Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File:                     b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier:          NDlgydWMHnkOCExWpCJWg4CNU/5vHRdG/OEB5HOwHWQ=
Subject key identifier:   91:DF:79:07:D1:1B:2F:C6:91:CF:FB:9F:D1:1D:9C:58:D4:0D:9F:23
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number:          0210
Signing time:             Mon 27 Jul 2026 04:35:39 +0000
Manifest this update:     Mon 27 Jul 2026 04:35:38 +0000
Manifest next update:     Mon 03 Aug 2026 04:35:38 +0000
Files and hashes:         1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: joVUaKEtOdEbAqAQsL5BfXuCaxBlDTrxUje17wEE3u0=)
                          2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
                          3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Jul 27 04:35:38 2026 GMT
            Not After : Aug  3 04:35:38 2026 GMT
        Subject: CN=6a66e01b-9ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:4f:d2:62:13:00:a1:b3:83:a6:d8:da:74:
                    83:d3:8b:ae:41:e4:e8:c3:fc:ac:ae:1b:96:d3:ea:
                    1b:d6:be:f7:91:bf:0d:a7:72:c3:5c:ba:5c:f2:02:
                    0a:30:fd:ce:c6:ec:92:d5:f5:c8:4c:ac:38:a5:8c:
                    5a:63:f1:91:43:02:6c:28:d2:8a:4d:9b:de:da:23:
                    0d:ea:95:33:2c:1a:25:fc:af:9a:cf:ae:80:00:4e:
                    9c:14:d3:cb:c8:46:88:72:cc:6e:0d:75:d3:9d:f3:
                    12:37:aa:48:3e:cb:77:2e:2f:05:f7:86:8f:8f:08:
                    1b:fa:55:8a:eb:e7:f3:3a:a7:4e:0c:3d:91:d6:73:
                    59:97:b4:c3:11:7c:c3:fa:30:d5:2d:3d:4a:aa:ba:
                    33:9c:a7:90:76:3b:9d:9c:59:9a:e8:c4:75:3e:9d:
                    03:db:21:a9:b2:16:26:50:70:75:6a:dd:8f:dd:5a:
                    be:9e:86:a8:99:e1:c8:9d:de:2d:dd:69:39:4f:c1:
                    c3:5b:d5:88:c0:41:2f:1e:4f:c9:bd:cd:c6:bf:10:
                    16:8d:8e:64:69:b0:73:88:4c:e6:7c:b8:2a:7c:6b:
                    8f:b8:ca:b2:e0:4b:6e:fd:48:3a:08:9a:e9:1e:62:
                    ac:bb:a1:99:ef:ba:6c:66:25:19:6c:82:95:68:8b:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DF:79:07:D1:1B:2F:C6:91:CF:FB:9F:D1:1D:9C:58:D4:0D:9F:23
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:c2:5c:b6:c4:10:a0:9d:fe:e3:d8:f4:8a:54:6f:1d:18:
         f4:b8:50:3a:e4:bb:84:40:27:59:81:19:53:c4:3f:80:75:07:
         c3:58:35:da:c6:06:3b:c3:a2:00:26:44:d4:35:81:7c:39:b0:
         9a:1f:ab:3d:ba:40:1b:0a:ea:0a:36:fa:78:4f:87:28:74:a4:
         35:02:7c:2a:50:de:20:bc:bc:d8:03:62:7a:f5:7b:d6:14:89:
         0f:f7:a1:40:4b:13:b5:79:c5:4b:4d:b8:4f:51:08:c0:69:39:
         03:2c:7c:9c:f0:9b:8e:69:a9:60:8f:d2:e4:06:0a:35:4a:08:
         81:8e:7a:bc:66:9d:02:aa:a8:b0:a2:01:ad:49:13:e9:d0:eb:
         4b:79:13:20:a2:84:71:23:c0:0e:26:67:f4:a9:72:d0:0c:9a:
         9f:43:66:f1:0e:eb:31:82:65:7d:a7:6e:70:f9:9f:b4:54:97:
         e1:71:d1:bc:42:91:57:db:ec:00:e1:6e:50:92:43:22:5a:14:
         bb:28:bd:43:25:12:64:96:15:88:4a:6a:b0:8b:0d:9a:d5:b4:
         54:b0:ec:0b:cc:e6:d5:8f:0a:ef:fa:f9:d2:f8:b5:9d:a1:32:
         8f:11:2b:f5:f5:e4:94:19:38:d2:36:9a:db:9e:5a:12:e6:b0:
         8e:dd:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:21:46 2026 by rpki-client