeEo1mEybk1Gn6w8BpcQFJw+U4du8YIYWLx8iMI/bwp/dR0XmJg3k
UixHggWGTr9yKJ9iXhzx2hMKLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6vumf7
5eLNWZMegQlJPPzjac1RMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0
QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1
VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa
by1pOWNQaGRaSlE5RVU1VFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFX84j22qD3X4WrPNCvV3S9jrHZBcUbQkzaF9NwnL3mjxLVCy1NvVU/z980GJ
kKmREq8F4k5tNyEevJ7gxEpLXyosgsaFemGMOFKbJWroWY9lxKA4ZzDlcrSLzK2c
B/vr+twLxwuVY7fMdL+Heis7XIkGRbZXG/lOJkFB8T86I8hjqYYiBuzRXtWh2PLo
cUkWM3KWlT3JEexY46cVaKj2A4Z0fdFVgbWfpXaAW893DgIK/M6tX+47An/4Ivyb
y5ZX+lujw8tEmwwmYZuyLfd1BYYgvfXfLfEEReI6rnMFGPVu4ZnS4yuoJOl+cm6y
srsJzcqwKVWXsKbQG2LO9i/4yw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:08 2026 by rpki-client