Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          n2V/e7RwLRv8B78bWY89fG0E2gvG6hU46C3o1gXvUu8=
Subject key identifier:   7C:D0:0B:1C:CE:BF:06:B9:6C:4C:9A:E8:35:17:4E:0D:B2:91:39:66
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          05EA
Signing time:             Tue 28 Jul 2026 16:24:10 +0000
Manifest this update:     Tue 28 Jul 2026 16:24:09 +0000
Manifest next update:     Tue 04 Aug 2026 16:24:09 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: cn2NiIXS9E8OxdAjSw1s0Z+nQnOyR+7pUMt9Yn05g40=)
                          2: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
                          3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
                          4: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
                          5: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
                          6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Jul 28 16:24:09 2026 GMT
            Not After : Aug  4 16:24:09 2026 GMT
        Subject: CN=6a68d7aa-3281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:92:17:7f:aa:90:f7:88:3b:20:7b:a1:db:
                    b6:0a:42:1c:21:a6:e1:49:f9:47:fc:0a:4c:39:7d:
                    41:49:a9:53:8d:7b:57:24:45:59:5a:3e:1b:46:52:
                    05:a6:2e:0a:58:f2:e9:d9:8e:a9:b0:0f:d2:4a:8b:
                    ca:76:1e:b2:e7:8e:d7:a9:fb:48:84:d6:cb:b1:64:
                    f3:1c:fc:88:d6:7b:76:77:55:bc:8d:99:9d:69:aa:
                    96:fd:b9:80:55:7f:e6:38:02:ba:d6:ee:a0:14:53:
                    22:49:11:f8:8a:c8:7d:bb:59:ad:20:85:9e:3a:26:
                    6b:d2:e9:38:53:09:78:c7:a1:2d:43:cd:4a:69:b8:
                    60:d6:bf:66:dc:fc:fd:49:88:c6:25:35:4c:c0:16:
                    3c:fe:83:b1:82:2e:be:0d:87:51:59:93:0c:62:e9:
                    14:df:da:90:d8:8d:b5:0b:25:73:ec:4b:52:af:83:
                    bc:c1:2b:3a:79:83:c2:85:22:93:bf:8d:89:2d:5a:
                    88:10:68:4d:2e:cc:31:ad:04:3c:80:34:00:91:01:
                    fc:5d:7d:9b:ff:38:67:e5:ef:aa:9b:d8:e7:95:40:
                    bd:0e:ab:05:3d:62:d0:aa:df:3f:26:fb:45:86:c4:
                    ce:49:65:67:67:5b:dc:52:d2:b7:93:d9:fb:ba:df:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:0B:1C:CE:BF:06:B9:6C:4C:9A:E8:35:17:4E:0D:B2:91:39:66
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4d:dc:f0:aa:8c:c3:a2:ba:ba:0a:12:14:14:20:77:99:e0:
         58:18:6d:5a:c9:16:1c:55:b6:2f:2d:18:06:91:d2:60:58:4b:
         f7:2e:3d:c5:81:89:d8:1d:f6:36:be:ec:3d:40:ef:3b:5b:a9:
         2f:61:97:89:74:eb:67:17:d6:be:5f:fe:27:c2:d2:24:ea:77:
         96:1b:f7:0a:49:ca:30:03:5c:28:b6:bc:4b:21:5b:13:d7:f2:
         db:98:2c:0a:f7:01:19:25:8e:a2:06:d8:4d:43:15:8f:af:0b:
         89:59:f3:46:17:23:8b:9d:fd:b5:c6:5a:9a:fa:5c:7a:0e:9c:
         47:18:71:e0:c3:8b:f7:df:00:52:40:a1:14:fc:34:92:2a:82:
         cc:88:4f:73:2a:b5:f2:2f:15:fb:22:f0:79:70:16:39:2f:57:
         56:62:69:5e:32:f4:f7:a8:82:8a:cb:6f:30:5d:d8:df:1f:8b:
         0f:b1:d2:b2:ae:ea:79:ea:1f:ea:bb:d4:51:1b:98:40:2c:7b:
         96:af:ea:9f:aa:dd:a4:64:4c:3b:e2:7e:e6:e2:ca:16:4f:45:
         f9:8c:dc:34:43:a5:b1:67:42:f6:5f:8a:95:62:46:10:e1:be:
         77:ba:9c:b7:76:a2:60:ee:a8:65:e7:bc:00:02:1e:39:0d:bd:
         fb:05:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:19 2026 by rpki-client