Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
File:                     cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json)
Hash identifier:          NjTCYJM7h2EWZihePkZrWAY2ARPhiL4iDvIys7Rvw7c=
Subject key identifier:   89:BD:46:51:BA:5C:AB:59:0C:0E:C7:28:1D:64:64:27:CA:19:83:67
Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A
Certificate issuer:       /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
Manifest number:          026B
Signing time:             Mon 27 Jul 2026 03:34:52 +0000
Manifest this update:     Mon 27 Jul 2026 03:34:52 +0000
Manifest next update:     Mon 03 Aug 2026 03:34:52 +0000
Files and hashes:         1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: mDZXW9IDaJbp6515skUUxEg1K7QTJ63R5MKR/AAf6xQ=)
                          2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: 59GaugIUboIgNlDlRnXyjQ4DeYaCEIFAJ1XQPKcxrCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A
        Validity
            Not Before: Jul 27 03:34:52 2026 GMT
            Not After : Aug  3 03:34:52 2026 GMT
        Subject: CN=6a66d1dc-acc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:fa:b7:fa:6c:20:32:80:20:b1:25:fb:09:
                    f4:c5:d7:b6:b0:4e:5b:85:35:a2:5b:77:23:d9:58:
                    0e:31:03:69:c7:b5:ac:30:1c:6a:bc:cb:bd:c4:5e:
                    2b:6b:c3:63:e3:12:4a:4a:cf:58:74:90:fd:53:08:
                    b1:f5:db:86:f4:34:ae:65:8c:af:34:57:18:ee:69:
                    82:17:16:23:dd:6d:f1:53:2f:df:bb:d8:08:56:b0:
                    62:77:a5:9a:0a:ce:3c:48:b0:0a:14:1b:5a:8e:e5:
                    ae:e7:23:e4:ec:8f:ab:42:05:00:e0:35:55:fe:bf:
                    cf:b5:65:5b:94:09:65:c6:f7:1f:2d:28:ac:b2:ef:
                    b1:54:80:4c:26:41:2e:42:0e:e9:b4:b6:63:82:9e:
                    3f:e4:d8:d7:96:ae:84:b8:16:4e:18:c9:72:4a:a8:
                    55:c9:5b:03:fb:7e:72:40:10:5d:e4:62:56:f5:5a:
                    df:c9:53:b1:81:3a:17:6b:50:eb:b1:23:bd:b9:71:
                    46:dc:c4:53:30:3b:15:1d:b8:fc:b3:48:53:c7:61:
                    82:4d:d5:f3:d7:2c:8b:07:c0:e5:74:bd:eb:94:63:
                    a3:88:d2:1d:f2:42:85:a0:c1:a8:2f:fb:25:a7:19:
                    54:79:c6:c1:00:a2:2d:09:ed:57:7e:72:39:0f:1a:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:46:51:BA:5C:AB:59:0C:0E:C7:28:1D:64:64:27:CA:19:83:67
            X509v3 Authority Key Identifier:
                keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:de:22:f3:0c:5b:f4:93:e2:e4:d3:78:48:4b:6a:6a:ba:1e:
         5d:eb:e6:77:7a:65:cc:41:eb:09:f6:57:83:91:ad:29:1f:16:
         61:12:02:c4:3c:63:66:e8:a6:aa:85:96:ed:ce:69:46:99:d9:
         87:58:d2:28:b8:bb:81:2a:9d:6f:44:d8:4a:d2:08:4c:16:7c:
         a5:43:4f:8c:50:1b:92:d9:10:dd:68:e3:dd:33:d1:d3:fb:a1:
         5d:b4:e6:9e:95:2a:44:86:db:da:e7:f1:70:ab:35:58:23:d4:
         fb:79:f2:7f:fc:b6:f0:9a:6a:41:a9:ac:ea:67:00:c3:b9:d6:
         a1:95:18:8d:07:60:41:be:83:70:1d:80:d7:5b:5f:6f:b4:29:
         da:fe:ad:2e:d6:cb:2e:9d:bc:2f:5a:17:ef:05:55:b8:fc:90:
         41:70:0a:c6:ff:19:56:5e:bb:03:0e:a6:56:34:2c:aa:0b:9b:
         2d:68:f9:bd:5d:fb:e0:7f:a9:ef:f6:15:ab:8e:ec:1f:68:f4:
         1e:1d:86:a5:27:b0:f3:46:55:cf:86:38:54:eb:bf:3c:cc:a9:
         f7:16:7b:80:9e:3c:19:77:0c:26:5a:22:c6:98:be:6d:87:86:
         95:f0:e2:36:2a:0e:3d:a6:e4:27:55:f7:d7:71:ce:4e:e0:42:
         0f:df:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:51 2026 by rpki-client