Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft
File:                     aBsuVM61QCyoEWA3sVQWseZe1No.mft (raw, json)
Hash identifier:          h9et1RdrG+ZaQuT8JJk5/tmsG9/K8HCvouvyLJRaHzQ=
Subject key identifier:   97:E6:29:A8:E6:84:A8:30:4B:6D:83:66:DE:03:15:51:7B:14:F6:73
Authority key identifier: 68:1B:2E:54:CE:B5:40:2C:A8:11:60:37:B1:54:16:B1:E6:5E:D4:DA
Certificate issuer:       /CN=A91E208A/serialNumber=681B2E54CEB5402CA8116037B15416B1E65ED4DA
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBsuVM61QCyoEWA3sVQWseZe1No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft
Manifest number:          0E
Signing time:             Mon 27 Jul 2026 11:30:25 +0000
Manifest this update:     Mon 27 Jul 2026 11:30:25 +0000
Manifest next update:     Mon 03 Aug 2026 11:30:25 +0000
Files and hashes:         1: aBsuVM61QCyoEWA3sVQWseZe1No.crl (hash: SxIpqKgQnJX5BW7wxyCYdkgPbrpwCXaAjkBtaL/LBFA=)
                          2: 67BED8CA760911F19399FA927BA30FBC.roa (hash: YyyALpI3Lw8dM5NZb40HSHcBSIvoWXZFh98HIuyioXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.crl
                          rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBsuVM61QCyoEWA3sVQWseZe1No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E208A, serialNumber=681B2E54CEB5402CA8116037B15416B1E65ED4DA
        Validity
            Not Before: Jul 27 11:30:25 2026 GMT
            Not After : Aug  3 11:30:25 2026 GMT
        Subject: CN=6a674151-6be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:ff:b5:a5:24:4c:cd:20:52:17:31:c0:2f:
                    90:81:c9:4d:84:b8:e5:d9:25:e9:78:1b:af:99:bb:
                    67:f9:38:88:d8:54:18:07:8b:af:2d:9b:a0:24:9b:
                    e3:3c:44:c3:8f:6d:ac:98:25:16:18:5e:45:0c:c3:
                    65:1c:4e:63:4a:6a:90:74:d5:8b:70:c8:f1:85:bc:
                    20:06:1d:3f:19:83:9f:84:6d:1c:4e:43:c0:d5:d6:
                    44:2d:0b:01:96:53:55:d1:ab:18:6a:da:ab:1d:00:
                    59:34:6f:7f:89:67:30:5b:b4:da:87:03:77:62:ba:
                    11:2d:84:a5:d7:c3:2b:76:54:c0:1c:ba:15:b0:4e:
                    a8:3b:3d:c6:24:7a:6a:96:c3:a3:2a:da:47:bb:39:
                    b3:fb:6c:17:2b:a3:c6:16:0e:a4:cc:b8:16:0d:c6:
                    d7:48:37:26:60:e4:5a:a1:7b:ac:65:47:61:0c:4f:
                    5a:a7:96:39:ad:8e:0b:3a:78:b3:cf:26:3f:ce:3d:
                    46:18:cd:97:de:79:0b:b6:fd:a6:b0:85:9f:a4:e4:
                    84:6b:28:10:00:e8:e2:59:87:88:ac:e5:2b:0c:ef:
                    b9:40:48:f8:6f:c0:37:f3:43:df:d8:c5:a7:65:5e:
                    00:2d:2c:06:b4:cd:c4:39:98:42:73:c9:15:23:f8:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:29:A8:E6:84:A8:30:4B:6D:83:66:DE:03:15:51:7B:14:F6:73
