Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File:                     CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier:          hc4SbQukNOQ2f3qr7nLyGuVzdIlhJ1s8KrVNZOTjgHk=
Subject key identifier:   07:3A:36:70:64:E8:35:04:56:01:22:A0:80:A4:AF:C1:10:BB:C2:92
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer:       /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial:       1A2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number:          1A1E
Signing time:             Tue 28 Jul 2026 16:26:29 +0000
Manifest this update:     Tue 28 Jul 2026 16:26:28 +0000
Manifest next update:     Tue 04 Aug 2026 16:26:28 +0000
Files and hashes:         1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: 5CsSLuJ3CFGg6q912KlnzcyPMs6b/kxj4QKCjtmF+ug=)
                          2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: DCBXdQ3TUOdDXYDH2IWIye/rRhJnHFBuWi5K22qghWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6701 (0x1a2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
        Validity
            Not Before: Jul 28 16:26:28 2026 GMT
            Not After : Aug  4 16:26:28 2026 GMT
        Subject: CN=6a68d835-807c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:3a:c1:9c:fb:61:6c:fe:81:1c:16:7c:e6:
                    3a:f5:5a:8a:aa:9b:07:e6:dd:32:3d:6d:b4:ac:e7:
                    95:d1:31:d9:10:d3:57:72:83:b3:1d:15:61:e0:a7:
                    19:e5:84:73:ac:8f:03:89:df:b2:37:ff:d4:6e:94:
                    e5:28:6f:c3:e1:89:fc:70:6b:fb:1e:8c:6d:1d:fd:
                    1f:1c:6b:1b:0d:6c:d8:18:1a:e6:8c:c1:0f:da:64:
                    53:56:31:05:33:d4:2e:98:4c:9e:8d:36:68:cf:5d:
                    08:97:6b:f1:d3:d9:3d:8b:d1:5e:0a:4a:a5:37:7a:
                    30:48:90:f0:76:2c:3b:c2:de:69:30:cf:5a:eb:25:
                    29:2c:01:ff:3b:99:5d:00:ea:20:bc:04:26:bf:93:
                    3f:80:6d:6e:68:4a:ea:95:66:03:6d:96:4f:4e:79:
                    6c:b7:91:14:25:c7:3c:d2:93:4c:63:b6:b7:7c:ac:
                    aa:87:2b:4d:ab:7e:74:af:9e:02:1e:37:2a:ad:44:
                    e1:17:e7:81:47:c3:12:5f:cb:f7:11:2d:13:e8:c6:
                    d0:8f:17:f1:8e:87:05:4b:b7:3d:ab:3d:30:ff:18:
                    d0:92:46:8f:1d:d6:bd:fa:ae:85:f5:5b:2b:22:e8:
                    72:8e:82:6c:fa:7d:b3:1f:9f:ab:1b:45:65:37:89:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:36:70:64:E8:35:04:56:01:22:A0:80:A4:AF:C1:10:BB:C2:92
            X509v3 Authority Key Identifier:
                keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:07:cf:58:e5:9f:6d:a7:70:4d:f8:19:11:35:7e:fa:c1:
         d2:5a:ba:c9:9a:15:4e:a6:62:d8:4b:32:c1:22:e6:1d:4a:eb:
         8a:df:07:5a:c3:6c:21:0c:cf:42:62:a5:37:04:63:ef:7f:d9:
         41:f7:68:3e:9f:49:f2:6a:09:ed:2d:62:fa:06:7f:70:e5:57:
         73:52:d4:95:ba:33:b4:a5:68:97:28:2d:fc:cf:d1:91:b0:21:
         a5:17:e1:7d:4d:95:67:60:6a:d2:17:a7:f3:29:8a:c2:a5:46:
         d3:c5:90:3e:25:19:b6:88:8b:ad:d1:92:9f:7c:61:41:40:8f:
         17:75:cb:f2:26:3d:d1:1f:f0:34:76:3a:24:3c:c8:83:30:c9:
         a2:40:76:1d:6e:0b:c1:58:2f:9f:53:8e:6f:fb:56:ce:ae:39:
         71:c4:b2:3a:55:03:a4:9f:25:e6:06:78:3e:2f:bc:ae:a3:73:
         24:3c:78:bc:6b:e1:3d:91:0a:58:d3:51:ac:1f:86:45:d5:e7:
         34:78:c5:01:1d:60:8e:6e:06:b6:d1:ea:e8:ad:0a:f9:0b:ba:
         2f:f7:5e:f2:83:b3:03:4a:82:f7:af:33:2e:48:e8:b5:ae:79:
         5e:95:42:14:3a:bd:25:d3:fb:07:c4:e2:78:86:05:fd:8e:12:
         3c:70:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:58 2026 by rpki-client