Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          5a9vC68AXhECVW26ZYKLNsnuUUyDfY+KN+G7lVVi5nQ=
Subject key identifier:   84:5C:22:44:8A:D9:03:55:FD:E9:E0:99:62:31:EF:FA:0B:BA:81:DD
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          02B6
Signing time:             Wed 29 Jul 2026 02:37:21 +0000
Manifest this update:     Wed 29 Jul 2026 02:37:20 +0000
Manifest next update:     Wed 05 Aug 2026 02:37:20 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: DSadbQO3a5NCRdtaSLHuGntVjWy7cit9ByVLNVmqY3Q=)
                          2: l2AUZdLvyZv4pPKhycDaeOga498.asa (hash: JOLgQmeCHDoszZP+pXGXkjKL8YIt7wrwqZ/FJsqjaIY=)
                          3: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: bV8Oy6pvWhzdI41vVzxNxINTpeT1m1NJnvYB3no4MKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Jul 29 02:37:20 2026 GMT
            Not After : Aug  5 02:37:20 2026 GMT
        Subject: CN=6a696761-349a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:c3:b2:c9:f5:9c:cf:03:6e:21:57:a5:f7:
                    18:a8:25:72:18:6c:17:ee:14:10:12:14:ad:5d:73:
                    3a:7f:92:25:53:30:26:95:20:1e:2a:50:cb:e2:e9:
                    e8:95:54:6b:4e:85:df:80:81:45:a4:a5:ff:a6:ef:
                    37:37:f9:a6:11:df:15:0a:b4:d5:17:d0:2e:6c:c2:
                    c7:04:aa:e9:d2:2d:5b:76:15:5e:ba:34:ac:fd:66:
                    b3:3f:b2:e4:0b:bf:59:ee:ff:de:2d:17:a5:d5:3f:
                    1a:50:97:71:63:0f:12:84:71:7c:82:15:d4:14:22:
                    e8:ec:05:b2:fd:51:4b:48:8c:0a:85:20:6e:d1:90:
                    9c:c4:34:c5:a2:dd:92:cd:c2:1f:71:b2:4e:56:1b:
                    af:68:4d:bd:f4:88:33:40:e4:82:2d:15:49:15:a9:
                    fe:c5:c6:a6:8d:8f:18:d0:be:56:e0:84:50:c8:8b:
                    fc:f8:56:29:46:0a:b6:29:be:dd:5e:c4:90:ab:d0:
                    bc:a6:d4:2c:59:9a:29:8b:cd:4a:e7:66:87:a6:5e:
                    d8:92:1b:59:e7:8f:03:c8:22:35:b4:50:81:8b:15:
                    7a:7a:b7:ea:f2:31:48:3a:7a:0a:fd:45:d2:e1:ac:
                    75:f1:48:96:4c:b6:c2:da:00:01:83:43:75:88:84:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:22:44:8A:D9:03:55:FD:E9:E0:99:62:31:EF:FA:0B:BA:81:DD
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:bd:99:4f:52:fa:fc:b7:7e:ed:d5:41:09:d4:16:95:30:
         91:4c:ae:60:54:10:8c:79:06:f5:3c:09:d5:0a:40:5d:6e:13:
         ab:d5:17:d1:25:3f:15:ae:59:21:d3:bc:3c:1a:51:1e:96:a9:
         d3:6e:ce:42:c8:67:a4:40:15:53:4d:fe:93:a6:be:ee:15:09:
         88:ec:04:93:91:98:7d:8e:f4:21:1a:09:6c:0a:3f:fd:ec:e9:
         cf:30:1b:49:71:f7:65:12:1c:78:79:9c:a2:c7:4c:0f:5f:09:
         72:17:23:3c:05:aa:88:6b:ac:52:df:ea:2c:dc:65:30:5b:ee:
         ff:90:83:c6:e5:82:67:ad:bc:72:a5:bb:12:db:45:d5:5c:22:
         55:9f:04:79:52:0d:e6:5d:87:bb:a3:29:23:01:a5:77:e0:ff:
         89:90:72:72:1c:8a:d2:1a:93:b4:3d:3c:fb:dc:58:ce:ce:b7:
         21:b7:7f:b4:0c:e7:a7:ee:69:2f:58:2d:77:ff:09:6b:6c:f8:
         6e:8a:bb:01:38:dc:a9:07:28:27:76:67:28:b2:46:c3:bf:02:
         69:2f:a6:54:76:00:0e:f9:16:7b:30:e7:1d:d8:29:57:d8:97:
         b4:19:8d:02:a9:8c:a1:7d:34:c0:73:1f:fb:cf:52:78:99:b4:
         92:76:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:41 2026 by rpki-client