Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
File:                     vNzosG8FliNAMAycR0e1olGiGcQ.mft (raw, json)
Hash identifier:          fPb77wCra+CehSj2P1ogYFJQkON4AXzowqJshWgDHpg=
Subject key identifier:   59:F4:B0:48:53:4E:3C:38:2F:8B:DD:7C:CC:32:0E:F7:03:45:E8:33
Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
Certificate issuer:       /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
Manifest number:          3573
Signing time:             Tue 28 Jul 2026 14:56:55 +0000
Manifest this update:     Tue 28 Jul 2026 14:56:54 +0000
Manifest next update:     Tue 04 Aug 2026 14:56:54 +0000
Files and hashes:         1: vNzosG8FliNAMAycR0e1olGiGcQ.crl (hash: qQ0h01vBK2quT+Qa+RUctTa89zTSo/Mc+L56STilZi4=)
                          2: 3FEFA562483D11EC82E81112C4F9AE02.roa (hash: pMo/am4pbVZVWLjF2BRkcuubhLlI+aH0WTEo1tPr5yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C65E8, serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
        Validity
            Not Before: Jul 28 14:56:54 2026 GMT
            Not After : Aug  4 14:56:54 2026 GMT
        Subject: CN=6a68c337-9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:3a:92:b9:ff:46:a2:1f:ca:9b:96:41:c2:
                    33:dd:5f:b2:6b:d7:f3:fa:8e:54:48:e8:f1:64:65:
                    2f:bf:d2:ad:a4:a9:6c:ed:1f:28:06:05:71:a9:d5:
                    3e:36:97:27:1e:56:45:a8:ad:7b:2e:28:68:fa:41:
                    3d:b6:b3:bc:f0:33:77:39:8e:b5:a1:bf:69:37:e2:
                    e4:93:b4:a5:b3:79:9f:6d:7d:9a:93:7a:57:a9:ff:
                    c6:92:c5:36:f0:63:5d:9b:d6:b4:c7:1b:cf:07:a1:
                    35:fe:27:44:c5:7b:40:d9:3c:a2:c8:48:0d:ac:c2:
                    32:be:49:e1:38:ef:01:9c:c0:52:2a:eb:f3:66:c1:
                    cd:53:10:72:87:a9:d0:14:79:cd:c7:3b:99:00:66:
                    ff:83:0e:1d:bb:25:ba:0f:46:a6:dd:ca:33:9b:d0:
                    5f:29:8b:38:0b:a1:f3:a0:bc:76:4f:d1:fe:0d:d1:
                    9b:b0:ac:7e:fd:52:70:f5:d2:47:e5:e1:69:69:fe:
                    2b:1e:e1:79:46:2d:cb:2b:e4:ed:aa:1b:22:62:f0:
                    c9:9a:3f:12:0e:c1:3b:c1:0e:4c:be:43:97:d7:98:
                    01:e2:f8:98:24:92:54:c6:ee:17:c7:5f:5b:7f:28:
                    78:3f:ad:2f:43:bb:61:fe:95:d4:bf:25:45:0a:85:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F4:B0:48:53:4E:3C:38:2F:8B:DD:7C:CC:32:0E:F7:03:45:E8:33
            X509v3 Authority Key Identifier:
                keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:06:ac:82:11:c5:05:f8:20:f5:de:de:9e:10:e5:4f:d2:
         76:d7:27:99:35:38:e9:03:81:cc:cf:9b:3c:82:65:4f:55:89:
         de:bc:49:06:0b:f8:98:29:ec:fd:07:f5:7e:5b:b9:99:3e:db:
         22:a6:9c:a4:68:4e:2b:cc:5c:d7:ef:cd:78:22:f7:6f:7c:cc:
         e2:f0:cf:3d:57:0c:32:cd:21:8a:58:a9:bb:37:84:29:90:d5:
         8f:b3:f0:86:15:bc:36:46:3f:f0:d5:37:50:30:df:49:1b:0f:
         5c:9e:53:64:dd:5e:77:b9:81:ea:59:cf:0d:d6:ab:38:38:3b:
         b2:6d:b8:69:21:bf:d0:0f:e2:7d:5a:0f:7d:38:8c:10:79:22:
         bb:3d:6d:ed:d2:99:b7:4c:e7:84:09:8f:2b:b7:58:67:95:8f:
         48:9e:97:14:95:51:be:03:d7:81:be:38:72:4b:7b:ad:38:8a:
         26:46:48:40:37:81:9f:35:dc:b8:05:02:e2:01:9e:81:60:62:
         99:77:d7:b9:ec:4c:da:e3:90:09:d8:52:e0:91:b7:2c:ca:10:
         59:fa:3a:35:69:22:f7:36:ef:7b:7a:5e:45:4d:11:12:f4:db:
         49:4e:5e:53:34:b5:d2:96:05:3b:9e:0f:ec:45:2d:45:40:af:
         ae:67:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:26 2026 by rpki-client