Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File:                     cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier:          QZufhcQSxtGXLP645W4VuCqaloJHnxOsWMhyPzEVYX8=
Subject key identifier:   58:57:A7:75:EA:19:D2:D8:81:E1:36:6A:F2:D9:BC:CF:8C:04:93:35
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer:       /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number:          0204
Signing time:             Mon 27 Jul 2026 04:41:15 +0000
Manifest this update:     Mon 27 Jul 2026 04:41:15 +0000
Manifest next update:     Mon 03 Aug 2026 04:41:15 +0000
Files and hashes:         1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: Dm8YnBx+OeF9dXZ+PCq0hj/HyfVPXK5NZz5dWCe1oN4=)
                          2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
                          3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
                          rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
        Validity
            Not Before: Jul 27 04:41:15 2026 GMT
            Not After : Aug  3 04:41:15 2026 GMT
        Subject: CN=6a66e16b-126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:9a:92:f9:f0:c1:b7:5f:33:be:b6:78:09:
                    fe:46:08:09:bd:61:00:dc:41:ed:9a:5f:24:19:6a:
                    d5:3b:66:35:55:27:4c:c2:b9:26:79:e3:e2:b6:38:
                    35:30:3a:89:9c:f7:e9:a8:39:c2:bf:5e:3d:27:c9:
                    62:68:c4:f9:b3:ef:c6:7f:69:01:2e:a5:4f:fd:b9:
                    a5:e6:2c:be:35:39:d1:eb:45:63:2b:ef:d7:a0:ee:
                    23:b8:32:05:5f:cf:54:52:1f:e3:23:0a:86:48:90:
                    b5:eb:84:f0:cb:1d:2a:c1:b9:75:cd:95:0b:c9:6c:
                    0e:47:63:2f:71:dc:c7:8e:5c:a9:16:c2:f9:32:60:
                    57:ae:7b:8b:55:d0:f0:98:18:0e:7f:20:35:4a:81:
                    4c:e7:37:c3:9c:3b:bb:a7:29:08:b1:3c:fb:7d:13:
                    1f:8a:39:53:3d:44:78:32:6e:c6:b4:42:98:dc:2a:
                    a0:13:f7:c5:bf:23:04:b5:b6:55:9a:0a:a2:ea:32:
                    99:9d:b2:dd:4b:09:14:35:6d:d4:b6:17:04:8c:f1:
                    46:09:03:a9:0e:62:4f:27:0f:c0:e3:f7:c2:05:7c:
                    83:b7:a2:c2:57:0c:5d:d9:e0:73:1d:1a:58:b9:06:
                    6c:59:cf:cd:45:c5:1f:53:01:bc:63:57:1a:94:94:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:A7:75:EA:19:D2:D8:81:E1:36:6A:F2:D9:BC:CF:8C:04:93:35
            X509v3 Authority Key Identifier:
                keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:91:e0:77:37:58:58:6e:88:93:08:95:57:86:12:e4:f9:d2:
         01:0a:93:b6:18:b8:f5:73:24:7e:d2:80:0a:16:0d:69:39:d8:
         40:a7:9c:04:1f:e7:51:6b:f6:36:a2:fc:6e:3c:b2:42:e3:44:
         67:74:ca:65:36:03:b4:a6:b4:7f:ba:15:cd:c1:7d:a3:91:fd:
         66:b5:c7:ff:99:3e:be:d7:81:66:e9:ed:56:54:29:76:f2:43:
         ac:02:3e:5e:30:db:41:0c:a0:5d:ff:78:86:39:77:dd:f6:93:
         19:7b:38:31:af:9e:67:ed:b9:89:5c:12:aa:c9:74:07:b3:46:
         48:fd:3c:30:98:51:0f:12:1c:85:0a:79:74:3a:1d:51:69:9d:
         d6:1d:6f:32:e6:0b:b2:97:e9:82:c3:d3:8d:5d:0d:14:f5:ca:
         b7:69:12:dd:59:c7:a8:a8:71:4a:c7:c6:7b:72:84:f8:66:4c:
         b7:17:41:6d:48:01:e2:8b:11:8c:5e:90:9d:73:16:43:5a:11:
         26:33:11:99:2f:d3:d4:7d:d8:1b:f6:93:45:08:15:56:cd:ec:
         e6:54:74:c6:28:78:26:ec:25:42:2a:d2:9f:c9:7b:90:85:ca:
         b2:53:f4:90:90:d9:a6:38:c4:df:24:27:88:3a:84:3d:57:8f:
         d1:8b:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:16 2026 by rpki-client