Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
File:                     2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json)
Hash identifier:          Vt+qhG8GHfHWY1q6jcTktkeXI3htGXTkuL1nbWqF9Lk=
Subject key identifier:   75:80:29:2B:C1:E4:58:64:1F:82:E5:D0:77:01:0E:D3:5B:93:F1:64
Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
Certificate issuer:       /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Certificate serial:       0D58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
Manifest number:          1F3E
Signing time:             Tue 28 Jul 2026 17:14:48 +0000
Manifest this update:     Tue 28 Jul 2026 17:14:48 +0000
Manifest next update:     Tue 04 Aug 2026 17:14:48 +0000
Files and hashes:         1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: xwKgmwOZfUcMFUnExyKWpunb+c20top5WagU00lrwGk=)
                          2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3416 (0xd58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
        Validity
            Not Before: Jul 28 17:14:48 2026 GMT
            Not After : Aug  4 17:14:48 2026 GMT
        Subject: CN=6a68e388-cb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:4d:ad:f0:f5:32:1f:78:4f:e9:69:40:bc:
                    61:5d:d8:9c:13:54:22:46:0b:53:55:5a:e1:f7:7d:
                    50:45:aa:26:42:5f:f4:76:75:84:09:d2:fc:25:f2:
                    cf:53:69:d2:0c:fb:7b:17:ec:72:af:15:d8:1a:a3:
                    21:a1:c2:7a:7f:d2:63:b8:3e:b4:c2:6a:7c:dc:ed:
                    98:f7:97:17:0a:8d:fa:dc:e0:e2:54:79:7e:c2:cc:
                    6f:72:1f:a8:1b:ee:4d:68:45:12:75:cf:be:e8:47:
                    e7:a2:4b:87:ac:4c:ce:06:e1:6a:31:af:8f:73:47:
                    1b:a5:71:a3:fe:98:a5:c6:b3:97:12:39:91:e4:0d:
                    a0:90:ef:07:c2:9c:e6:f8:00:9a:1a:48:5a:4f:44:
                    fa:0c:35:20:fa:07:7a:52:69:12:f4:1c:b2:ee:57:
                    b3:47:f1:ae:dd:fd:95:f6:bb:cf:e5:76:34:be:04:
                    da:53:e2:dc:87:4b:1b:77:56:9e:2f:13:2b:b4:b5:
                    c9:28:87:3d:ba:14:91:b5:1d:6e:35:68:ab:ac:69:
                    13:f2:8b:81:06:48:18:8c:ba:89:a9:d3:ac:1f:74:
                    42:6d:89:16:3b:a5:74:c8:85:a2:d9:12:24:6a:7a:
                    3c:b8:96:93:dc:86:40:fa:89:74:9b:7c:2c:92:fb:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:80:29:2B:C1:E4:58:64:1F:82:E5:D0:77:01:0E:D3:5B:93:F1:64
            X509v3 Authority Key Identifier:
                keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:40:a5:9e:8f:66:9e:8b:74:ad:51:f4:5b:4c:9a:bd:6d:c1:
         f1:5d:33:1c:2b:51:6d:76:4e:b1:de:c2:f7:f4:66:e6:fa:85:
         e2:64:3d:2c:4a:bc:19:dc:8a:05:44:89:3a:91:b7:6e:a2:13:
         98:31:be:e5:62:2c:31:16:43:57:2e:c6:53:8a:47:db:b5:f8:
         cf:73:ad:40:23:ad:eb:3e:c3:bb:d1:24:3b:7a:8c:9c:5b:c6:
         39:3a:2f:0e:93:1c:87:42:80:49:f5:74:a7:04:67:ed:78:a7:
         cf:fb:a5:e8:d4:f5:a1:9b:0d:65:fa:42:0b:ea:45:fa:74:f2:
         6a:37:e9:b4:91:3d:7c:d0:0c:2e:82:91:06:6b:4f:70:71:a6:
         a3:f3:d8:59:9f:b9:e0:63:2a:eb:89:ed:37:33:2e:04:6b:d1:
         62:5c:a4:96:60:4d:8a:5e:91:ab:63:61:70:a6:f2:db:6e:ff:
         f3:20:10:1c:c8:7c:e8:84:88:42:e7:86:fd:3d:69:08:8b:ef:
         8b:10:57:e2:dd:51:44:79:7c:c6:45:95:f3:07:77:b4:30:29:
         69:71:20:e5:2a:82:b2:bf:00:d6:63:1e:84:57:d2:30:64:ec:
         19:45:22:1e:27:e3:95:e6:3f:ef:e3:86:a5:5a:1d:68:d9:c3:
         6b:1f:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:30 2026 by rpki-client