Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File:                     -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier:          LQtR3b3e4yU/tGVAzdBqFkMzA8vu4gj8hyRceOBkawI=
Subject key identifier:   E8:EB:7D:03:FE:13:C4:2A:CE:95:F6:90:9A:F7:37:55:BB:5A:3B:1A
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number:          049A
Signing time:             Wed 29 Jul 2026 00:42:11 +0000
Manifest this update:     Wed 29 Jul 2026 00:42:10 +0000
Manifest next update:     Wed 05 Aug 2026 00:42:10 +0000
Files and hashes:         1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: SgNr4fcSxaN/DNILx0UHbLFqQTIofzrb6HnSSmhNqBE=)
                          2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
                          3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Jul 29 00:42:10 2026 GMT
            Not After : Aug  5 00:42:10 2026 GMT
        Subject: CN=6a694c62-4c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:b0:67:c6:da:86:89:ac:f4:92:2f:cf:41:
                    f2:37:25:f6:0a:3c:57:b1:76:47:95:b6:f9:34:72:
                    65:7a:c1:f1:b0:74:55:03:c5:fd:38:92:fd:1d:ff:
                    3d:c9:49:8f:df:cb:7f:3e:43:11:f2:0c:56:64:f4:
                    08:66:f5:21:b7:c9:f3:7a:a3:7f:7a:09:ec:9e:be:
                    1e:54:0b:5a:2f:a2:22:24:2d:fe:bf:5f:d6:6b:8e:
                    a0:70:0c:7f:d3:47:db:65:a3:bf:54:b0:9e:0b:54:
                    99:2c:49:81:9a:f6:21:7c:d7:29:4a:43:5b:ae:ad:
                    c8:b8:c4:57:44:9a:c7:50:92:06:f0:0b:62:8c:5c:
                    3f:6d:04:b9:b8:93:2b:e5:f4:4f:3f:3d:c2:09:27:
                    e8:4e:9c:84:b8:f8:ab:b7:fa:79:13:9d:65:be:0d:
                    29:e2:f5:6a:56:79:4f:cb:57:4f:b2:b8:27:dc:98:
                    07:76:1a:0d:db:ff:4c:d8:4f:0b:a7:4c:c9:cf:84:
                    d4:62:ed:1d:d7:6c:a6:a8:d0:ab:71:22:55:23:78:
                    80:27:04:2a:b5:2c:d0:f7:33:b5:95:67:e5:73:2c:
                    b1:75:3f:56:89:44:c5:2c:ca:33:3b:8c:85:c7:2f:
                    83:0b:1d:86:fb:38:8a:63:a8:ed:7e:b5:b0:b6:14:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:7D:03:FE:13:C4:2A:CE:95:F6:90:9A:F7:37:55:BB:5A:3B:1A
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:36:b8:56:9c:32:1a:bd:f9:dd:58:40:60:14:5b:da:0f:ec:
         73:76:2e:4e:9c:bd:ca:e7:29:74:53:b3:e5:8d:ab:62:ba:23:
         d5:9e:e1:cf:da:cf:da:26:d9:7a:ac:7f:c9:49:6f:72:cf:a7:
         34:86:7b:b3:e2:45:ec:a7:0f:91:c6:1c:2e:ec:f5:b5:15:58:
         9c:bb:95:03:23:6f:1d:d6:89:c1:29:64:57:e0:6f:2d:27:38:
         04:24:bf:6c:b1:1e:e0:35:46:dc:1e:dd:73:4d:7e:5f:1d:e8:
         63:e9:f6:b9:5d:7e:21:c7:43:0a:eb:5a:94:e4:d2:c7:d1:b8:
         d9:9b:fb:1f:16:c0:73:ae:90:f8:ac:b1:67:ef:ba:cd:00:7d:
         3b:25:44:4b:2d:af:75:ec:a8:38:1b:eb:48:91:ff:66:70:74:
         9b:0a:e8:76:a6:a2:71:0f:f9:09:3c:2f:5d:d3:28:e5:59:6c:
         1e:07:c3:ac:75:f7:3e:86:e8:83:77:8f:70:83:08:39:75:01:
         81:90:d9:26:a4:0e:5f:76:3a:f2:50:98:2e:7e:b9:de:ba:1d:
         39:ff:dd:86:36:d8:1b:f2:9f:a0:4d:ec:82:33:b2:d4:72:2f:
         d1:37:d9:f1:60:02:a9:14:6a:44:fc:73:f1:28:50:76:43:f0:
         d9:2a:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:48 2026 by rpki-client