Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File:                     M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier:          MXWPjSdn3dZiA7fMc2XBePPehjk+wvj3/yTZdsHkWrk=
Subject key identifier:   F1:D1:E1:37:3A:ED:EA:77:1D:FD:E5:D4:3D:45:D5:C1:FD:17:EC:FA
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number:          96
Signing time:             Mon 27 Jul 2026 09:35:29 +0000
Manifest this update:     Mon 27 Jul 2026 09:35:28 +0000
Manifest next update:     Mon 03 Aug 2026 09:35:28 +0000
Files and hashes:         1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: zJvapU7M+ygmdKiW7gFWcq7citI4EGhu0s51/lLNVa4=)
                          2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: Jul 27 09:35:28 2026 GMT
            Not After : Aug  3 09:35:28 2026 GMT
        Subject: CN=6a672660-8b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:66:80:c9:e0:b4:b9:26:94:a9:ea:9b:e9:36:
                    42:f1:11:63:aa:90:f5:c6:0b:1d:99:8d:8a:5f:e3:
                    0c:a7:8a:d4:07:1f:30:df:6f:ea:c8:7b:ff:55:13:
                    0d:46:ac:91:c3:a9:e1:d9:9d:c7:ab:93:0f:2f:5b:
                    7f:48:b7:54:ee:7e:e6:c5:b4:6b:e3:66:23:ab:10:
                    23:cb:ad:5d:53:68:c1:f6:9d:64:da:20:83:ad:5f:
                    9c:0d:32:ca:56:ba:82:f2:86:c2:33:27:1f:e6:a8:
                    f1:31:ec:34:3f:cc:67:b8:07:75:dc:bf:fa:5c:42:
                    39:4a:20:13:75:26:87:18:ec:85:5e:90:a2:13:16:
                    73:56:97:96:93:79:f1:8c:5d:eb:ca:50:d6:61:69:
                    31:37:f1:26:7c:57:74:9e:1d:da:a4:bf:e8:24:80:
                    08:18:66:4f:70:d2:aa:7a:b1:10:ff:13:13:d2:7e:
                    86:fa:46:5e:82:e0:22:9d:8c:3b:26:3b:4d:d4:b3:
                    da:53:e7:4a:2d:1d:2f:6c:79:6a:3a:6b:86:a7:90:
                    2e:19:5d:7d:ed:ac:e6:57:58:58:7a:b4:a1:49:bb:
                    9d:12:40:67:a0:5f:3f:c9:b2:0b:48:e7:fc:db:b7:
                    22:0b:68:c6:85:43:79:9f:21:6f:0d:23:61:4e:3c:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D1:E1:37:3A:ED:EA:77:1D:FD:E5:D4:3D:45:D5:C1:FD:17:EC:FA
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:73:2d:09:a9:a0:4f:5f:83:38:44:5d:1b:e2:10:20:c4:7c:
         9a:ef:aa:ac:e8:fa:ea:08:51:f9:b1:a6:19:61:66:74:13:a9:
         97:dd:a5:8a:b6:de:58:59:fc:bb:fc:e9:6f:b0:85:68:a3:4f:
         44:33:96:aa:98:89:49:94:57:f8:db:04:a5:29:c9:2a:e7:92:
         aa:87:c6:d5:0b:84:02:c5:2f:fc:28:cf:1f:e9:5f:0a:1a:d2:
         d9:52:ac:40:6f:a8:4e:7f:0c:78:2e:ea:ed:d6:3a:61:82:fe:
         7c:e2:78:0e:45:91:e7:b2:6d:75:e3:26:16:1b:99:40:03:48:
         3d:ab:c7:9e:7f:b9:97:69:b5:ff:5e:d3:02:48:b2:95:26:2a:
         a9:a9:08:8a:b9:ab:14:d3:b5:c7:84:47:90:82:9a:e0:3b:7d:
         aa:89:43:2f:52:2b:3a:ce:84:f4:d3:0f:0b:8f:03:a4:f4:f1:
         41:d9:12:3c:4d:b5:68:4f:4b:56:34:27:40:5b:0d:6d:d1:d7:
         18:e3:37:64:1d:9e:bd:95:bf:2d:bb:3c:b8:06:55:af:c1:62:
         10:59:93:af:3a:5e:15:e6:68:4e:d2:01:c3:fc:ff:15:18:98:
         d3:c5:41:f0:41:fe:d7:4c:42:9d:ad:b3:6d:11:5a:96:05:13:
         70:99:d6:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQwMzAxMTAvBgNVBAUTKDMzOTdCODg5MEUzMzdEQTA5NDhENjk3RDQyMzBENkZF
NDYzM0QwRDAwHhcNMjYwNzI3MDkzNTI4WhcNMjYwODAzMDkzNTI4WjAYMRYwFAYD
VQQDEw02YTY3MjY2MC04Yjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5WaAyeC0uSaUqeqb6TZC8RFjqpD1xgsdmY2KX+MMp4rUBx8w32/qyHv/VRMN
RqyRw6nh2Z3Hq5MPL1t/SLdU7n7mxbRr42YjqxAjy61dU2jB9p1k2iCDrV+cDTLK
VrqC8obCMycf5qjxMew0P8xnuAd13L/6XEI5SiATdSaHGOyFXpCiExZzVpeWk3nx
jF3rylDWYWkxN/EmfFd0nh3apL/oJIAIGGZPcNKqerEQ/xMT0n6G+kZeguAinYw7
JjtN1LPaU+dKLR0vbHlqOmuGp5AuGV197azmV1hYerShSbudEkBnoF8/ybILSOf8
27ciC2jGhUN5nyFvDSNhTjzCjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHR4Tc6
7ep3Hf3l1D1F1cH9F+z6MB8GA1UdIwQYMBaAFDOXuIkOM32glI1pfUIw1v5GM9DQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAzMC8yMDA2M0M2MEFC
MTMxMUYwOTc2QzlCMUVDNEY5QUUwMi9NNWU0aVE0emZhQ1VqV2w5UWpEV19rWXow
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL001ZTRpUTR6ZmFDVWpXbDlRakRXX2tZejBOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDAzMC8yMDA2M0M2MEFCMTMxMUYwOTc2QzlCMUVDNEY5QUUwMi9NNWU0aVE0emZh
Q1VqV2w5UWpEV19rWXowTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtXMtCamgT1+DOERdG+IQIMR8mu+qrOj66ghR+bGmGWFmdBOpl92lirbeWFn8
u/zpb7CFaKNPRDOWqpiJSZRX+NsEpSnJKueSqofG1QuEAsUv/CjPH+lfChrS2VKs
QG+oTn8MeC7q7dY6YYL+fOJ4DkWR57JtdeMmFhuZQANIPavHnn+5l2m1/17TAkiy
lSYqqakIirmrFNO1x4RHkIKa4Dt9qolDL1IrOs6E9NMPC48DpPTxQdkSPE21aE9L
VjQnQFsNbdHXGOM3ZB2evZW/Lbs8uAZVr8FiEFmTrzpeFeZoTtIBw/z/FRiY08VB
8EH+10xCna2zbRFalgUTcJnWAA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:45 2026 by rpki-client