Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
File:                     jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json)
Hash identifier:          p9tZjiZqN2E+RuhttciV8+exizSi7aOWE8LL9gf06xI=
Subject key identifier:   E9:7B:FA:91:36:73:CD:A3:18:C5:A0:7E:B2:47:93:D6:D6:5B:6E:63
Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F
Certificate issuer:       /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
Manifest number:          029A
Signing time:             Mon 27 Jul 2026 03:02:24 +0000
Manifest this update:     Mon 27 Jul 2026 03:02:23 +0000
Manifest next update:     Mon 03 Aug 2026 03:02:23 +0000
Files and hashes:         1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: D015PWzM/ybzo6FP2ex6eTsk5BMNhb9XDHeMTjbBOEc=)
                          2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: baW8TczqHgHWp8X3LbUuxQJDDpSfZv328YiovnGuH98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
        Validity
            Not Before: Jul 27 03:02:23 2026 GMT
            Not After : Aug  3 03:02:23 2026 GMT
        Subject: CN=6a66ca40-b91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:9b:0e:f6:a2:0d:61:79:58:5c:b7:15:0a:
                    99:12:32:ae:20:7a:5d:83:8b:5b:5c:3d:81:cc:a3:
                    52:2b:cd:d9:c3:4f:57:32:17:56:6f:23:c3:bb:33:
                    21:3f:79:86:39:14:7f:02:35:68:56:29:ea:cb:31:
                    9e:4e:01:32:a7:f3:98:c9:dd:cd:bc:bc:05:e1:55:
                    46:bb:53:b9:53:4f:d9:98:dd:b6:86:88:8c:85:5c:
                    20:8d:63:e6:60:91:9f:d5:16:83:1e:6e:f9:e0:fd:
                    ae:42:97:d1:a8:0a:1d:34:a1:27:00:cd:ed:bc:f7:
                    77:cd:f6:51:88:04:eb:85:6b:fd:02:88:e3:a7:3b:
                    90:36:38:b2:5c:d6:fc:c6:01:66:f8:f5:89:57:e3:
                    21:10:29:74:f0:14:29:ad:93:fc:90:18:c2:cf:ff:
                    7e:8d:fb:eb:06:91:3e:0f:d4:11:6e:b0:91:02:78:
                    e2:16:b1:13:61:46:af:cb:31:25:8a:26:23:5b:53:
                    40:b1:76:37:1c:c7:a7:02:93:3f:b5:ee:dd:a3:2a:
                    49:31:c4:c7:79:ac:76:b9:f5:a5:e0:86:b3:f0:47:
                    48:88:3f:0b:9b:4b:a8:1b:70:3e:2e:62:d4:f7:6b:
                    67:3b:5e:4e:33:fd:40:40:9d:e3:4d:3f:99:21:d7:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7B:FA:91:36:73:CD:A3:18:C5:A0:7E:B2:47:93:D6:D6:5B:6E:63
            X509v3 Authority Key Identifier:
                keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:41:6f:c1:f1:19:e3:8f:bf:fa:c0:c6:8e:19:41:ef:cb:fa:
         92:a4:df:9d:d3:d7:bd:41:4b:e4:ac:6e:a5:3c:fd:2f:ba:d4:
         24:11:0d:06:f5:0f:bf:b0:40:77:c1:45:4d:a1:b0:98:ff:a8:
         79:0f:00:1b:55:83:a0:49:b9:40:03:df:86:9f:fe:a7:d1:5a:
         97:5a:d2:23:da:5c:f6:b7:9e:56:11:24:0c:c0:42:02:81:c7:
         cb:4d:f0:f9:38:c7:e2:e2:3e:5f:4d:b6:6f:86:df:dd:d3:69:
         49:83:53:27:6d:aa:96:68:3b:e9:c1:81:27:c1:98:c8:5e:ae:
         25:21:96:6a:ca:9e:b4:b0:8f:72:7f:d2:65:23:32:88:ee:4a:
         79:a0:b5:af:ed:91:92:1a:a7:c2:00:33:4b:51:24:17:0c:a3:
         a2:2d:98:e4:bb:33:18:18:bd:cf:49:d7:65:b1:b7:cc:cf:0f:
         68:8c:6f:8d:49:08:54:29:b7:fb:d5:56:bc:1d:0a:e3:65:34:
         71:fa:9f:4f:b1:2a:93:22:65:b6:35:fd:aa:22:88:41:cd:a5:
         b9:14:4c:b6:a9:a7:6a:c0:29:d4:48:23:87:56:05:d6:1a:da:
         40:80:b9:2a:ef:a4:bb:52:59:9e:4b:d5:53:0e:d1:c4:91:5f:
         40:bb:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:19 2026 by rpki-client