Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          u6HwPNuMr99i3qbuZIzX2Q8k8KxLmxmEUskVROFn3io=
Subject key identifier:   1E:05:E8:40:7D:35:C0:DA:D7:90:50:0D:F8:80:9D:2A:B4:D4:AA:C5
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       098D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          097D
Signing time:             Tue 28 Jul 2026 20:25:26 +0000
Manifest this update:     Tue 28 Jul 2026 20:25:25 +0000
Manifest next update:     Tue 04 Aug 2026 20:25:25 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: E5u+dD5oS21LyOLp7NDaL0ePsycBpN/ZSAhgoiteJ0s=)
                          2: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: OFe6pYT5si7P735ls7Y5SGcQNrbPBZR9CsKE32oRmEA=)
                          3: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: X+eBxovvqzHyCJboQeyc2wo6Qm3l7D8nVBLA57hyGZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Jul 28 20:25:25 2026 GMT
            Not After : Aug  4 20:25:25 2026 GMT
        Subject: CN=6a691035-2635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:a4:60:e7:ae:7d:7d:d7:2d:c9:d0:30:23:
                    d2:c6:4c:b1:e9:02:66:26:dc:e6:eb:51:f0:44:e4:
                    09:30:e1:a2:1f:45:b4:58:92:7a:cf:39:4b:c6:90:
                    04:d0:25:4d:8d:24:35:25:37:58:8c:28:fe:21:98:
                    8a:20:2c:b3:87:a7:10:db:cb:df:b3:a8:28:79:61:
                    d9:30:25:ab:ff:b5:fa:9f:69:ed:d0:47:48:d7:e5:
                    f7:9b:69:6e:9a:b6:a5:35:9c:c5:a4:12:77:d9:3b:
                    9f:0b:70:65:fa:8d:42:63:7b:91:43:49:99:63:ae:
                    6e:11:b6:9c:22:5a:fe:12:47:1c:e6:7a:ae:19:6c:
                    a5:7a:b9:1f:1d:59:ee:b7:e3:d4:97:c5:ba:67:8c:
                    25:c3:27:c4:6c:11:a5:34:c1:cb:4c:de:eb:b9:22:
                    67:17:ba:eb:ee:8e:e5:af:a6:bd:6b:a7:7c:57:67:
                    9d:3b:8d:c5:07:2f:84:e2:81:9d:27:00:f4:85:a8:
                    60:54:50:44:b3:9f:5b:44:c6:2f:01:80:aa:6b:4c:
                    f4:75:e2:b5:ca:99:20:1b:e0:1c:10:c1:40:ed:de:
                    98:6c:51:b6:42:f9:ce:42:7e:27:c0:25:d9:a7:08:
                    64:45:c1:76:ef:0b:66:f4:be:11:8c:cf:83:66:07:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:05:E8:40:7D:35:C0:DA:D7:90:50:0D:F8:80:9D:2A:B4:D4:AA:C5
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4b:61:4a:36:8f:45:8f:6f:4b:ce:b3:c7:5e:44:03:db:a8:
         82:0f:2e:f1:a2:46:6c:2e:d3:00:4e:ac:bd:a7:f2:55:45:5f:
         fb:f3:6b:0d:36:cd:08:b9:6d:b2:9f:39:b8:05:12:15:6b:4a:
         f0:05:7f:d7:92:64:08:30:4b:d0:d8:91:ce:04:1b:43:03:f6:
         dd:b1:7c:4f:9b:51:3c:27:2c:3b:c6:67:b5:b8:3b:7f:be:75:
         93:cb:69:b8:06:f1:b1:66:09:1e:fb:0f:b8:30:34:02:7f:3f:
         92:ec:e1:7a:a8:65:1b:34:75:07:56:9b:ce:06:a9:75:8d:e0:
         bc:b0:81:97:d8:69:ca:2e:04:bd:7e:5a:e4:39:08:d2:2f:65:
         85:63:33:e1:0b:b5:9d:e4:38:d9:3c:5a:1e:92:1f:45:8e:3f:
         95:7f:0a:0b:47:98:68:a5:ad:86:2e:56:7f:83:0e:5a:f1:d0:
         33:52:bd:f5:fd:a6:18:a5:b8:80:09:ce:90:45:d8:a4:a1:8f:
         36:87:f4:a0:93:6f:d3:fb:5c:ee:83:23:87:ce:ea:f6:db:14:
         1e:06:4e:90:9f:49:5a:34:60:34:48:83:b7:86:93:40:58:fa:
         a7:c9:eb:92:ed:7c:29:ac:66:94:bf:40:5b:c1:fa:18:f8:f4:
         3d:f9:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:28 2026 by rpki-client