Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File:                     _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier:          2ZVO+0V6Qm48hcXnRLHD/czVIHEACjZ3t8dAxBwGhrc=
Subject key identifier:   B8:CC:E7:88:FD:CF:3A:46:F5:19:6F:DC:0E:F2:20:F0:AE:87:39:BC
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer:       /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial:       02D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number:          02C4
Signing time:             Mon 27 Jul 2026 02:34:51 +0000
Manifest this update:     Mon 27 Jul 2026 02:34:51 +0000
Manifest next update:     Mon 03 Aug 2026 02:34:51 +0000
Files and hashes:         1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: lKwA+1MFJ3Edhfk4ECkb92VC0ywD21M0r84yxMEArUg=)
                          2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: NXGbpmoMOzAZwcgSz2AYwCb8kwzGpslvQ3JE0B3JbOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
        Validity
            Not Before: Jul 27 02:34:51 2026 GMT
            Not After : Aug  3 02:34:51 2026 GMT
        Subject: CN=6a66c3cb-8b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:d2:04:06:17:05:8a:b3:93:2f:fa:0a:27:
                    9a:e5:41:86:d4:43:f8:94:4f:74:d9:cf:18:b1:e1:
                    30:79:64:19:18:9e:01:91:f3:6b:64:89:3b:7b:fb:
                    78:c8:47:9e:2f:7c:31:69:71:1a:cf:6f:1d:9d:9a:
                    b5:b3:fa:65:2e:0d:7e:cc:e6:f3:16:0f:97:b5:00:
                    9d:f7:87:f1:86:ce:f4:c8:1f:b0:48:23:79:32:fe:
                    58:bd:4f:a0:1b:e9:4c:93:ea:96:26:12:15:03:a4:
                    25:d7:8c:13:43:8d:35:6d:6a:b4:f8:3e:e6:9d:d3:
                    3d:83:63:8e:f1:22:96:d0:9f:2c:03:d6:fa:c4:ed:
                    58:e1:18:e7:10:b2:76:34:e2:cf:33:69:05:9b:d2:
                    8a:aa:ba:5a:75:e7:94:09:c2:e1:0e:96:b1:a3:00:
                    ec:bb:39:41:eb:67:5e:93:ef:23:b5:e4:6e:b8:2e:
                    f0:e1:86:0e:19:44:f0:76:e9:47:fa:8a:6d:b4:eb:
                    58:ad:10:2d:c9:ce:0b:28:ac:4d:97:7d:b3:21:36:
                    4c:fa:ac:2b:96:7d:e4:63:d4:74:10:e6:be:2f:1a:
                    18:d2:55:69:93:e6:35:b6:81:4f:d5:37:9b:0e:91:
                    eb:38:80:32:9f:40:df:b0:10:5e:d2:a6:a6:b4:6a:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CC:E7:88:FD:CF:3A:46:F5:19:6F:DC:0E:F2:20:F0:AE:87:39:BC
            X509v3 Authority Key Identifier:
                keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:75:61:37:d7:94:51:4a:7c:2c:81:14:7f:4b:13:2e:fc:58:
         73:bf:86:00:b3:79:0b:88:25:c1:aa:fa:5e:42:24:90:2a:cd:
         80:6b:30:d1:df:0a:ee:35:41:32:53:96:8b:73:db:6f:e8:59:
         3e:9b:b3:4e:87:20:fe:b3:cf:f3:93:7a:fc:9d:12:46:9b:13:
         59:f3:f6:e9:71:f1:d0:85:db:ad:1f:3f:4a:63:53:76:b0:0b:
         30:3f:28:b1:de:09:74:14:98:1d:e3:52:e2:a2:46:44:b3:94:
         c8:e6:76:fd:db:11:90:41:9f:31:d7:69:25:66:98:f3:dc:e6:
         07:0b:cf:67:15:57:23:6d:a3:7b:ab:06:1f:31:a4:2d:42:19:
         80:e6:bf:17:87:61:73:c8:c3:e3:8a:fd:eb:40:6e:e7:41:b9:
         f7:be:22:b2:f5:24:ff:17:71:c5:27:fa:07:10:f6:ea:c3:a5:
         c8:50:29:ef:b4:96:c2:5c:82:2c:ae:aa:33:11:02:26:62:e6:
         2b:18:fc:05:e4:8a:a6:a3:f1:6e:5d:ca:e3:6f:90:3e:15:61:
         97:3b:6c:56:40:5f:22:11:84:ba:3b:02:d7:f4:ca:fc:66:f2:
         34:66:f9:03:97:bb:ac:18:be:92:ac:d7:11:9a:16:ab:96:dd:
         2f:a7:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:29 2026 by rpki-client