Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          o5fU6pd0C2uLkNoxsygrvwqpypLMuFrHnlKjuPCxGbY=
Subject key identifier:   05:1D:C7:B4:1B:C5:40:AB:66:4A:16:C7:B9:30:46:38:A7:75:05:A7
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0C3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0C28
Signing time:             Tue 28 Jul 2026 19:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:18 +0000
Manifest next update:     Tue 04 Aug 2026 19:00:18 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: TQDH0Wc3qb76LhCC9xZYmSKnZYoG2qH+/kAYLOynr3Y=)
                          2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: JigB1dsNqwo8gCWVoZ8/GvwlkCn4qNmRbXh+o9s81zY=)
                          3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: rY5KQkYqT1Rwo0jw8gQc5MX066+hkbql7YzRhVJVrdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3134 (0xc3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Jul 28 19:00:18 2026 GMT
            Not After : Aug  4 19:00:18 2026 GMT
        Subject: CN=6a68fc42-339d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:ba:e4:df:57:fd:a9:18:90:42:da:c3:47:
                    d6:b3:a5:48:28:34:50:c2:ee:9f:ef:77:a3:57:33:
                    7c:41:00:2c:ac:5f:b4:07:75:10:31:56:53:d6:08:
                    95:6c:bc:9f:14:9b:29:78:73:b9:94:28:03:e0:95:
                    03:39:f2:0d:3b:9d:ff:2f:c9:ae:90:e4:ea:3e:b1:
                    48:a9:f7:89:b0:33:b7:82:0e:10:04:85:16:9a:51:
                    fd:99:b3:f2:ea:95:50:b7:77:20:50:41:59:8c:ea:
                    45:ae:c6:10:d9:dc:02:6f:0f:53:21:35:c8:9f:96:
                    0b:3b:61:a2:36:a3:72:c0:cd:27:3f:ab:1b:32:09:
                    99:eb:80:94:23:00:cd:ba:b5:d4:70:de:69:80:9a:
                    2f:05:1c:77:0b:05:57:cc:bd:20:65:9c:3b:09:82:
                    1a:90:1c:f5:d8:9e:57:44:f1:fa:ef:22:d5:4a:19:
                    65:58:19:d7:74:37:77:bc:d0:1b:e4:ed:51:c9:5b:
                    e7:02:a3:aa:37:4a:da:cf:fa:0a:60:bb:b5:f7:ee:
                    74:05:31:c4:83:8d:58:12:6d:07:e7:f2:cb:19:d9:
                    10:87:ac:55:a9:83:41:71:73:5f:d1:07:43:e5:21:
                    af:75:2b:4b:0e:d7:39:05:c5:77:2c:34:df:bb:98:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:C7:B4:1B:C5:40:AB:66:4A:16:C7:B9:30:46:38:A7:75:05:A7
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:4c:3d:5e:2c:89:bc:d7:46:53:da:41:06:71:39:6c:53:
         e6:5d:91:65:c8:a2:82:70:6e:56:15:e8:6b:dd:cf:d5:db:b4:
         e1:37:8f:ee:8c:87:8e:76:23:16:a4:a5:47:4a:82:9e:a2:f1:
         98:08:49:15:b7:78:75:5d:5d:aa:ae:2b:75:d0:0f:25:03:35:
         89:13:a3:27:c8:33:50:c8:df:79:24:2f:bd:1a:44:6b:b9:fd:
         fa:1e:3c:54:3a:ab:ac:8f:f2:3d:57:ad:26:25:d5:3c:fa:db:
         bd:27:d4:a1:69:0c:d7:4d:0e:c2:81:3c:86:93:68:47:6e:f5:
         9e:86:e9:1b:3e:cf:e9:2d:71:a0:21:76:f3:82:55:42:2d:4b:
         51:5d:e7:18:9b:b5:95:70:2e:c5:85:45:f1:6d:3b:27:53:10:
         62:d3:c9:61:0a:fc:f2:45:68:cf:04:5b:cc:fe:9e:a1:46:33:
         da:1f:66:bb:80:5d:1e:87:46:a1:ba:0c:bc:72:18:6c:80:43:
         65:31:e8:47:11:6f:ba:d6:80:6d:e1:4b:e6:a9:09:7f:19:a6:
         60:b8:53:78:de:13:2a:17:db:4c:ba:20:a8:bb:98:75:27:75:
         cb:14:2f:6c:14:30:00:5a:cc:99:07:9d:a4:7f:7e:67:3b:e4:
         ec:25:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:09 2026 by rpki-client