Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File:                     9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier:          pYwt9M00e2ITwzGjokvUk4Bmq7yLTaeY5x4IZLMKQN4=
Subject key identifier:   52:B5:00:ED:E3:DC:54:DF:0C:78:CA:9F:BE:12:43:A0:93:7C:BA:49
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer:       /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial:       03DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number:          03DD
Signing time:             Mon 27 Jul 2026 01:36:02 +0000
Manifest this update:     Mon 27 Jul 2026 01:36:01 +0000
Manifest next update:     Mon 03 Aug 2026 01:36:01 +0000
Files and hashes:         1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: wJgqZKzChj6/FgogXwgRNAkBiyIRkm1bIk5Vdb0rnK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
                          rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
        Validity
            Not Before: Jul 27 01:36:01 2026 GMT
            Not After : Aug  3 01:36:01 2026 GMT
        Subject: CN=6a66b602-f0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:92:9e:c6:00:20:6d:7d:5d:58:d6:3e:8e:
                    71:39:9e:fe:26:e3:af:d1:0f:2f:d6:ff:bd:90:58:
                    eb:04:f2:69:84:4c:73:a1:c0:e6:ac:c3:21:11:15:
                    ff:d5:ec:61:a2:07:2e:42:89:05:c5:d8:b2:76:76:
                    34:1d:e7:d1:3b:2a:ff:f6:7f:19:c3:3c:8b:9b:80:
                    35:69:c0:dd:3c:df:d2:3a:51:74:ee:44:43:09:2a:
                    92:ce:5c:a8:c1:ce:1b:2d:96:bf:93:84:f1:bb:b9:
                    42:f0:18:d5:81:25:c0:9c:0a:43:74:74:55:90:e4:
                    fd:54:fb:4b:9d:11:09:0b:39:d1:20:dc:1f:50:c4:
                    6c:05:ef:ad:22:40:86:99:a7:6f:34:98:db:e2:10:
                    94:13:e1:dd:c1:cd:dc:c4:79:72:6d:39:77:52:7f:
                    f0:5d:64:e7:e2:24:94:52:bd:c3:c9:b8:cc:01:ec:
                    bf:56:42:a6:49:a5:b0:c4:a1:e2:dc:ec:cf:59:50:
                    9e:3f:fa:3a:16:0b:9c:cc:45:fc:72:2b:91:0e:df:
                    3b:3a:1b:2e:63:83:ec:6f:b8:c3:47:3d:56:77:ff:
                    64:75:5e:6e:b2:2b:f0:89:0f:c2:16:8f:91:56:f9:
                    9c:71:84:d3:8b:fe:ca:94:4b:73:98:15:e7:73:83:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:00:ED:E3:DC:54:DF:0C:78:CA:9F:BE:12:43:A0:93:7C:BA:49
            X509v3 Authority Key Identifier:
                keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c2:1e:a5:37:37:d8:2d:23:86:aa:11:91:d3:79:aa:dc:77:
         13:b8:e9:20:37:0c:3b:35:73:c9:e3:40:69:35:5a:c0:86:cd:
         70:d2:16:02:eb:44:47:38:0a:65:77:b0:98:45:46:43:ad:a7:
         92:18:ad:15:30:65:d9:fd:f1:85:b5:b5:86:37:8c:2d:e1:e8:
         39:ea:71:17:35:91:9d:bf:ad:1b:5c:c3:d2:79:e6:dc:14:27:
         71:c4:67:7b:74:e5:d9:df:e6:bf:01:09:75:82:86:00:c7:45:
         3c:47:0a:f4:4a:9a:88:fe:f8:10:13:7d:c8:df:64:13:c8:bb:
         b4:c4:18:28:44:d3:07:2a:04:8d:9b:b4:2b:ac:11:de:41:8f:
         a3:d5:d6:eb:f3:6e:55:94:4c:e8:c3:ee:27:f1:6d:5d:77:f2:
         ee:c4:0b:19:d3:5b:4b:e3:d5:9d:f4:64:c7:40:3c:94:bb:23:
         47:37:c2:c6:ad:eb:6d:cd:64:db:4c:1d:90:df:58:1e:81:46:
         fa:c4:ee:23:5d:20:87:35:92:23:67:1f:4a:9b:5b:b8:50:21:
         90:37:13:9a:d1:51:5a:2b:69:0f:e9:d5:22:ef:04:14:11:f5:
         93:4a:81:c7:a2:df:12:bf:fc:6f:a7:c4:9e:a8:e4:21:c4:61:
         55:0d:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:42:15 2026 by rpki-client