Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File:                     vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier:          r9BbjFOvsnL329v1sFX0xZmHj9t4+NdOHHadi8jHWYE=
Subject key identifier:   27:5D:97:47:76:1E:7D:24:8F:BF:23:C0:A9:D9:C3:30:A2:55:EB:6E
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer:       /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial:       07FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number:          07EA
Signing time:             Sun 26 Jul 2026 21:59:32 +0000
Manifest this update:     Sun 26 Jul 2026 21:59:31 +0000
Manifest next update:     Sun 02 Aug 2026 21:59:31 +0000
Files and hashes:         1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: PQt8s/yhDXKUowtBEBbLYuABBHxUd1/1yDc6EqOV4us=)
                          2: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: 4xgzK7PrNpZAnd72wXzvBuPzMZA+sokeDoeYoGYDtEI=)
                          3: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: mtoKEHPZWLoyi/r8N8V2JGeY1kwSeTuX6aCOjVwyle4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
        Validity
            Not Before: Jul 26 21:59:31 2026 GMT
            Not After : Aug  2 21:59:31 2026 GMT
        Subject: CN=6a668343-cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:da:84:6d:6b:ed:3b:66:3e:30:33:c7:d2:
                    40:a9:33:cc:4a:07:0a:0e:55:65:d2:bf:5a:0f:06:
                    f7:e0:97:a9:8c:67:14:c4:d6:c3:45:4c:ff:c5:0b:
                    57:d6:c9:a2:17:6e:a4:f5:e5:26:c9:fc:91:e3:bb:
                    56:a5:a7:f6:9c:83:c0:ae:a6:df:57:c5:fa:47:68:
                    d4:31:94:08:16:44:64:a3:fa:06:c0:b7:71:32:45:
                    69:13:c2:d0:9b:54:86:0e:9e:c5:b7:c7:26:cc:64:
                    28:df:9a:1c:73:cd:c3:a5:65:87:a6:79:86:ff:ab:
                    7f:a8:97:76:59:bd:3f:d3:8e:e4:f4:8e:ac:00:6c:
                    74:2b:17:14:05:4f:33:67:b3:9d:cd:b5:d7:4d:29:
                    f6:e4:0c:af:87:c4:69:67:21:8f:d1:5b:ff:85:79:
                    67:cf:40:82:59:cb:4f:73:bc:4b:81:3b:f0:fb:fc:
                    5a:ef:a9:48:ae:b3:46:5e:64:52:68:63:49:67:9b:
                    ec:8a:4e:86:06:4c:8b:6a:2c:3d:78:f0:c2:ca:eb:
                    66:05:08:7b:08:b0:79:a5:6d:1d:27:c1:85:3a:fe:
                    eb:c8:77:6d:95:fb:04:19:5f:23:01:55:eb:2e:bf:
                    51:02:dd:25:59:06:2a:83:75:e8:d1:3a:26:36:ad:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5D:97:47:76:1E:7D:24:8F:BF:23:C0:A9:D9:C3:30:A2:55:EB:6E
            X509v3 Authority Key Identifier:
                keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:d4:6c:67:18:85:cb:86:f6:60:64:d5:45:df:a4:cf:69:
         63:20:53:b3:47:f8:a6:12:12:0c:34:7d:7a:b4:ac:7d:7e:fa:
         a1:b7:00:3a:ff:20:20:6a:8f:38:02:4a:80:a1:91:78:5e:d7:
         bd:95:d0:d2:ff:43:1c:be:bf:95:59:97:35:e0:d8:63:0c:11:
         e4:1e:ef:7d:78:cd:aa:f0:fc:2b:d6:b6:c8:5b:78:90:22:d9:
         e8:30:bb:63:0d:48:b1:25:b0:d9:e8:31:1f:f9:08:bd:80:d8:
         ce:08:6c:c5:61:e4:ef:d2:64:58:65:ee:e3:33:2c:98:06:82:
         d7:32:7a:64:25:c8:d5:da:f9:7a:91:ff:00:9f:2f:db:bd:26:
         30:67:47:9b:f7:36:b7:b1:a2:20:88:0a:10:54:46:b3:a9:f7:
         21:ae:b6:ec:7c:d5:a4:00:cc:24:c8:e3:bb:27:b2:c4:32:ae:
         d9:63:0f:ab:36:4d:77:39:93:0c:08:04:ec:3f:00:03:e2:89:
         fd:90:88:68:de:e6:87:8f:f6:68:79:95:e9:6e:ae:e1:62:44:
         f9:c7:6f:c8:b1:6f:1b:4c:04:91:4c:c7:82:78:fe:2e:8b:ce:
         6e:73:f4:41:41:14:4e:26:a9:2a:30:46:95:e3:b3:88:72:e0:
         a9:55:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:41 2026 by rpki-client