Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
File:                     DlRiWWwMbnfhibUb4m4lyRU4xVw.mft (raw, json)
Hash identifier:          DKbBt1TlLeYJ6aH8sVisquLYZHuocX1TVjBdqvspi14=
Subject key identifier:   AF:1B:B6:D3:83:CB:2C:88:73:F8:AC:28:29:B0:44:A2:0D:BF:F7:99
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Certificate issuer:       /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
Manifest number:          0173
Signing time:             Wed 29 Jul 2026 05:59:24 +0000
Manifest this update:     Wed 29 Jul 2026 05:59:24 +0000
Manifest next update:     Wed 05 Aug 2026 05:59:24 +0000
Files and hashes:         1: DlRiWWwMbnfhibUb4m4lyRU4xVw.crl (hash: cLxYJjCLgC0WU0IgBUUX3qSsUugQda5i/M9XZ2uJpmg=)
                          2: 750E873CABF211F0BF8FB00EC4F9AE02.roa (hash: PEAQA7XsorRIuwWsKNbIKqHHMZSV9adPGMNrwws+mao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
                          rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
        Validity
            Not Before: Jul 29 05:59:24 2026 GMT
            Not After : Aug  5 05:59:24 2026 GMT
        Subject: CN=6a6996bc-1123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:f2:08:94:1e:d1:38:6c:13:5e:65:26:02:
                    ae:d6:72:fd:4c:a6:6d:50:f7:9c:4e:19:dc:64:c0:
                    ef:38:47:98:85:fe:bd:0d:77:2a:ef:18:76:16:1e:
                    4f:98:5c:ff:98:f6:1a:1f:04:39:ea:60:a8:5d:9c:
                    bb:37:e6:bc:97:15:6c:33:ea:e7:43:6e:57:c9:8d:
                    e9:78:66:71:0b:35:62:0d:5a:69:56:31:eb:b7:37:
                    d2:bb:89:56:3d:70:b4:0f:d1:41:08:6a:0b:ee:7c:
                    19:d5:99:87:f1:fc:e9:a3:4a:ed:c3:b0:c8:85:8b:
                    48:c7:ee:e4:11:26:31:be:2f:59:9d:1d:a2:a0:0c:
                    8b:c2:c0:4a:22:fd:20:f0:7e:07:41:d4:43:c3:ea:
                    80:6e:05:35:58:24:da:5c:64:0f:66:3e:fe:aa:73:
                    08:65:40:ac:f1:11:97:1e:01:4e:5f:e5:80:69:41:
                    ba:ef:d9:9d:c6:fd:64:f7:3e:a0:f3:6d:02:7d:bb:
                    67:bb:1f:4f:f1:4e:d0:53:1c:5e:95:ac:18:18:07:
                    b6:fd:44:aa:ac:ad:ac:cc:bc:36:22:9e:1c:66:1c:
                    f7:28:5d:72:1e:a3:e4:ff:dd:da:10:ce:4d:12:d0:
                    b9:37:91:33:b1:cd:9b:bb:b8:ca:c3:26:f0:a4:e1:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:B6:D3:83:CB:2C:88:73:F8:AC:28:29:B0:44:A2:0D:BF:F7:99
            X509v3 Authority Key Identifier:
                keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:0a:b3:52:07:a9:0d:7d:a3:5c:7e:f3:95:76:b6:03:12:
         06:b2:27:73:1a:d2:fd:fb:ec:06:5b:32:da:94:2a:a8:28:a4:
         56:cd:40:73:1a:f2:11:a7:12:80:3c:60:a0:1d:34:03:8e:d0:
         b0:04:5d:42:2c:31:d2:b8:c5:22:54:01:c6:25:6a:6a:39:10:
         ae:74:42:57:7f:84:7f:c4:ed:6c:51:7a:97:5a:22:57:ee:39:
         e3:40:5f:01:ba:7f:14:01:24:0c:92:87:ee:bd:69:17:8d:29:
         42:d9:7a:13:29:e0:30:1c:e8:8e:61:c6:88:5e:d1:b2:57:b8:
         e5:4c:b0:9a:36:fc:38:66:c6:4b:d6:1a:01:4b:36:92:df:6a:
         c0:2e:c5:9d:8d:e0:f7:c4:15:d9:2b:68:ef:4e:1b:b3:7c:68:
         94:2f:ee:e7:d7:73:69:59:54:9d:53:e6:bb:0b:96:89:00:2a:
         f4:57:b1:05:a3:95:b8:2e:ff:d3:86:7a:41:4f:1d:43:7b:73:
         e3:e2:c6:83:e4:68:af:a6:25:ef:49:d4:7f:79:8e:ef:72:16:
         f0:05:02:45:c5:4b:1c:7c:90:c4:35:49:39:ee:4b:0e:67:f7:
         7f:8d:36:b2:9a:a4:b8:6b:70:b1:36:d3:1a:60:9f:71:4b:51:
         c8:55:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:58 2026 by rpki-client