Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
File:                     JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json)
Hash identifier:          7+0+M5EpJIdq9jnusFQvcdQTFXviFDXjJeMINM+nfqg=
Subject key identifier:   AE:5C:D3:CF:93:ED:00:E9:46:6A:55:EC:F6:A9:5D:E4:86:BA:D8:9B
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Certificate issuer:       /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
Manifest number:          01C7
Signing time:             Mon 27 Jul 2026 05:37:37 +0000
Manifest this update:     Mon 27 Jul 2026 05:37:36 +0000
Manifest next update:     Mon 03 Aug 2026 05:37:36 +0000
Files and hashes:         1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: sDfapCWMGCnWMmYVEcLUJ3UCleYroNV89k7o/k9MEs8=)
                          2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 1AVC031hsrlcjlMHgOtfIB20iuFsoNxmwrDznlqN4TA=)
                          3: 683E73BA664A11F183E2ACC07047A888.roa (hash: zzbifsuUJU8SyQGKEOYnqcaJexnydnzq2UEdFbkQNUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
        Validity
            Not Before: Jul 27 05:37:36 2026 GMT
            Not After : Aug  3 05:37:36 2026 GMT
        Subject: CN=6a66eea0-92a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:ec:c3:80:d0:e3:25:8c:87:18:64:d2:a9:
                    09:89:29:d5:3d:98:db:b6:9d:cf:89:ca:c4:84:2e:
                    cf:fb:c5:9b:29:2e:b4:b4:b7:74:b2:b9:ef:2f:5a:
                    d9:3f:9d:4a:c3:ae:35:25:b4:74:95:d9:be:a3:f9:
                    0d:e5:ee:64:ec:2e:02:39:7d:2c:c5:42:44:c8:6b:
                    f8:ea:4e:2c:73:98:c4:02:cd:7f:6b:aa:45:b0:ee:
                    e5:d3:e7:dc:fd:05:d2:75:59:db:4b:57:83:7d:2f:
                    50:cf:37:eb:01:0d:79:74:cb:8e:91:07:d5:d5:9b:
                    bf:27:02:31:a6:f3:46:ee:7d:28:f7:bf:97:73:ae:
                    51:42:7d:85:a1:ab:a0:00:d0:1f:3e:43:e4:60:ec:
                    df:3a:78:f1:91:60:87:4b:0e:db:2f:ca:29:08:8d:
                    75:8e:77:d2:48:9e:9f:e3:84:a9:9d:d2:d4:42:68:
                    26:60:eb:cc:ab:94:27:f9:05:27:7c:2d:55:00:2e:
                    d9:9f:40:62:56:43:7d:2b:56:48:00:66:78:ef:89:
                    cd:e3:23:21:f0:c6:d9:e5:91:c1:15:ec:6d:72:25:
                    5f:eb:54:42:10:79:2f:1f:a4:e1:4c:75:ca:fd:2d:
                    2c:68:d8:4f:c5:09:8f:f4:87:62:34:24:85:bd:2e:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5C:D3:CF:93:ED:00:E9:46:6A:55:EC:F6:A9:5D:E4:86:BA:D8:9B
            X509v3 Authority Key Identifier:
                keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:44:20:2a:06:b6:c9:bd:5e:c9:9a:38:2d:38:63:c5:e2:4c:
         cb:d4:6b:d1:f1:14:f8:f8:59:bf:19:06:2d:95:a0:bc:f5:b8:
         4c:5c:cf:dc:3a:bf:a3:57:04:fe:0e:b1:5a:6a:b5:50:17:ba:
         cf:5a:60:cf:cb:73:ca:a9:9f:98:16:60:d3:09:0d:29:76:0e:
         ca:6e:c6:39:0f:ca:ad:68:8f:a1:e3:78:f4:68:7b:a8:5d:21:
         72:db:c7:ab:b8:8e:1a:dd:0a:74:f8:51:f3:77:8f:52:2b:7e:
         ef:b6:0d:57:d6:5f:13:f5:64:70:4d:6e:a7:fc:9c:b3:8a:f7:
         6a:bc:68:1b:8a:97:5b:88:64:a0:26:6e:16:c3:32:86:ba:c8:
         20:46:e8:6b:b3:69:18:f0:63:d5:4e:5a:b5:97:f1:a7:53:c3:
         0c:26:a4:36:ec:59:85:71:2f:c3:3f:64:d2:d0:6f:88:3c:3c:
         44:e8:fa:8c:1b:50:8c:e3:c9:a7:fe:19:10:04:72:ba:87:35:
         d4:71:3d:e6:57:3e:e5:54:6b:59:1b:0a:55:97:c6:5c:c4:2c:
         71:1f:89:ff:9c:4e:19:5d:a3:f6:a4:3d:25:87:d5:83:b8:a9:
         6f:42:d3:46:35:cb:44:6d:99:94:02:0f:0d:80:be:ac:11:37:
         6b:ed:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:44 2026 by rpki-client