Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File:                     9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier:          UIR0qjQnYqsBTg7Qyu210uxvmHIyfMgnUVebNsqShrs=
Subject key identifier:   55:21:97:BC:AC:47:3A:84:D3:EE:66:12:2A:34:E4:FC:08:DC:4F:DA
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer:       /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number:          98
Signing time:             Mon 27 Jul 2026 09:31:22 +0000
Manifest this update:     Mon 27 Jul 2026 09:31:22 +0000
Manifest next update:     Mon 03 Aug 2026 09:31:22 +0000
Files and hashes:         1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: 0gk5HdW3qcSDnRgB9U/HoAGRIuYL/gQxFB++14UaWiI=)
                          2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: ABz2wyyPJmQiKwD0Cid0vK+VZEE/DgOmkSrsLq1Yrtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
        Validity
            Not Before: Jul 27 09:31:22 2026 GMT
            Not After : Aug  3 09:31:22 2026 GMT
        Subject: CN=6a67256a-7c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:e9:53:28:9f:bd:95:d2:68:0c:4d:16:7b:
                    a1:32:85:bb:c9:ab:8e:bd:ba:7f:e0:4c:33:0c:24:
                    75:af:8e:9f:e3:9b:1c:2d:8e:0b:24:2f:92:a9:09:
                    9d:19:52:2e:44:24:95:3d:96:f8:00:72:86:ee:a8:
                    ed:e6:79:73:6b:ae:7f:84:5e:9a:26:2d:9f:02:9c:
                    0a:97:bb:36:5f:75:ed:1d:90:d0:33:58:ff:eb:ed:
                    25:81:31:c1:72:81:4b:d7:77:1a:4d:05:22:94:61:
                    6f:05:c5:80:7c:12:dc:db:c2:ff:9b:ef:28:ca:ea:
                    b0:e5:99:e7:b9:e4:44:76:41:98:43:50:28:96:ef:
                    4f:69:a6:cd:05:6c:c7:5b:52:06:0a:6c:4d:2c:2c:
                    17:1c:7e:27:22:64:d6:7f:ff:17:71:e4:dd:fb:b0:
                    78:42:d0:18:9d:e1:48:0d:2d:ad:b8:10:10:90:66:
                    aa:c3:1a:70:95:42:fd:a5:61:86:04:84:00:da:e3:
                    be:45:a0:52:75:53:21:31:c2:c3:14:d7:d5:0a:97:
                    09:bf:ad:da:9e:af:ed:d5:f4:09:a4:15:64:c5:56:
                    b7:ef:26:32:e5:25:4b:8f:8d:d4:c2:eb:89:c3:61:
                    7f:42:81:5d:38:62:47:21:c6:3c:ad:df:f9:15:d8:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:21:97:BC:AC:47:3A:84:D3:EE:66:12:2A:34:E4:FC:08:DC:4F:DA
            X509v3 Authority Key Identifier:
                keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:5b:5c:f1:ba:8d:99:34:9e:b9:59:3a:8f:2e:4d:69:32:
         28:b6:fd:80:d2:2e:04:56:2f:ae:1e:d7:1b:e3:25:e4:66:c3:
         6f:4d:ff:8c:23:ef:9c:b3:4a:e7:42:d2:e4:40:a5:b6:c3:94:
         ce:78:8a:21:95:af:db:ad:3b:1b:c1:15:8c:e0:54:85:aa:bc:
         52:95:20:6a:31:6a:14:7c:ab:6c:4f:ab:5a:7f:46:43:48:66:
         72:cf:98:0a:55:fe:f7:ca:eb:c6:a2:68:5c:d0:2d:86:bf:0f:
         a3:db:58:e6:42:27:91:3f:4c:9c:0d:92:fc:ca:93:c0:8f:39:
         d7:45:35:b2:c2:75:58:90:0e:5d:02:11:1e:3f:3c:61:a4:37:
         13:f7:1d:51:50:63:6b:96:c7:1f:24:19:f3:68:00:75:7a:85:
         30:bd:6a:fd:08:73:6c:25:6b:59:a5:57:d3:c3:9b:e8:5d:b3:
         98:d7:43:cc:6c:73:58:30:9b:9f:d3:50:1f:9c:99:e3:70:8a:
         b8:48:91:24:81:f3:4d:9e:29:6d:10:a7:b6:60:98:77:31:08:
         98:d8:7c:28:0b:b5:cb:4a:c0:99:c9:5b:a3:f4:c2:8f:6c:9b:
         27:6b:44:6c:ab:3c:23:55:ec:4c:c1:83:b9:64:4d:9c:05:66:
         20:17:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:36 2026 by rpki-client