Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
File:                     dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json)
Hash identifier:          Uo2Vv58TRbjOuvtlZz3EgRoRCK9hTvWUU+aL8a0qV7Y=
Subject key identifier:   D1:2F:06:FF:98:BB:48:82:59:AE:5C:64:6A:29:C2:0F:6C:53:A7:8F
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Certificate issuer:       /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
Manifest number:          017D
Signing time:             Mon 27 Jul 2026 06:27:30 +0000
Manifest this update:     Mon 27 Jul 2026 06:27:29 +0000
Manifest next update:     Mon 03 Aug 2026 06:27:29 +0000
Files and hashes:         1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: NO23CDv7c2z4H44eQHpzHfGdeyYe1n0C2qRn2ZEZiWs=)
                          2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
                          rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
        Validity
            Not Before: Jul 27 06:27:29 2026 GMT
            Not After : Aug  3 06:27:29 2026 GMT
        Subject: CN=6a66fa52-f3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:e6:5a:22:58:da:d7:1f:82:56:a8:2e:37:
                    11:21:aa:18:a5:9b:11:9f:62:8b:12:64:2f:91:7c:
                    28:c8:d5:e9:6d:7a:72:45:3f:40:33:84:61:3f:c0:
                    fb:dc:c8:fd:73:32:92:2a:10:ce:6a:b3:8f:35:99:
                    e6:56:c3:ac:45:48:96:80:e4:62:f1:84:68:fa:d6:
                    d1:b1:00:7c:e5:4a:de:26:24:f4:f2:6f:49:cf:d6:
                    b4:85:d5:3c:db:9f:90:99:27:1f:c8:c3:cc:b7:5b:
                    eb:8c:2a:85:03:24:d4:8e:e0:4c:8e:5f:4f:f2:80:
                    83:1b:e5:18:dc:31:39:4a:99:b2:91:55:bd:a6:20:
                    c2:9f:c9:16:4a:1a:e2:7e:8b:97:6e:9c:bb:1a:ef:
                    40:cb:28:b2:ff:c7:ba:20:6f:1c:c9:62:64:bd:07:
                    f8:a5:23:69:21:0f:73:03:18:29:47:75:d0:61:d5:
                    79:28:1d:7b:b9:51:69:48:a7:81:33:6c:58:f5:68:
                    64:bb:33:7a:61:70:c8:59:7a:06:b6:3c:24:ec:a9:
                    63:57:14:97:c1:c5:79:29:59:02:d2:c4:34:a1:a4:
                    05:d7:f6:1b:d0:26:81:51:ca:f1:98:4e:da:5d:d9:
                    f0:7d:5f:e5:ca:e5:b3:3e:70:29:01:6f:fb:fa:18:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:06:FF:98:BB:48:82:59:AE:5C:64:6A:29:C2:0F:6C:53:A7:8F
            X509v3 Authority Key Identifier:
                keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:38:c9:80:31:2c:4a:9e:8e:dc:a3:08:91:45:b0:93:01:
         d1:8b:e8:68:c4:14:7b:43:13:1c:de:88:8c:d9:24:a1:10:5e:
         76:4e:72:fb:da:46:04:c0:b4:02:0c:8a:fa:e1:d0:6c:8a:bf:
         30:d6:9a:fc:1b:c9:bf:9e:5d:ce:1d:fb:2d:6d:1d:bc:dd:f2:
         0d:0a:6c:2e:8e:07:83:f5:55:1c:59:17:a5:4d:56:44:af:91:
         5b:9d:2d:b7:9a:fc:e1:c1:a5:9b:c8:55:10:68:a6:c2:33:18:
         23:56:e8:50:47:14:67:d7:47:33:17:15:8f:68:e1:22:fe:9d:
         c1:75:5a:4c:93:b3:c8:a4:c2:ab:36:51:20:4a:5a:10:9c:11:
         ce:fc:7a:50:d2:4f:8a:a1:1f:21:8d:6e:37:ed:18:63:50:63:
         3f:6f:ce:95:59:39:ee:9f:6d:ef:02:e8:5b:98:d0:62:18:24:
         dc:91:de:b1:45:f7:ff:ee:00:f9:d3:a9:a5:5e:bc:b8:ca:e0:
         73:e4:f5:60:53:3e:4e:15:ff:38:6b:98:be:74:c4:e9:5a:d5:
         70:6e:87:8b:cd:14:6d:86:09:2a:17:24:9f:ff:8a:eb:cd:f4:
         51:6d:3f:29:f1:4a:cf:6f:4d:6c:d4:30:89:17:2c:38:2e:9d:
         89:a0:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:46:28 2026 by rpki-client