Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File:                     kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier:          aKxerIeHfNCAjIKhEQ4kcuP7Ypo8mlC3rkgRrtwCkls=
Subject key identifier:   BE:E6:46:E1:D0:89:02:CB:57:DB:37:A2:5C:A9:A2:63:90:0A:4C:E9
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       1976
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number:          1937
Signing time:             Tue 28 Jul 2026 16:32:00 +0000
Manifest this update:     Tue 28 Jul 2026 16:32:00 +0000
Manifest next update:     Tue 04 Aug 2026 16:32:00 +0000
Files and hashes:         1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: nHPE8ehJwBxLmuSooevWfdLUiRd2VLLOGATeER7v0Oc=)
                          2: FCDF983C4B7411F19F4B0F3BB6833773.roa (hash: 6PczisSqxXOoG4GpKjkiVPbqFf7Z32JMD/yyHEXImvA=)
                          3: 6C409F0C90D411F09617F260C4F9AE02.roa (hash: EVQn/KNomyKNTdeIsk8hWARt5eleL1I0XO8r52dM3Kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6518 (0x1976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Jul 28 16:32:00 2026 GMT
            Not After : Aug  4 16:32:00 2026 GMT
        Subject: CN=6a68d980-e8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:b2:5c:a8:df:65:4f:e0:fa:47:ac:17:5b:
                    e8:e6:84:c0:c6:6a:19:0d:81:d5:95:a3:b8:f1:1f:
                    d1:c4:0e:cb:b7:2b:07:30:44:37:f5:fb:e7:f4:f6:
                    33:e5:2f:e9:a6:c6:2f:44:e2:73:01:96:6d:82:56:
                    ee:b5:a9:3c:32:92:f3:fc:7a:2c:ae:8c:f8:75:32:
                    ff:ad:4b:ac:74:09:13:c9:e9:62:e3:42:a6:ac:21:
                    10:61:93:50:bd:f9:c0:31:f8:da:cd:75:a9:98:85:
                    6e:79:12:23:ce:05:03:33:8d:95:fc:3a:44:43:4b:
                    89:a6:21:7c:3b:70:41:41:2f:15:68:63:7d:66:3e:
                    4b:5a:91:57:83:3f:87:5d:16:8b:14:3f:33:19:59:
                    75:bb:d3:8e:cc:ef:dd:d0:e9:3a:55:40:42:8c:93:
                    43:ea:72:cf:69:66:e9:4d:c6:36:ad:76:46:57:c6:
                    b2:3e:9c:6c:65:54:ff:f7:4f:6a:43:dc:66:d6:19:
                    36:c3:f6:b0:97:4f:02:77:a0:18:7e:b8:25:90:25:
                    87:d0:97:02:d8:29:df:6f:49:b2:4e:28:21:53:e8:
                    5d:c0:c8:a5:58:e7:f5:42:a3:35:55:25:f2:e0:07:
                    f8:46:43:a8:de:a6:f1:7a:5f:b4:0d:40:3a:3a:b6:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E6:46:E1:D0:89:02:CB:57:DB:37:A2:5C:A9:A2:63:90:0A:4C:E9
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:3c:b8:89:43:ad:d0:b2:3f:f4:60:23:6d:44:cb:1a:de:ed:
         1a:db:ea:46:8f:3a:44:f7:24:cf:80:e3:dd:41:dc:6d:50:fe:
         fa:e6:ce:58:ff:ad:d7:c7:ba:5c:cb:e9:44:df:5a:57:17:37:
         95:17:89:14:86:42:ed:68:ec:cf:00:39:42:f8:eb:72:09:30:
         2e:f2:e4:24:86:c9:c8:15:b4:e2:1b:b5:d7:0f:65:72:47:95:
         3d:32:18:af:5d:b4:72:f6:d6:54:4b:87:30:28:fc:2a:bf:b4:
         ec:11:fd:e1:2c:46:0b:ed:39:4c:7c:09:89:c2:8f:f4:4e:b8:
         c4:1e:81:5a:32:40:a1:c3:ae:04:e0:58:5e:20:8b:be:5a:55:
         d9:51:27:19:29:96:b0:66:51:1f:7a:c6:ac:69:30:8c:ea:6a:
         4d:6f:b7:32:bb:81:9c:df:00:17:bf:a5:30:72:c0:78:36:29:
         68:57:0d:29:36:79:7b:7e:7a:da:f3:8d:96:4d:80:6b:50:22:
         6f:d9:24:29:ec:bc:16:96:f9:b0:4d:e8:26:73:ce:95:81:1a:
         7c:38:46:cd:3f:16:04:97:67:ea:da:d7:4f:1d:71:30:f7:13:
         cf:4e:b8:45:3b:8e:91:c3:dd:ae:d0:a1:4f:f1:7d:3b:0b:56:
         38:51:03:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcxNjkxMTAvBgNVBAUTKDkwMEI4NzBDODBDMEVCM0Y4NDY4RjUzRTc2NzJGQTc0
MTc1MkM1RDUwHhcNMjYwNzI4MTYzMjAwWhcNMjYwODA0MTYzMjAwWjAYMRYwFAYD
VQQDEw02YTY4ZDk4MC1lOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5fKyXKjfZU/g+kesF1vo5oTAxmoZDYHVlaO48R/RxA7LtysHMEQ39fvn9PYz
5S/ppsYvROJzAZZtglbutak8MpLz/Hosroz4dTL/rUusdAkTyeli40KmrCEQYZNQ
vfnAMfjazXWpmIVueRIjzgUDM42V/DpEQ0uJpiF8O3BBQS8VaGN9Zj5LWpFXgz+H
XRaLFD8zGVl1u9OOzO/d0Ok6VUBCjJND6nLPaWbpTcY2rXZGV8ayPpxsZVT/909q
Q9xm1hk2w/awl08Cd6AYfrglkCWH0JcC2Cnfb0myTighU+hdwMilWOf1QqM1VSXy
4Af4RkOo3qbxel+0DUA6OrYJhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7mRuHQ
iQLLV9s3olypomOQCkzpMB8GA1UdIwQYMBaAFJALhwyAwOs/hGj1PnZy+nQXUsXV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE2OS81MDI2MDhCNEFE
OTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6LUVhUFUtZG5MNmRCZFN4
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tBdUhESURBNnotRWFQVS1kbkw2ZEJkU3hkVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzE2OS81MDI2MDhCNEFEOTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6
LUVhUFUtZG5MNmRCZFN4ZFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0Ty4iUOt0LI/9GAjbUTLGt7tGtvqRo86RPckz4Dj3UHcbVD++ubOWP+t18e6
XMvpRN9aVxc3lReJFIZC7WjszwA5QvjrcgkwLvLkJIbJyBW04hu11w9lckeVPTIY
r120cvbWVEuHMCj8Kr+07BH94SxGC+05THwJicKP9E64xB6BWjJAocOuBOBYXiCL
vlpV2VEnGSmWsGZRH3rGrGkwjOpqTW+3MruBnN8AF7+lMHLAeDYpaFcNKTZ5e356
2vONlk2Aa1Aib9kkKey8Fpb5sE3oJnPOlYEafDhGzT8WBJdn6trXTx1xMPcTz064
RTuOkcPdrtChT/F9OwtWOFEDdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:35 2026 by rpki-client