Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File:                     5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier:          HmFcbTkEm+JZrGdI72egM7j0lkIWm+7mLhwpDXnPJH8=
Subject key identifier:   2B:4E:2D:A4:46:03:D0:72:1F:83:B5:05:8A:0B:20:58:34:9E:01:21
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer:       /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial:       1494
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number:          1468
Signing time:             Tue 28 Jul 2026 16:59:14 +0000
Manifest this update:     Tue 28 Jul 2026 16:59:13 +0000
Manifest next update:     Tue 04 Aug 2026 16:59:13 +0000
Files and hashes:         1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: MHmyjiyZHxVds7LigRrS7UPCZOGuDQzcSx59E/aY7VI=)
                          2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5268 (0x1494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
        Validity
            Not Before: Jul 28 16:59:13 2026 GMT
            Not After : Aug  4 16:59:13 2026 GMT
        Subject: CN=6a68dfe2-4a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:8d:1a:2e:42:df:ec:48:aa:53:c8:0a:cb:
                    85:27:fa:b8:9d:7c:de:00:fe:5e:10:7d:fa:6d:d2:
                    11:de:e4:ca:af:2e:65:a8:5d:e7:76:ad:c9:5d:d1:
                    76:bb:5c:48:7f:d4:7e:44:2e:1b:02:e9:86:a0:87:
                    47:b0:61:34:a3:08:03:87:fe:09:31:9d:53:31:40:
                    ae:6e:e6:8c:8d:30:7f:83:c9:0b:db:8a:c6:f6:54:
                    46:15:31:9a:a2:eb:eb:d1:1f:72:24:ec:07:a6:b4:
                    0f:8f:35:d3:b5:0f:6c:86:01:8a:80:25:df:25:f6:
                    8a:48:4d:b3:db:24:b5:15:db:e3:b4:a3:74:bb:5b:
                    02:2d:22:4f:a5:3d:b2:d7:ab:cb:63:d6:68:3c:92:
                    71:ab:93:b1:30:99:a7:28:fc:d3:3b:85:b6:4e:1d:
                    d1:8b:97:9c:3c:fa:9c:45:ca:97:c5:b3:c2:f0:23:
                    d5:38:44:6a:3c:cc:41:4b:67:7d:ff:be:d8:a4:d8:
                    a1:4f:e6:55:4c:5d:da:0e:de:e7:eb:b9:b7:c8:fa:
                    99:ea:5b:8e:e5:8a:ed:3d:4f:cf:d5:66:35:91:47:
                    63:c7:d3:8d:79:5d:dc:02:9e:b9:23:88:df:4e:d8:
                    3f:bc:f9:64:90:38:f8:ce:d6:da:c6:e2:24:92:e4:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:2D:A4:46:03:D0:72:1F:83:B5:05:8A:0B:20:58:34:9E:01:21
            X509v3 Authority Key Identifier:
                keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:e9:ee:5d:64:68:cc:49:0b:98:29:b8:b2:2e:1e:e2:ee:
         55:5b:2a:a7:75:79:7d:3f:a7:e5:1c:d4:7b:0e:a5:0c:ff:2f:
         67:57:d2:38:f9:fe:3f:dc:1b:cd:5a:ef:11:ca:34:30:33:a4:
         99:94:b3:24:4b:85:92:8d:6f:bf:f3:96:6f:15:8d:23:fa:29:
         7c:b3:03:6d:8c:6f:d9:a8:51:72:1b:cb:9b:1d:cc:b2:c2:6d:
         00:52:68:54:18:e4:ec:65:98:bc:ae:b0:68:c5:0f:69:0d:41:
         66:36:3e:a1:e2:ca:da:c8:e9:1b:9f:02:75:d7:c1:8f:bd:c5:
         88:7b:c3:eb:43:26:7d:b4:0a:c0:00:30:4a:4c:d2:81:17:f7:
         e1:93:e6:e0:8c:d2:49:dc:49:fa:19:5a:d4:df:39:74:4a:f5:
         bd:6d:3a:cc:e7:92:df:6b:a4:3c:c4:52:b3:3d:ce:1d:33:66:
         7f:d7:a4:42:3b:bc:8c:bf:e3:1e:a6:85:d2:fa:d7:5e:fe:bf:
         76:83:fc:78:53:85:8b:b0:a3:79:65:fe:03:8d:04:be:01:79:
         36:2f:3e:30:64:84:58:5d:50:65:a2:17:db:a5:98:01:b0:f6:
         88:0c:58:a9:7e:92:56:8a:07:fa:6f:10:8f:fc:f7:06:73:9c:
         39:c6:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:04 2026 by rpki-client