Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File:                     ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier:          UDsYn4N4+AC72zbmYo5mE9g8wLfjaFXx0VwgUJZn58c=
Subject key identifier:   83:7F:BA:A0:62:57:53:53:D7:82:CE:D0:16:4C:C0:04:D3:4D:A6:BD
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer:       /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number:          B7
Signing time:             Mon 27 Jul 2026 09:12:53 +0000
Manifest this update:     Mon 27 Jul 2026 09:12:52 +0000
Manifest next update:     Mon 03 Aug 2026 09:12:52 +0000
Files and hashes:         1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: Ho1fX8thiOZg6AebWKnF6vNaIiX+XVl3VgFsVQsK9/Q=)
                          2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
        Validity
            Not Before: Jul 27 09:12:52 2026 GMT
            Not After : Aug  3 09:12:52 2026 GMT
        Subject: CN=6a672115-d20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:2f:cb:f4:7c:2b:f1:aa:47:33:62:bb:a7:
                    cc:b8:48:7f:6c:30:3b:76:2b:fd:a8:4f:08:6f:11:
                    98:ba:c0:8f:f9:e7:d2:da:cb:63:c9:85:d1:d9:af:
                    6d:c9:5e:c8:4b:bd:7b:ec:c8:2d:2e:8b:f4:8b:34:
                    81:c1:4d:04:2f:b2:a5:45:4d:ac:1f:3a:24:63:6f:
                    50:ec:3f:17:9d:59:e2:b3:a1:d1:a4:cf:6c:62:f4:
                    cf:1d:dd:0e:20:f7:e9:4f:19:e6:91:fd:dc:5d:28:
                    46:d1:22:07:dc:2e:4a:ca:66:61:a3:6d:a2:96:b2:
                    89:88:20:66:55:4a:35:a7:59:b9:77:61:a6:6f:cb:
                    fb:8f:72:89:4e:3d:fd:27:c3:d9:f2:e4:ac:ae:c4:
                    10:b6:04:1a:3d:bf:be:e3:b6:28:3d:6a:bb:05:ab:
                    a5:8d:8c:47:96:55:9d:6e:aa:b1:9b:c0:7b:ff:f9:
                    53:20:4b:1b:cc:5f:64:29:f8:76:c0:2c:ee:4b:54:
                    5b:f9:f3:57:e2:39:6b:7c:9c:47:01:7f:ee:ba:e2:
                    6e:05:ae:5a:a4:b8:67:e5:8b:e9:db:8d:c7:3f:f8:
                    9c:eb:83:af:33:94:26:1b:d7:3e:a8:c5:a3:3f:73:
                    a9:fa:c2:fb:4a:40:6e:96:0f:ad:36:43:03:d4:bc:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:BA:A0:62:57:53:53:D7:82:CE:D0:16:4C:C0:04:D3:4D:A6:BD
            X509v3 Authority Key Identifier:
                keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:72:d6:d6:6a:d9:af:e1:9b:61:51:ac:14:28:bd:0a:8a:c0:
         8c:05:e9:7b:0d:4f:dc:b6:de:3e:9f:4e:37:10:00:3c:a6:80:
         4c:d0:ab:b1:06:aa:5b:32:b4:f4:45:e5:2c:89:d9:58:53:ae:
         a1:db:de:00:85:72:e7:5a:af:77:c2:7b:20:b7:7d:8f:31:7f:
         2a:b8:61:cd:6d:b1:7a:68:27:08:ad:6b:7e:cb:9a:5a:60:a3:
         97:a2:01:4d:e9:50:c4:79:28:42:21:96:e6:fc:d5:b7:60:54:
         96:89:bf:d1:de:8f:8e:a1:2f:95:69:11:0a:e9:39:ee:0d:f1:
         51:df:a6:36:6b:47:bb:e4:ad:bb:d0:eb:e8:29:5c:53:12:88:
         0d:29:67:4a:da:f7:ca:79:67:dc:9e:42:fb:c2:8e:e5:8a:c6:
         d5:85:e4:f8:e2:3d:4b:ba:10:9c:a6:d0:52:b8:8e:5a:d2:8e:
         2e:7b:81:6c:31:ca:42:57:0b:22:76:b2:6b:71:89:68:40:ee:
         11:96:31:63:1b:31:ce:8c:a0:d2:68:c4:28:97:e2:22:7c:2d:
         d6:6a:d6:6a:38:f7:8e:b1:24:92:63:59:6c:65:ba:18:ac:84:
         a5:8a:65:23:fd:7b:82:3e:6a:2d:90:75:5b:3e:97:9a:41:a4:
         0f:1a:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:05 2026 by rpki-client