Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File:                     x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier:          v2xGCrOxbLopAo4yFfuC8a4rR1flsBANHdw6zr8tDnk=
Subject key identifier:   13:2F:DF:EE:BA:6D:AD:3D:4C:81:27:E5:8F:F1:4E:F7:90:D7:50:43
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       0447
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number:          0435
Signing time:             Wed 29 Jul 2026 01:01:17 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:16 +0000
Manifest next update:     Wed 05 Aug 2026 01:01:16 +0000
Files and hashes:         1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: J2KZb+ZtCETU8CuLUKgyUrD7mMrTVRObW1yFUqbYnVc=)
                          2: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: K3Ioz+ew3oRAYT6RPNtdUzozr+IYWJNopTpICBz37bk=)
                          3: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: 22S1jZVW/bCC+yi8aJxUwO0V5slqfAZBa7wo8/blakU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Jul 29 01:01:16 2026 GMT
            Not After : Aug  5 01:01:16 2026 GMT
        Subject: CN=6a6950dd-e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:57:4f:89:14:ce:f7:58:43:40:79:36:5c:
                    0c:8b:f5:e7:59:99:26:3a:1c:53:04:5d:18:c7:a2:
                    d4:f0:46:a4:a2:23:94:f6:a6:4f:c4:b8:4f:eb:aa:
                    e0:8a:0c:d9:06:42:2b:3e:68:ff:4a:b9:88:37:8f:
                    d7:39:c9:a4:1f:c4:cd:2b:50:44:6b:f6:b6:1c:28:
                    24:5c:db:b4:70:4a:b7:f5:ab:26:86:6a:3c:33:ba:
                    bc:25:84:ba:66:cc:40:be:0c:a2:12:0a:a2:f5:7c:
                    20:f6:67:13:b7:34:44:f9:50:e4:b0:88:5b:06:cf:
                    97:c1:5c:fc:07:8e:0b:14:f7:f8:a3:2a:77:3d:82:
                    03:ee:03:ac:78:bc:78:0c:dc:d4:48:25:f6:44:8e:
                    80:c3:17:9f:49:ad:90:d3:0d:88:8c:4c:d5:fe:ef:
                    a6:b6:ec:55:f1:ba:88:68:2b:7e:68:17:2d:df:04:
                    b6:a4:56:52:29:78:92:5f:96:3a:a6:64:c0:98:38:
                    9c:05:33:e3:c6:c9:75:80:3b:25:c7:b2:75:45:d9:
                    36:59:a1:95:3d:e5:c3:fe:b8:40:b7:92:98:b7:b5:
                    0d:e8:f8:b6:6c:9b:91:09:07:08:d5:94:52:70:7e:
                    da:69:1d:92:ac:03:59:e8:a4:94:76:13:df:ac:0a:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:DF:EE:BA:6D:AD:3D:4C:81:27:E5:8F:F1:4E:F7:90:D7:50:43
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d9:88:83:7e:b5:db:d9:f2:60:09:df:f6:66:d1:ad:e2:aa:
         76:d9:99:14:f8:bb:97:b9:d5:46:10:84:25:a4:81:ce:16:22:
         6f:f0:34:9d:c4:21:5f:a6:90:93:16:bf:bd:9e:2a:60:b9:26:
         f6:cf:cc:7f:14:b4:03:48:95:36:22:d9:bb:b0:0b:45:e0:41:
         5a:2d:b7:bb:55:86:c1:5c:3d:6c:c9:36:04:ec:ae:c0:ab:2e:
         46:9e:61:37:50:45:09:97:ed:d9:f7:d2:ec:7b:0a:76:60:76:
         4a:07:cd:bf:9d:79:8f:ce:a3:27:f2:05:f4:c3:c7:5a:53:b7:
         d8:6f:03:60:4a:15:b4:47:19:9e:6c:4b:a3:1e:66:f2:c3:80:
         1e:cb:58:05:33:b0:76:20:38:3c:75:fb:5f:23:33:44:d7:1d:
         dd:b3:05:d5:12:aa:30:91:9e:c3:36:52:f7:ee:5e:36:e2:1a:
         c4:99:a1:f8:09:7b:12:9e:64:12:5f:9f:43:aa:37:69:97:de:
         b9:4b:08:75:d5:f4:c3:7e:f3:40:e8:c8:8c:c1:1c:37:ab:0c:
         94:7d:cb:70:ce:47:95:f5:ec:99:c9:e9:b7:87:88:e2:eb:29:
         1d:a0:cd:f0:16:cf:80:a3:a2:ea:8a:11:86:10:8a:4c:bc:04:
         21:81:dd:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4
Mjc5ODE0QTkwHhcNMjYwNzI5MDEwMTE2WhcNMjYwODA1MDEwMTE2WjAYMRYwFAYD
VQQDEw02YTY5NTBkZC1lMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1xBXT4kUzvdYQ0B5NlwMi/XnWZkmOhxTBF0Yx6LU8EakoiOU9qZPxLhP66rg
igzZBkIrPmj/SrmIN4/XOcmkH8TNK1BEa/a2HCgkXNu0cEq39asmhmo8M7q8JYS6
ZsxAvgyiEgqi9Xwg9mcTtzRE+VDksIhbBs+XwVz8B44LFPf4oyp3PYID7gOseLx4
DNzUSCX2RI6AwxefSa2Q0w2IjEzV/u+mtuxV8bqIaCt+aBct3wS2pFZSKXiSX5Y6
pmTAmDicBTPjxsl1gDslx7J1Rdk2WaGVPeXD/rhAt5KYt7UN6Pi2bJuRCQcI1ZRS
cH7aaR2SrANZ6KSUdhPfrApJFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMv3+66
ba09TIEn5Y/xTveQ11BDMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2
NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO
SUoyMFBjYUEtM2lDZVlGS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxNmIg36129nyYAnf9mbRreKqdtmZFPi7l7nVRhCEJaSBzhYib/A0ncQhX6aQ
kxa/vZ4qYLkm9s/MfxS0A0iVNiLZu7ALReBBWi23u1WGwVw9bMk2BOyuwKsuRp5h
N1BFCZft2ffS7HsKdmB2SgfNv515j86jJ/IF9MPHWlO32G8DYEoVtEcZnmxLox5m
8sOAHstYBTOwdiA4PHX7XyMzRNcd3bMF1RKqMJGewzZS9+5eNuIaxJmh+Al7Ep5k
El+fQ6o3aZfeuUsIddX0w37zQOjIjMEcN6sMlH3LcM5HlfXsmcnpt4eI4uspHaDN
8BbPgKOi6ooRhhCKTLwEIYHd1g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:02 2026 by rpki-client