Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File:                     _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier:          CAjjcZzo7w8Q588WfGD8h664+WPWnVjxPc7WGHELr+8=
Subject key identifier:   3C:7A:56:A0:AF:C7:BA:C6:F5:49:67:FF:34:D8:44:A7:3C:61:B4:4A
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer:       /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial:       0D74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number:          0D35
Signing time:             Tue 28 Jul 2026 18:33:05 +0000
Manifest this update:     Tue 28 Jul 2026 18:33:05 +0000
Manifest next update:     Tue 04 Aug 2026 18:33:05 +0000
Files and hashes:         1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: J43nXrHO/nSL+LCufCbQoV+ml9VKDITdcgliYS3xv34=)
                          2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: STPsoHykGH883jZd7PHWkCRzW28Vwl2tuDcKNWuClEM=)
                          3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: GxHO9vhkZZ6yMHc2121mln0db/uLLdFiDdhvsMD2Mh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
                          rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3444 (0xd74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
        Validity
            Not Before: Jul 28 18:33:05 2026 GMT
            Not After : Aug  4 18:33:05 2026 GMT
        Subject: CN=6a68f5e1-bfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:43:92:35:58:fd:c5:23:30:82:46:50:29:
                    42:29:f5:e0:17:42:fa:17:97:3f:fb:7d:98:e5:b5:
                    56:17:93:12:3d:b7:84:3a:87:b1:22:62:20:c3:58:
                    77:1d:2a:cb:c2:0b:14:13:b8:18:f7:f8:fa:de:50:
                    99:45:dc:72:e2:ba:a8:d5:0a:e3:af:ff:5e:75:0a:
                    ac:72:ad:eb:85:bf:3a:79:96:d7:d5:8b:88:e4:b3:
                    66:87:f0:f9:aa:6b:15:d0:fb:c5:7a:c0:f4:44:cc:
                    e6:ea:47:fb:2f:21:23:7e:9c:4d:bb:86:16:6d:8b:
                    ae:f3:32:78:ac:29:4a:98:98:4f:73:63:3e:49:12:
                    9e:fe:0d:26:d1:a6:cb:49:bd:c7:3e:de:c7:a8:b2:
                    c7:8b:ad:94:8f:67:d7:c5:ef:6e:cf:c4:c5:54:fd:
                    86:da:a6:84:08:75:44:9c:a2:1f:c3:52:36:c2:96:
                    cd:d8:d1:3b:ba:2c:ec:8d:f2:21:55:b7:99:ae:73:
                    da:65:04:ba:31:51:4f:bc:2c:71:57:1f:6b:c3:42:
                    2c:50:a3:6e:d0:4f:26:8b:42:54:74:26:e8:e8:64:
                    0e:4f:9c:cf:dc:91:cf:e2:ff:73:26:5c:05:d5:ce:
                    2c:56:2f:e7:85:59:74:5e:db:0e:fd:a6:37:3a:3f:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7A:56:A0:AF:C7:BA:C6:F5:49:67:FF:34:D8:44:A7:3C:61:B4:4A
            X509v3 Authority Key Identifier:
                keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b3:7a:b1:c7:32:d2:4c:be:58:26:65:b2:72:c1:f3:53:17:
         8c:90:c8:dc:b5:91:fa:f4:35:62:9c:36:17:42:f9:d8:4c:c3:
         55:ec:1e:02:88:ce:28:a4:0e:ed:15:42:9e:66:c6:45:9d:8f:
         f6:59:b6:7e:70:79:2c:9b:23:d3:a9:67:5d:3f:c8:b1:2c:b5:
         fc:c2:93:5a:82:f8:69:32:c1:a1:54:38:10:7c:fe:50:a4:9d:
         8f:9d:3f:1f:fb:80:a9:51:37:48:b9:55:24:03:1b:51:0d:77:
         ab:11:ec:29:cd:e1:88:3d:e2:f1:dc:ae:b4:6d:69:45:e9:0a:
         5e:92:18:c8:12:97:81:aa:05:73:6c:c0:5f:fa:97:27:2c:6d:
         ec:1c:61:81:68:3f:f4:b3:e5:95:82:3c:00:10:35:c4:24:da:
         c7:68:3a:01:8a:cb:f7:d9:19:13:00:9d:9c:32:5a:ee:13:c8:
         38:08:93:ce:8c:0c:03:50:93:f3:23:49:4a:cf:ff:69:99:e3:
         21:e9:04:7c:de:b1:ac:4e:dd:9c:43:ef:ec:09:f9:9e:a2:42:
         f6:15:0f:b0:be:0d:8b:18:30:d4:c4:35:31:50:55:14:f7:df:
         69:e4:5a:dd:34:e8:a4:5a:cf:f3:6f:63:f6:06:b0:c1:5b:ae:
         5d:be:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:14:06 2026 by rpki-client