Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
File:                     62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json)
Hash identifier:          3j3ANtn1Rw7h3Cv9S3dx+QeyMMcdoTZfyaxfT/miEyc=
Subject key identifier:   4F:A7:1C:71:DE:48:1B:71:06:B6:72:86:A1:59:A2:C2:1D:70:C7:21
Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90
Certificate issuer:       /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
Certificate serial:       358B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
Manifest number:          3576
Signing time:             Tue 28 Jul 2026 14:52:36 +0000
Manifest this update:     Tue 28 Jul 2026 14:52:36 +0000
Manifest next update:     Tue 04 Aug 2026 14:52:36 +0000
Files and hashes:         1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: I9hMXyzrsiAvhuywZjoWWk5DMRM/X35jlph1+3vVHzw=)
                          2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: f/lcS6bLLjVH8wwIobnaBz8sL5pzSiGiCHWpfFVVqW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
        Validity
            Not Before: Jul 28 14:52:36 2026 GMT
            Not After : Aug  4 14:52:36 2026 GMT
        Subject: CN=6a68c234-7dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:99:49:78:12:0d:41:2e:ba:e4:ec:a7:21:
                    f4:c2:d2:12:cf:7d:73:92:73:de:53:2a:3c:df:aa:
                    e4:ee:52:22:19:28:01:48:94:cf:ce:81:6a:46:d4:
                    8b:34:aa:9a:51:5b:7e:f9:80:39:d3:36:cb:1f:80:
                    7f:fd:79:6c:a8:e6:1b:28:50:a5:b2:71:09:b6:93:
                    4e:b3:75:ca:ba:2e:89:2f:f8:c3:22:71:28:48:31:
                    5e:9f:d7:24:95:fe:8d:80:e0:75:58:31:04:36:6f:
                    cf:3d:d5:6f:23:d9:89:47:ff:81:d0:e2:e2:c2:c9:
                    0f:c7:40:19:03:6f:31:80:5c:a2:c4:63:57:3e:73:
                    af:d3:ef:af:ef:03:c2:b3:27:ff:79:98:fb:69:4c:
                    c1:70:ad:ff:a1:19:8d:e9:18:3d:cb:a1:e4:e5:48:
                    04:8b:fe:21:43:6e:02:eb:7b:2b:d6:d4:ae:c8:18:
                    85:ad:33:a6:d3:ac:33:74:d3:79:59:c4:fa:ee:5d:
                    86:4c:e9:83:e2:ba:0a:63:c4:de:af:7a:72:60:68:
                    fd:2a:36:60:af:8b:f3:cd:2e:fa:e9:f0:f3:a7:31:
                    ed:bd:e5:ba:49:51:fe:f1:65:c6:67:d7:2d:aa:fe:
                    5e:35:a8:4a:46:f1:c0:e0:b2:08:fa:81:85:78:d3:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:1C:71:DE:48:1B:71:06:B6:72:86:A1:59:A2:C2:1D:70:C7:21
            X509v3 Authority Key Identifier:
                keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:2d:57:27:87:9c:1f:c7:73:9c:15:cc:ab:1e:41:50:72:
         5c:3e:93:9e:9a:48:10:72:88:75:9b:5b:57:92:ab:77:0f:f0:
         ab:26:42:d1:e6:92:18:09:00:c8:0e:49:fb:e2:aa:de:d2:29:
         4d:7d:fb:38:be:e6:32:a6:95:24:41:39:43:80:42:92:44:ab:
         a2:45:74:3c:f6:af:dd:52:52:48:30:f2:61:42:7a:7c:0d:d9:
         aa:6c:60:35:9a:00:e9:9a:2d:92:ff:f9:ab:ff:81:a7:0e:c1:
         22:c5:1e:e6:32:d2:16:eb:54:66:b7:80:ec:7e:53:e2:d7:9d:
         90:70:67:ef:54:a5:0f:72:ba:dc:31:a8:0c:87:da:ce:63:02:
         95:fe:2e:b5:e5:b4:af:fb:b8:b9:8b:b6:91:2c:3d:2c:1a:b9:
         5b:28:ae:d0:88:fe:a7:78:c6:53:34:1d:db:39:20:fc:70:3d:
         37:43:e4:07:48:6c:f7:a5:ee:a9:5e:53:45:7b:7f:b8:e8:78:
         2c:8a:d5:9f:78:01:d9:e7:10:00:93:df:77:e8:1d:6a:0c:73:
         ae:dd:f9:c1:4c:13:57:69:53:a6:2e:38:d1:53:41:f4:27:e1:
         e2:98:5d:4c:4f:72:2d:f0:34:3d:e9:71:22:9c:b9:47:49:4a:
         7b:ee:eb:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE
RDRCMEVBOTAwHhcNMjYwNzI4MTQ1MjM2WhcNMjYwODA0MTQ1MjM2WjAYMRYwFAYD
VQQDEw02YTY4YzIzNC03ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmt6ZSXgSDUEuuuTspyH0wtISz31zknPeUyo836rk7lIiGSgBSJTPzoFqRtSL
NKqaUVt++YA50zbLH4B//XlsqOYbKFClsnEJtpNOs3XKui6JL/jDInEoSDFen9ck
lf6NgOB1WDEENm/PPdVvI9mJR/+B0OLiwskPx0AZA28xgFyixGNXPnOv0++v7wPC
syf/eZj7aUzBcK3/oRmN6Rg9y6Hk5UgEi/4hQ24C63sr1tSuyBiFrTOm06wzdNN5
WcT67l2GTOmD4roKY8Ter3pyYGj9KjZgr4vzzS766fDzpzHtveW6SVH+8WXGZ9ct
qv5eNahKRvHA4LII+oGFeNMK3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+nHHHe
SBtxBrZyhqFZosIdcMchMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE
OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i
UkRxOWVadXZVa25kU3c2cEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIp4tVyeHnB/Hc5wVzKseQVByXD6TnppIEHKIdZtbV5Krdw/wqyZC0eaSGAkA
yA5J++Kq3tIpTX37OL7mMqaVJEE5Q4BCkkSrokV0PPav3VJSSDDyYUJ6fA3Zqmxg
NZoA6Zotkv/5q/+Bpw7BIsUe5jLSFutUZreA7H5T4tedkHBn71SlD3K63DGoDIfa
zmMClf4uteW0r/u4uYu2kSw9LBq5Wyiu0Ij+p3jGUzQd2zkg/HA9N0PkB0hs96Xu
qV5TRXt/uOh4LIrVn3gB2ecQAJPfd+gdagxzrt35wUwTV2lTpi440VNB9Cfh4phd
TE9yLfA0PelxIpy5R0lKe+7rqg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:10 2026 by rpki-client