Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File:                     AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier:          aYJQ0J+KFgn3J8vImgTP7TG05V2sBtcctoB+l2Aahyo=
Subject key identifier:   FE:5B:04:B0:6D:09:9B:C4:4B:39:A8:50:86:EA:E1:90:B9:D7:7F:97
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer:       /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial:       08A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number:          089E
Signing time:             Tue 28 Jul 2026 20:58:42 +0000
Manifest this update:     Tue 28 Jul 2026 20:58:41 +0000
Manifest next update:     Tue 04 Aug 2026 20:58:41 +0000
Files and hashes:         1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: PRvNsAtKs5K3GCIsoJUnNDy1z4+dFnmibP37dp+0cmk=)
                          2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
                          rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
        Validity
            Not Before: Jul 28 20:58:41 2026 GMT
            Not After : Aug  4 20:58:41 2026 GMT
        Subject: CN=6a691802-d032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:24:2d:3e:4f:b0:d2:ac:86:ef:d6:6a:e5:
                    aa:ed:c1:ed:af:bb:d8:ed:2a:fa:b4:76:84:55:c4:
                    36:74:27:0b:f8:a5:16:47:32:16:49:ce:ae:fc:9f:
                    1f:1f:07:17:7a:e2:79:be:2d:a0:d7:d8:fe:b4:54:
                    4e:bf:d4:a3:5f:7b:19:5b:ae:44:d4:62:d9:22:1f:
                    53:1e:21:52:18:53:fb:0c:b3:2f:d8:b9:47:9a:5f:
                    ff:fa:89:74:7b:c3:24:0f:7c:3c:22:ff:de:0d:f8:
                    39:44:bc:7a:bf:8d:12:cf:9b:bd:60:e0:f4:02:f4:
                    2d:14:a9:50:95:07:49:ea:37:38:00:82:77:36:c1:
                    d7:0c:fe:14:1e:aa:93:fb:9d:14:f0:99:1b:61:0d:
                    7b:29:24:6a:b8:52:f0:fd:61:47:8a:9f:3c:18:eb:
                    09:87:cf:87:13:b0:57:90:92:fe:55:28:e4:7b:dd:
                    1d:8b:4f:da:58:0f:79:10:d0:4e:35:f3:c3:16:b1:
                    c2:c0:e3:7e:da:28:57:69:27:9c:70:35:f2:9e:3d:
                    19:56:44:e0:09:c4:0e:44:3c:cf:c5:61:cc:42:36:
                    43:35:c2:e1:29:2b:5f:df:ed:6a:81:d2:68:b8:54:
                    cb:d4:74:de:97:c0:e0:41:0b:ed:b5:b5:69:51:1d:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5B:04:B0:6D:09:9B:C4:4B:39:A8:50:86:EA:E1:90:B9:D7:7F:97
            X509v3 Authority Key Identifier:
                keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:36:df:1c:1f:3a:fb:a5:64:f6:dd:01:8d:ca:9e:89:e3:ef:
         88:5d:81:c0:3f:f6:90:fc:1f:d7:96:bd:f5:09:3d:79:e2:2b:
         b6:e7:0c:49:af:12:30:ca:92:1b:d4:44:6a:33:4c:95:33:bc:
         46:86:7e:d7:26:fe:a5:b0:07:8a:19:87:4c:bd:cc:75:44:0f:
         d7:c1:2b:23:ec:bc:bc:15:ef:e1:c0:87:e9:b9:0f:76:ac:d3:
         df:09:db:4b:c4:0d:ce:a1:06:12:4d:df:3d:5e:05:6b:d3:c8:
         72:38:c2:f2:de:4d:ae:d5:3a:13:55:6c:0a:9f:34:f5:c6:ab:
         ea:fd:5f:3f:2b:89:06:3a:ca:ed:18:35:38:cd:b0:a4:59:bb:
         21:49:fd:fa:69:7e:65:46:a7:30:8d:a4:6b:16:0f:3b:17:e3:
         25:d9:ea:3e:e6:5a:0e:1b:fd:c8:9f:94:39:8a:e6:7e:1a:5c:
         f2:2c:72:de:8f:bc:88:e9:5a:59:17:ee:ac:cc:ae:43:26:fb:
         32:3e:1b:f8:ff:0c:1b:60:b1:d4:0b:1e:40:f2:44:22:83:90:
         5e:7e:6a:9a:00:fe:6a:0c:93:30:12:53:85:ce:c8:c6:71:97:
         07:1f:ce:3a:4e:cd:94:47:55:15:85:8f:33:f1:47:32:d7:33:
         88:f3:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:03 2026 by rpki-client