Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File:                     MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier:          muMAy3RHWxfXEBX26pGXVJEvHE83b+2g27z5/lvuDWU=
Subject key identifier:   3F:71:1C:97:75:C0:0B:58:AE:AB:CB:9F:D3:65:04:3C:00:60:78:49
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer:       /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial:       0CF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number:          4250
Signing time:             Tue 28 Jul 2026 15:05:57 +0000
Manifest this update:     Tue 28 Jul 2026 15:05:56 +0000
Manifest next update:     Tue 04 Aug 2026 15:05:56 +0000
Files and hashes:         1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: 0AOwyJK/FBPZTVcudjtgKEA/DoXpmnTlXg5CO/9q5Tk=)
                          2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: TEur0qITEPg5x6Wpffov2L2nrpJe0RCHF8zhwpKPkvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3320 (0xcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
        Validity
            Not Before: Jul 28 15:05:56 2026 GMT
            Not After : Aug  4 15:05:56 2026 GMT
        Subject: CN=6a68c554-04b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:32:b6:dd:e1:e5:b6:d7:af:cc:fd:2c:75:f5:
                    40:1c:92:30:eb:b4:24:17:e9:fc:04:f7:00:20:d2:
                    20:03:81:ac:1a:ae:2e:a3:0b:d1:2f:e9:79:0e:16:
                    f4:6e:96:83:6f:4c:ef:86:57:a1:d6:58:64:ee:34:
                    c1:2b:f9:d8:27:4d:c0:f7:a1:ba:71:ac:43:f6:43:
                    1e:10:5a:0e:d8:4e:0c:ce:08:7c:37:cb:8c:d6:6b:
                    b0:ea:9b:2f:ed:c1:21:f4:d6:45:18:02:e0:17:b3:
                    1b:b1:4f:e3:82:c3:2f:bd:d0:0a:be:5a:41:99:67:
                    bd:d7:c8:60:29:c7:af:0d:fd:a7:aa:1b:92:4f:85:
                    be:f2:37:c5:65:dd:a6:89:47:cf:d3:cd:d2:26:fe:
                    bd:de:da:ce:55:7f:bb:88:98:59:2f:c5:cd:98:f8:
                    88:97:a0:df:2d:3c:e7:8c:e8:15:5f:f4:44:f1:dc:
                    a3:da:a8:14:45:b3:3f:ee:bb:bc:e1:1d:a4:2c:71:
                    d6:99:6c:e3:16:5a:43:79:65:bc:ca:b2:c2:17:61:
                    65:c7:e1:09:b3:0f:37:35:c5:18:42:84:a6:50:8c:
                    c3:a4:c6:ff:f5:ed:3d:0c:58:93:fb:46:6b:f0:f9:
                    dc:50:c6:d3:37:3b:db:17:d3:87:66:83:a0:0d:6e:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:71:1C:97:75:C0:0B:58:AE:AB:CB:9F:D3:65:04:3C:00:60:78:49
            X509v3 Authority Key Identifier:
                keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:ec:b2:34:85:98:e4:81:4b:82:30:ef:e7:e4:4f:3f:fe:
         80:32:df:fb:82:28:f7:c4:c5:53:bb:ef:23:94:7d:ff:03:72:
         39:fb:97:ba:28:f4:d8:25:4b:b3:02:ac:da:fe:49:64:a1:c6:
         42:bb:c5:41:0f:19:5e:34:e1:b9:76:07:de:12:c5:98:ae:d0:
         be:ef:b8:0c:7b:56:95:4c:2a:b8:32:1c:9a:57:72:cb:ea:d7:
         d0:78:fd:a2:4e:ff:7d:86:22:1e:3d:e3:b1:a9:f6:f8:d4:20:
         87:c4:39:db:f0:2e:42:c4:ac:3a:7f:49:59:97:7b:33:dc:e5:
         8c:3f:ad:3b:b6:d7:90:4e:b5:31:27:08:33:a5:64:ef:b3:03:
         96:ff:d0:3c:fc:63:f3:8b:e7:00:a8:54:52:88:04:e3:13:65:
         34:9a:6a:ea:34:b1:9d:3f:00:68:19:19:df:3f:97:c7:fa:b6:
         0d:4f:0c:e2:6d:49:61:8f:5e:e5:00:1a:c6:f8:4e:a5:a9:eb:
         ec:58:1a:75:e0:46:d4:1e:aa:d5:d8:47:0b:80:10:3c:59:a5:
         a4:9a:ff:cf:7c:41:ec:80:13:35:93:c0:80:ab:84:90:fb:73:
         36:ee:26:e0:84:97:8e:7e:31:0e:89:48:22:d3:29:32:7f:b6:
         6f:46:ba:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy
RDNCMjY0Q0EwHhcNMjYwNzI4MTUwNTU2WhcNMjYwODA0MTUwNTU2WjAYMRYwFAYD
VQQDEw02YTY4YzU1NC0wNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjjK23eHlttevzP0sdfVAHJIw67QkF+n8BPcAINIgA4GsGq4uowvRL+l5Dhb0
bpaDb0zvhleh1lhk7jTBK/nYJ03A96G6caxD9kMeEFoO2E4Mzgh8N8uM1muw6psv
7cEh9NZFGALgF7MbsU/jgsMvvdAKvlpBmWe918hgKcevDf2nqhuST4W+8jfFZd2m
iUfP083SJv693trOVX+7iJhZL8XNmPiIl6DfLTznjOgVX/RE8dyj2qgURbM/7ru8
4R2kLHHWmWzjFlpDeWW8yrLCF2Flx+EJsw83NcUYQoSmUIzDpMb/9e09DFiT+0Zr
8PncUMbTNzvbF9OHZoOgDW5L1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9xHJd1
wAtYrqvLn9NlBDwAYHhJMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE
OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX
WS1oNjNHNlpYNGd0T3laTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnKjssjSFmOSBS4Iw7+fkTz/+gDLf+4Io98TFU7vvI5R9/wNyOfuXuij02CVL
swKs2v5JZKHGQrvFQQ8ZXjThuXYH3hLFmK7Qvu+4DHtWlUwquDIcmldyy+rX0Hj9
ok7/fYYiHj3jsan2+NQgh8Q52/AuQsSsOn9JWZd7M9zljD+tO7bXkE61MScIM6Vk
77MDlv/QPPxj84vnAKhUUogE4xNlNJpq6jSxnT8AaBkZ3z+Xx/q2DU8M4m1JYY9e
5QAaxvhOpanr7FgadeBG1B6q1dhHC4AQPFmlpJr/z3xB7IATNZPAgKuEkPtzNu4m
4ISXjn4xDolIItMpMn+2b0a6iw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:09:37 2026 by rpki-client