Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File:                     1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier:          i8+H4Lt+a4pX9c3owGKnHzRCjIrEfXAN0RTpDG3aOKE=
Subject key identifier:   5F:2B:0F:E8:B8:FE:F2:A7:95:A8:46:F0:64:F3:7D:36:5D:CE:F3:A8
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer:       /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number:          0180
Signing time:             Mon 27 Jul 2026 06:26:11 +0000
Manifest this update:     Mon 27 Jul 2026 06:26:11 +0000
Manifest next update:     Mon 03 Aug 2026 06:26:11 +0000
Files and hashes:         1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: 11O1YpjIbzzuIXm5bQ0BVjeZ98MuKM39MGxcwiKdiy4=)
                          2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: PhRLsqDQKZKtbRG6RFHUAVfVtgK8nsse16kNHaAg5Hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
                          rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
        Validity
            Not Before: Jul 27 06:26:11 2026 GMT
            Not After : Aug  3 06:26:11 2026 GMT
        Subject: CN=6a66fa03-cb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:fc:d4:30:83:5a:60:48:b6:7b:8e:f6:83:
                    1d:58:0c:23:0d:bf:e6:81:c6:fd:de:71:a5:45:3e:
                    6d:0c:6d:c2:30:fb:c7:69:8e:58:6f:7c:e6:7e:65:
                    40:34:d8:c2:85:e7:3b:84:97:5e:b2:4e:75:3c:d5:
                    6c:65:9f:5b:01:b8:77:ed:91:b6:7e:2a:72:ae:3c:
                    29:63:dc:05:3b:6a:05:40:f2:25:3b:de:c4:7f:c3:
                    c6:98:5c:fe:cd:ff:c9:13:1e:46:3f:7f:af:bc:b7:
                    1b:71:10:bb:14:d8:0b:52:ff:64:a2:34:ea:19:ac:
                    b2:82:74:70:22:4b:f9:8e:0c:79:16:27:a7:c7:3e:
                    38:61:ee:0f:dc:fb:bd:cb:ee:bf:af:4c:a2:7e:fd:
                    c9:8a:54:c7:6f:e5:19:c0:3d:4c:4e:5d:c4:60:fd:
                    d4:18:95:57:b5:4e:42:f7:7b:f3:8c:a0:c2:e5:c0:
                    2a:54:60:e0:9b:bf:59:6d:2b:4e:3d:12:b4:92:d8:
                    43:15:41:03:38:71:16:63:fb:d0:c1:46:f5:ab:d0:
                    d2:d7:a4:1e:14:06:0d:ae:3f:1e:75:5a:e6:c8:8d:
                    b1:bd:fa:dc:7b:90:93:d7:93:b6:b1:be:a2:30:bc:
                    0c:d5:ae:47:80:f2:6b:4d:cd:b2:1e:47:48:68:6d:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:0F:E8:B8:FE:F2:A7:95:A8:46:F0:64:F3:7D:36:5D:CE:F3:A8
            X509v3 Authority Key Identifier:
                keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:66:74:31:c9:e0:90:c7:94:81:72:31:c2:3b:8e:06:63:97:
         c6:50:b1:47:a9:cb:09:23:39:ee:d1:4a:a9:9c:63:96:6d:55:
         b4:cd:46:07:07:51:04:4f:db:b5:34:6f:b9:19:c6:ad:75:4f:
         02:a0:c4:7a:0e:a2:23:7c:02:e4:2e:33:bc:3a:9e:1e:cd:01:
         9c:3e:e6:e9:02:df:fa:d8:89:70:9c:bd:a3:80:49:9e:5f:01:
         21:6b:53:39:29:1c:da:45:ae:62:22:61:fe:3f:79:d0:ef:d6:
         f7:df:d6:f7:86:da:3a:dc:e1:3f:78:fc:1f:59:12:3e:b0:a1:
         ac:58:d4:67:58:62:d9:e3:93:d9:f3:d2:85:7e:30:f2:97:23:
         00:e3:32:2c:21:de:a3:09:9e:06:ee:f4:de:f0:0d:f1:f2:c0:
         ad:b8:7f:ef:c1:82:36:63:52:0f:b4:21:55:21:b4:e3:3c:9a:
         12:88:9a:37:12:40:3a:26:2b:ed:93:e9:84:8e:94:32:3c:39:
         e1:0b:fe:a4:1c:05:7b:f1:6a:00:d6:3c:98:24:68:49:7f:3a:
         80:3d:34:f2:f4:20:04:44:d0:71:f6:b4:1e:32:b5:53:00:79:
         2e:11:7a:f9:98:f1:cd:0e:86:76:db:49:46:8f:87:7b:22:22:
         d7:7b:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:45 2026 by rpki-client