Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          rkH62rNm0UVb3AspPHr+GxYOyFO+WPKSGcnVqpZEI/Y=
Subject key identifier:   91:79:65:A6:AF:73:08:D0:5E:50:F6:03:45:23:5A:DF:A4:C1:57:B0
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          01BA
Signing time:             Mon 27 Jul 2026 06:04:57 +0000
Manifest this update:     Mon 27 Jul 2026 06:04:57 +0000
Manifest next update:     Mon 03 Aug 2026 06:04:57 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: e5ndLNLixyCwNWvsfo8eknGFddOLNl4FrGnEtK7XG3o=)
                          2: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: 1qP+GrX3zgK9BKEEg6Dkyc1WLFMQUS+ZMJmqVReMcJ4=)
                          3: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: NZgLuzLqNee1fYy4mFTHbT3bJ6KftmgEr6+x/+S42oQ=)
                          4: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: NZ41GePO+wVrHhL385esVXgxdvkRTvbJf+OBmKNcFbQ=)
                          5: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PUGLK3hnFXvhVOmJO/mpJIqVNCfFg3Hqylh+LQYF1dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Jul 27 06:04:57 2026 GMT
            Not After : Aug  3 06:04:57 2026 GMT
        Subject: CN=6a66f509-43de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:24:b8:6c:1c:45:87:60:5d:8c:0b:95:02:cf:
                    0c:b7:78:72:b5:a9:bf:59:4d:bc:df:79:df:6e:7c:
                    e9:03:1c:75:0d:14:19:75:08:9f:ee:e8:f3:50:ba:
                    41:17:f8:49:24:16:4a:1a:06:19:c4:a5:4c:55:6c:
                    6e:9c:a1:f6:47:34:7c:d3:9c:d0:16:d2:e6:5c:e7:
                    a0:f5:6b:35:a1:40:3a:50:0d:3f:25:37:88:f3:57:
                    06:b9:21:77:91:13:68:17:57:03:2e:5d:87:aa:c0:
                    c2:f1:a4:cc:b3:34:6c:44:dd:fd:ae:50:ec:5f:cc:
                    5c:22:a7:7c:bb:65:42:7b:00:70:b9:3b:7c:20:c6:
                    aa:ef:31:88:47:91:12:ac:80:90:f5:6c:38:33:fd:
                    0e:6b:7b:cf:e7:55:44:e3:d0:fb:15:46:63:29:47:
                    a2:11:0e:c8:2b:5d:4d:08:b5:6a:ce:8c:c9:f7:29:
                    c4:3e:e5:61:87:23:85:8d:9a:24:90:2c:b1:ad:23:
                    71:8a:40:81:0c:49:31:9b:e1:6e:b4:f8:a7:e1:7e:
                    4c:61:e6:58:af:26:e7:77:68:55:43:26:13:58:fb:
                    95:fa:4b:e3:e3:10:19:d7:b2:62:a1:c8:43:6c:25:
                    0f:1c:22:83:29:61:48:4d:f9:2b:1f:f4:49:a7:4f:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:65:A6:AF:73:08:D0:5E:50:F6:03:45:23:5A:DF:A4:C1:57:B0
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:27:2f:72:54:5c:47:e8:34:4d:7e:91:40:45:4c:ec:cb:48:
         80:02:20:ec:de:71:4c:f0:da:20:9d:9e:81:ae:5b:75:bd:ce:
         7a:5b:5b:ae:cc:8e:b0:b0:5f:ac:81:ad:90:b4:26:16:30:3d:
         23:23:96:5a:b4:06:57:9c:1a:a5:f1:e7:3d:d4:82:c3:6e:c6:
         e4:9c:74:dc:e0:8e:26:73:63:45:56:a8:6f:ac:b0:f1:dd:86:
         a3:4f:40:77:b0:5f:6b:e7:d9:c6:8d:0f:a8:67:d7:f6:7a:36:
         73:4c:1a:09:c0:4d:8a:df:0d:b9:2b:46:7d:08:94:b0:84:a5:
         e0:06:d9:a9:34:ad:c3:1a:bd:d4:a1:b6:ac:a4:aa:f8:1f:14:
         e0:8a:5e:77:0f:c6:2c:bc:5f:6d:83:d5:80:4f:a4:27:a5:74:
         ec:f4:6c:e5:3f:a3:38:11:ad:61:0e:c8:57:ea:d4:08:8c:32:
         48:c2:b7:d5:3a:52:5e:11:91:6d:3d:5b:a5:c8:c1:3d:e4:e3:
         8d:68:8b:4e:21:7b:19:ba:9e:f7:85:a5:08:20:39:0e:02:d1:
         4c:ef:cb:e2:90:92:f6:80:68:8f:82:ac:ce:31:9d:e3:27:7b:
         e5:1d:a8:e0:1c:a9:67:ee:07:b9:d4:d2:4b:05:4a:67:13:8f:
         ac:96:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:19 2026 by rpki-client