Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
File:                     no_7TgVT0H7Q35t9_tC1PETL_gQ.mft (raw, json)
Hash identifier:          nPd+N1SCX0b7sBaq1HJEkg3CFVOhA9NoaobYjxwUG7M=
Subject key identifier:   8A:42:6A:5F:25:BE:B8:F6:75:8C:E8:78:A6:9B:B2:CD:13:DC:BC:EE
Authority key identifier: 9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
Certificate issuer:       /CN=A91E10B0/serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
Manifest number:          26
Signing time:             Mon 27 Jul 2026 11:15:13 +0000
Manifest this update:     Mon 27 Jul 2026 11:15:12 +0000
Manifest next update:     Mon 03 Aug 2026 11:15:12 +0000
Files and hashes:         1: no_7TgVT0H7Q35t9_tC1PETL_gQ.crl (hash: IYK/BD9wy3RVDxmY/dx7TivHxtwL3dS/oPXa+HS/flo=)
                          2: 2DFE38F67AD711F19DC406D872A30FBC.roa (hash: stljFz+ZTz5uoG7Y0jMm76oTBSEWl+m0K1NgJAC7jJo=)
                          3: 423B6B5E5DB811F1966FAE05AC833773.roa (hash: TIfZzZzg/QXy0NCiF0a1I+19CdyJj4ReyDwnAPzzoOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E10B0, serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
        Validity
            Not Before: Jul 27 11:15:12 2026 GMT
            Not After : Aug  3 11:15:12 2026 GMT
        Subject: CN=6a673dc1-44f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:42:9c:b4:14:26:31:a2:f0:33:80:ec:8a:
                    66:2a:0e:a4:50:45:89:88:6a:43:48:a0:2b:1b:43:
                    a7:43:07:b5:fe:46:1d:9e:3e:73:4a:e0:b3:88:c6:
                    ff:4e:7a:6a:98:e4:f9:d9:45:8e:d9:82:38:f9:04:
                    a5:59:78:1a:94:d7:74:5f:da:51:fa:ac:be:03:40:
                    67:d2:64:84:c8:4a:94:87:f8:e4:ea:cb:4d:bd:f4:
                    f9:ce:1e:88:ea:e9:d9:13:b2:31:d3:ab:c2:dc:95:
                    9f:f7:6b:0b:2d:86:3d:87:f1:96:2e:72:c0:f3:d2:
                    ba:2c:8e:88:e8:52:e5:16:e0:f4:b1:95:ec:3e:c6:
                    5b:b3:9c:5b:78:de:88:94:24:80:0c:03:12:cd:cf:
                    64:94:2b:4e:27:aa:8e:ed:7b:b4:39:ee:b6:d6:f9:
                    73:eb:da:d5:08:10:9f:cf:78:d2:ca:f8:14:43:49:
                    e4:0a:21:bd:34:77:bc:35:a4:59:1d:ff:8d:74:2b:
                    6f:5e:c0:60:62:5d:a6:c3:ca:82:80:dd:8d:b3:72:
                    4a:28:4c:04:7e:00:40:b8:b3:14:1f:20:17:0f:53:
                    16:c0:c6:5c:38:9e:2a:04:62:48:88:88:0e:86:4d:
                    c6:62:74:a1:42:db:11:84:98:7b:5d:c4:7c:89:98:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:6A:5F:25:BE:B8:F6:75:8C:E8:78:A6:9B:B2:CD:13:DC:BC:EE
            X509v3 Authority Key Identifier:
                keyid:9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:db:08:56:b6:12:ed:31:28:db:bf:e3:99:26:2e:f7:b4:f8:
         6b:3b:77:56:60:27:a9:02:71:1c:da:31:85:4e:99:f7:fa:d7:
         5e:c1:d3:1f:f8:3e:a7:90:b7:52:69:f8:42:4a:92:c1:a5:b8:
         54:63:a1:97:95:1a:82:48:7c:26:fd:7b:e3:27:7c:70:d9:84:
         8a:31:b5:ab:2c:bb:0f:e1:c9:8e:5e:d9:87:d6:6c:29:1d:88:
         d2:97:17:f3:73:b8:6f:8c:00:55:19:69:f4:17:83:f7:0c:44:
         a1:21:7c:8d:50:56:42:3d:a7:99:27:ea:e1:12:9f:d1:b2:fb:
         e3:0b:37:c2:e2:6e:4d:d0:1a:d0:34:01:c6:43:66:5d:ac:da:
         0f:dc:97:09:5d:99:db:47:33:0f:7e:e5:e1:70:05:e4:6a:68:
         e6:45:ef:11:78:30:58:25:55:59:47:4e:da:f8:d3:5d:8f:f1:
         80:60:8e:55:88:0c:11:43:ee:a1:9c:80:f1:89:b0:bc:6e:f7:
         ef:68:3e:fc:9a:90:b8:58:ed:c3:53:52:1e:a9:c2:e2:18:43:
         06:da:1a:e5:1a:43:b8:ce:cb:1c:f5:c6:47:25:1e:47:9d:66:
         1d:5e:68:23:1a:7f:43:9b:56:64:aa:c2:98:47:f0:ad:8e:5c:
         b3:e7:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:56 2026 by rpki-client