Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
File:                     FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json)
Hash identifier:          gWS84ntOQta9y8ycG6/7RXrNTlbYAJE4D4o2V/2V4iI=
Subject key identifier:   51:73:91:EE:40:BC:89:4B:A9:AF:B3:F4:70:B4:C3:F6:90:93:F1:1A
Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
Certificate issuer:       /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Certificate serial:       0597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
Manifest number:          058C
Signing time:             Mon 27 Jul 2026 00:10:38 +0000
Manifest this update:     Mon 27 Jul 2026 00:10:37 +0000
Manifest next update:     Mon 03 Aug 2026 00:10:37 +0000
Files and hashes:         1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: CfnJzTvqyq1xlgAz4aXw3MLYe+nXpaCLjAMX4J1nmN8=)
                          2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: uwBd+LUs0WLRGeth+RhrSQgjQ8eS60NPtQG9hRifa0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl
                          rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
        Validity
            Not Before: Jul 27 00:10:37 2026 GMT
            Not After : Aug  3 00:10:37 2026 GMT
        Subject: CN=6a66a1fe-88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:39:32:a9:22:63:07:b5:f4:ac:b0:df:58:
                    17:63:30:8f:fc:2d:7c:d1:ee:a4:74:bc:54:cf:c7:
                    b9:e8:d9:fe:ac:85:1c:67:81:ea:e2:ab:44:51:3e:
                    17:f6:05:2d:15:2d:0e:5b:d8:0b:81:52:34:cf:73:
                    fc:46:5c:6d:fe:d3:d9:55:ba:b0:6b:18:f0:94:45:
                    57:f8:6f:1a:e7:70:07:ed:7d:ac:9b:e1:dd:8b:94:
                    96:a5:95:46:46:2f:ee:32:c8:93:9f:8b:47:f0:65:
                    e7:8f:11:4b:74:5a:5c:da:6d:d9:37:53:3b:1d:9c:
                    db:5f:d5:cb:c1:cb:be:de:8a:c9:b2:f3:d3:58:02:
                    d9:e4:56:b7:a9:3e:e9:21:65:a5:4d:77:37:83:bf:
                    b3:37:4f:ee:aa:bb:58:6f:9d:9d:48:ef:20:74:05:
                    16:94:96:8f:a4:74:0d:e0:e5:94:d0:ca:1c:9b:f2:
                    75:95:85:05:fb:58:c8:9c:f9:a5:51:5a:ae:91:f6:
                    65:23:66:11:ad:cb:10:9c:58:9e:96:be:31:4b:d3:
                    06:55:ee:65:60:da:fb:a0:af:a4:3d:26:a2:80:28:
                    b3:19:99:94:fd:d7:8f:e8:68:a4:32:5d:ce:d0:96:
                    fd:63:e1:9d:4a:14:6f:54:5e:53:e9:68:f6:df:17:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:91:EE:40:BC:89:4B:A9:AF:B3:F4:70:B4:C3:F6:90:93:F1:1A
            X509v3 Authority Key Identifier:
                keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:5a:bd:c3:01:12:84:c8:ae:77:aa:51:a1:94:34:04:ed:59:
         6a:e1:30:53:ab:5e:ca:64:42:0e:60:af:98:95:39:0d:2b:70:
         43:4f:d8:6e:ea:b7:f2:f7:b3:69:a0:9e:c7:17:4c:c7:af:4b:
         d7:39:73:c3:94:b6:a0:3c:6c:63:f7:99:47:95:aa:1e:a0:a9:
         68:f3:20:32:6a:76:a2:55:ba:57:44:55:bf:f1:4c:f4:6a:1d:
         f4:93:c8:f8:94:f3:1d:33:51:0e:24:82:cd:cf:53:1c:29:e9:
         7a:6f:a4:60:8d:51:ad:65:53:c3:9d:a4:7d:5b:84:1f:72:df:
         82:c5:2d:86:14:c6:12:db:7d:93:da:4c:5a:a5:be:21:a1:b6:
         e4:ad:40:31:97:08:65:87:8b:2c:8d:95:c6:29:4c:0f:97:0a:
         e1:b3:b0:96:e0:57:e7:8f:a5:7b:dd:db:ac:40:5a:0e:3f:3b:
         77:9f:e6:9c:b3:75:56:a3:1e:f7:fb:2f:04:d7:2c:45:1e:44:
         c7:57:5f:19:be:3a:6f:1c:11:e5:af:92:f1:63:08:01:ab:bc:
         ce:5c:b8:cc:57:04:6f:b9:0b:e4:6b:06:b6:63:ac:f6:b0:f5:
         e7:10:c8:7f:59:cf:6f:cf:f0:f2:80:b6:09:77:9c:94:aa:6a:
         ac:df:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:41 2026 by rpki-client