Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File:                     rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier:          0CxDEyoD9RKRjWeZeLsFViUHIQPBEuFoLFQ3kwLOay0=
Subject key identifier:   C6:57:B7:9D:BB:02:40:95:CA:6B:ED:35:AF:DF:B2:BB:27:73:51:EC
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number:          014D
Signing time:             Mon 27 Jul 2026 07:13:13 +0000
Manifest this update:     Mon 27 Jul 2026 07:13:12 +0000
Manifest next update:     Mon 03 Aug 2026 07:13:12 +0000
Files and hashes:         1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: 5awARVfEbobltO4sI/3LwmbN3ft8JWlWhPeTn7bZYvo=)
                          2: 496B943085B811F1904E05A160A30FBC.roa (hash: kzKLI8ZxIk66mC3lTcah6XxCKgGcbN+/Y9xbXXYxul4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
        Validity
            Not Before: Jul 27 07:13:12 2026 GMT
            Not After : Aug  3 07:13:12 2026 GMT
        Subject: CN=6a670508-c66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:55:02:77:f6:d6:73:d9:b5:30:5b:48:94:
                    d8:3d:fc:66:5f:80:6f:7a:e8:4f:24:3a:9f:10:13:
                    7b:2a:28:0c:b3:c6:32:bd:a8:12:3a:cb:a3:6e:7e:
                    ef:fa:14:ff:0e:53:d8:58:65:0a:2c:00:6d:1f:d6:
                    c1:ad:cf:91:05:39:ab:3e:16:f6:ef:77:fa:51:91:
                    cc:77:e1:dd:f3:a4:59:7d:77:a7:3c:b3:81:e5:ee:
                    0c:ab:43:f7:42:c7:d8:20:88:43:3e:ac:dc:d1:74:
                    4d:72:a3:0c:0f:47:bb:37:74:46:cc:6b:2c:00:7d:
                    9e:65:3c:18:46:7a:f8:91:22:71:f3:d0:d3:02:b2:
                    ea:31:17:8b:8e:11:e8:f3:a1:cc:70:d1:e9:a7:c5:
                    25:17:29:ad:75:81:35:8d:51:9f:c4:fc:38:74:5c:
                    17:f6:71:b4:25:1b:06:5b:0b:16:e6:a6:d4:31:8c:
                    2f:22:13:58:f6:5a:80:16:95:5f:8e:07:88:83:5e:
                    23:84:a2:2d:5c:c8:90:f8:39:8f:5d:b6:77:1a:48:
                    62:0f:af:67:cf:7b:8a:66:a8:57:ef:e3:77:15:04:
                    f4:8c:f8:29:d2:c5:18:a4:3e:c0:d9:a3:41:80:52:
                    07:a2:9d:69:8a:f5:61:ff:2e:21:f9:c1:1e:40:f2:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:B7:9D:BB:02:40:95:CA:6B:ED:35:AF:DF:B2:BB:27:73:51:EC
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:50:a7:81:a0:2a:3d:3a:d0:85:99:cd:56:f0:19:2f:96:6b:
         f7:bb:2a:5a:af:c5:f5:27:05:77:f3:3c:5e:15:e4:a0:93:b2:
         9c:dd:c0:63:5f:c6:df:1a:e0:77:28:ec:c4:5c:9a:e5:e9:61:
         1a:01:2d:60:f8:eb:24:d5:dc:dc:47:cd:36:94:92:7b:65:6c:
         26:f7:85:b9:3c:27:72:f6:05:4b:df:7e:86:f9:26:26:d3:7a:
         32:91:e0:3f:db:9e:6d:57:2b:aa:06:19:17:a9:e7:0d:40:86:
         19:5b:cc:1b:5f:92:c9:34:34:95:67:58:66:7c:ad:8c:5e:0a:
         fc:a5:f6:4b:34:46:29:b4:df:e9:f1:1c:5c:3f:d9:74:ef:35:
         9d:99:0d:6e:9d:6d:ee:e1:03:45:7b:e7:50:1e:cf:1c:ad:88:
         93:02:2d:37:cf:b4:78:3b:ec:be:3b:0e:e9:65:0b:c5:09:00:
         12:bc:6d:2c:93:67:44:f7:94:39:ff:45:3c:5c:0b:f9:fd:14:
         77:19:04:ad:4f:c8:da:aa:75:d3:89:01:ad:3d:86:02:01:dd:
         ec:fc:6f:5b:ba:fe:85:cf:92:bc:b6:fd:d7:6c:bb:88:cf:46:
         e9:ff:c0:c2:14:2f:14:58:8b:40:63:6b:a2:10:6f:58:69:9f:
         59:3b:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:42 2026 by rpki-client