            X509v3 Authority Key Identifier:
                keyid:68:1B:2E:54:CE:B5:40:2C:A8:11:60:37:B1:54:16:B1:E6:5E:D4:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBsuVM61QCyoEWA3sVQWseZe1No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:5f:68:ea:76:1d:b4:ea:83:44:0c:ef:8d:37:21:36:db:
         12:88:3d:db:cf:07:f8:5e:a9:84:5a:8d:da:53:78:46:d6:de:
         9b:99:e4:90:4d:10:9e:b4:52:a1:b0:cf:27:43:13:f2:8d:2d:
         51:ff:2c:e6:7d:77:c6:fa:93:0a:c6:69:c2:b4:35:12:5f:ab:
         1c:2c:90:3e:51:14:63:36:22:22:a9:02:65:3a:57:7a:3f:e6:
         8f:72:c3:e1:c4:a1:43:5c:55:1b:11:32:5d:71:35:a5:97:b0:
         4c:0c:6a:51:8f:0a:6f:ef:68:c6:a3:2a:a7:e1:21:6e:8f:01:
         6e:78:08:73:94:8e:83:76:90:6f:2e:86:e1:3f:ea:98:28:c3:
         95:6c:ff:4d:f9:06:21:bd:7f:26:2d:2c:6b:3b:8d:8f:c5:1d:
         2f:0f:c7:5c:64:1d:b1:7f:db:cd:19:6d:7e:65:09:e5:2e:66:
         e4:3e:40:3f:74:5e:fa:48:d9:89:f8:a6:08:12:20:4d:be:95:
         1b:d5:7d:e0:b4:ef:2e:43:77:bc:4c:ab:8e:9f:6b:29:3f:32:
         11:db:06:38:28:68:ec:50:2f:b9:35:3a:ee:85:b3:f9:a4:de:
         43:28:23:70:94:cf:03:9f:92:d6:93:63:8c:39:57:4f:7f:f7:
         fa:b8:82:f7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MjA4QTExMC8GA1UEBRMoNjgxQjJFNTRDRUI1NDAyQ0E4MTE2MDM3QjE1NDE2QjFF
NjVFRDREQTAeFw0yNjA3MjcxMTMwMjVaFw0yNjA4MDMxMTMwMjVaMBgxFjAUBgNV
BAMTDTZhNjc0MTUxLTZiZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXI/+1pSRMzSBSFzHAL5CByU2EuOXZJel4G6+Zu2f5OIjYVBgHi68tm6Akm+M8
RMOPbayYJRYYXkUMw2UcTmNKapB01YtwyPGFvCAGHT8Zg5+EbRxOQ8DV1kQtCwGW
U1XRqxhq2qsdAFk0b3+JZzBbtNqHA3diuhEthKXXwyt2VMAcuhWwTqg7PcYkemqW
w6Mq2ke7ObP7bBcro8YWDqTMuBYNxtdINyZg5Fqhe6xlR2EMT1qnljmtjgs6eLPP
Jj/OPUYYzZfeeQu2/aawhZ+k5IRrKBAA6OJZh4is5SsM77lASPhvwDfzQ9/Yxadl
XgAtLAa0zcQ5mEJzyRUj+O3JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl+YpqOaE
qDBLbYNm3gMVUXsU9nMwHwYDVR0jBBgwFoAUaBsuVM61QCyoEWA3sVQWseZe1Now
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMDhBLzdBQTI0NzVBNzYw
NTExRjFCNjMxNjZERjc5QTMwRkJDL2FCc3VWTTYxUUN5b0VXQTNzVlFXc2VaZTFO
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYUJzdVZNNjFRQ3lvRVdBM3NWUVdzZVplMU5vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy
MDhBLzdBQTI0NzVBNzYwNTExRjFCNjMxNjZERjc5QTMwRkJDL2FCc3VWTTYxUUN5
b0VXQTNzVlFXc2VaZTFOby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCLIl9o6nYdtOqDRAzvjTchNtsSiD3bzwf4XqmEWo3aU3hG1t6bmeSQTRCetFKh
sM8nQxPyjS1R/yzmfXfG+pMKxmnCtDUSX6scLJA+URRjNiIiqQJlOld6P+aPcsPh
xKFDXFUbETJdcTWll7BMDGpRjwpv72jGoyqn4SFujwFueAhzlI6DdpBvLobhP+qY
KMOVbP9N+QYhvX8mLSxrO42PxR0vD8dcZB2xf9vNGW1+ZQnlLmbkPkA/dF76SNmJ
+KYIEiBNvpUb1X3gtO8uQ3e8TKuOn2spPzIR2wY4KGjsUC+5NTruhbP5pN5DKCNw
lM8Dn5LWk2OMOVdPf/f6uIL3
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:15 2026 by rpki-client