Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File:                     mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier:          wV3qN01Z6ghjzTMqkAXKd9m/2Z/zW8u4HEQYu5qPKa4=
Subject key identifier:   72:09:21:69:42:B3:AF:B9:7D:B9:5A:84:EA:E7:42:A2:25:60:F7:80
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number:          0385
Signing time:             Mon 27 Jul 2026 01:52:43 +0000
Manifest this update:     Mon 27 Jul 2026 01:52:43 +0000
Manifest next update:     Mon 03 Aug 2026 01:52:43 +0000
Files and hashes:         1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: 2oucEfs6hP9pwK69yWqphlpGpBu/+hIMUGd+6W/NSvg=)
                          2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Q6NYe2Vl6swnL94bFMvFyQ1nEGZFVn7Br4W4RJTVQEQ=)
                          3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: OIfGssLEQpbD7cZsL0poYC+ggBlzdXE7TwY8gIPebIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: Jul 27 01:52:43 2026 GMT
            Not After : Aug  3 01:52:43 2026 GMT
        Subject: CN=6a66b9eb-21a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:a5:34:df:9e:d3:69:a4:64:b1:e1:d4:6f:
                    8d:97:b1:88:b9:c2:fa:80:bf:61:cb:46:20:2a:0b:
                    27:e4:53:03:df:ab:1a:4d:08:9c:d3:8e:a5:16:8f:
                    46:54:ae:e7:b8:a9:89:64:f0:f3:af:66:eb:ce:78:
                    1b:d5:fe:98:5b:fd:3a:2e:6a:f8:03:03:66:e4:90:
                    3c:1c:70:4d:63:58:99:2d:eb:b1:93:a5:e0:80:d9:
                    3e:74:59:65:75:04:d9:09:64:a4:c9:bc:b7:cb:bd:
                    68:86:5a:20:76:80:db:0e:4d:0a:a0:8c:c1:6f:89:
                    f3:d6:ed:52:be:66:f9:7a:e1:b7:e8:d1:46:8f:4c:
                    64:2e:15:ca:dc:ae:d0:7b:7f:aa:6a:ee:3f:74:64:
                    3d:14:d4:bf:33:f7:e4:7d:43:f0:b1:9d:7b:ea:49:
                    fb:07:3d:5d:3e:78:c1:42:b5:b5:bb:55:e2:e3:2f:
                    3d:df:00:eb:c0:e9:37:cb:54:45:78:36:9b:18:f6:
                    57:95:bc:55:c5:87:4d:e5:24:e3:9a:04:91:a4:d1:
                    9d:20:a8:4e:5e:74:3c:e7:1a:d2:2c:74:8b:5e:17:
                    8f:07:d0:a5:d0:33:c1:07:ae:ee:cf:53:0e:6a:bf:
                    1f:ce:e4:ba:e0:88:93:e8:e2:e1:fc:75:69:27:46:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:21:69:42:B3:AF:B9:7D:B9:5A:84:EA:E7:42:A2:25:60:F7:80
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:19:e4:be:15:66:b3:dc:0a:a2:eb:9b:3f:91:08:3b:43:
         d0:e1:a2:9c:5d:c3:9a:ba:b2:3b:70:73:23:a8:5c:11:7a:93:
         87:db:8c:da:e9:32:3b:0f:8a:ed:41:ea:9b:17:22:10:e4:fb:
         15:31:24:7d:f2:76:bc:6f:f0:ab:4b:c5:e0:c1:53:88:ef:21:
         41:a7:c8:97:d1:3d:3c:53:58:d3:49:7e:40:66:44:c6:7b:79:
         36:a2:6d:0a:05:ed:1b:45:1a:5b:87:9a:a4:34:f5:f7:17:4d:
         14:37:32:54:2b:9e:8e:41:56:72:ad:07:15:aa:e7:df:38:e4:
         7b:97:b7:0d:ad:01:0c:13:01:66:cb:3f:f6:70:4a:95:83:6c:
         d2:ef:05:8f:fb:fd:a8:83:61:95:51:ca:1f:48:fc:fe:9d:f2:
         89:d5:a1:4b:66:75:af:97:2d:ad:7e:0b:7f:28:f4:6e:b6:d8:
         b7:05:a0:2f:25:57:92:fe:5a:b0:1c:e8:ef:44:eb:df:7e:2f:
         a4:de:a8:8c:f6:25:89:e9:c7:ee:6c:ae:27:86:78:02:a3:e3:
         d8:3b:74:21:d8:35:4e:d7:36:ce:d8:1a:67:79:93:b6:0d:92:
         ee:54:f8:c6:37:e6:f8:0f:71:18:09:f6:c2:92:ab:f0:7a:de:
         3b:3f:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:29 2026 by rpki-client