Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
File:                     MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json)
Hash identifier:          BeS8oeC9nyL8ylv+VsAqNqOHf63kuOrExLY+RjxWWZs=
Subject key identifier:   ED:72:29:EF:87:34:10:9C:BB:BB:4D:FB:0A:FE:A6:33:BA:80:6E:B1
Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B
Certificate issuer:       /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
Certificate serial:       1B47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
Manifest number:          1B3A
Signing time:             Tue 28 Jul 2026 16:22:13 +0000
Manifest this update:     Tue 28 Jul 2026 16:22:13 +0000
Manifest next update:     Tue 04 Aug 2026 16:22:13 +0000
Files and hashes:         1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: TgyVnh0Z3DUIuP0dJ+KG4Vu8GZcLkaobvXXV1mwMrGs=)
                          2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: ubMXw1DN1Mth2kZSk15bAoQVe5M3BHAcgEcTU6mYRfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl
                          rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6983 (0x1b47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
        Validity
            Not Before: Jul 28 16:22:13 2026 GMT
            Not After : Aug  4 16:22:13 2026 GMT
        Subject: CN=6a68d735-30f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f5:05:b6:cc:64:d9:9c:bc:f9:ef:0c:1c:11:
                    7d:24:c3:b1:7a:60:d4:16:e7:b6:51:23:0f:18:9c:
                    9e:44:67:46:8f:40:11:95:ac:43:78:20:2d:13:79:
                    f8:40:cb:48:9d:ba:fb:ee:3c:5e:89:d5:11:3c:58:
                    06:ed:7a:6c:6d:1f:b4:79:ce:57:93:f7:1c:c7:52:
                    3c:17:b6:a3:64:a6:1d:fd:71:40:d2:57:a3:6c:be:
                    10:17:1c:51:93:29:71:e5:bd:42:8e:77:35:99:c8:
                    8f:11:b8:c4:9c:dd:cb:52:63:41:90:00:4b:1c:97:
                    69:0b:75:78:5a:1b:df:37:99:5b:2c:b8:ed:a8:48:
                    32:f4:40:f4:c9:ec:c4:d3:3c:b6:31:82:e7:4c:92:
                    c7:ce:bb:66:4d:76:4a:6d:b5:e2:ed:54:e2:ec:ad:
                    ec:a0:2e:1c:ce:d6:7d:8f:57:f8:ea:bc:88:49:0f:
                    33:ed:da:7a:40:8e:cb:b8:c2:65:19:3a:54:53:e5:
                    5c:da:26:c0:74:ee:ef:3d:14:57:5e:05:a8:3e:c3:
                    e1:0a:07:27:d8:0e:8f:f5:4f:11:77:e5:e3:be:96:
                    71:23:68:fc:11:57:fc:c7:d6:9c:4d:6a:d3:2a:d9:
                    af:26:60:a5:8b:42:2d:d1:79:e2:13:f9:c3:7e:dd:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:29:EF:87:34:10:9C:BB:BB:4D:FB:0A:FE:A6:33:BA:80:6E:B1
            X509v3 Authority Key Identifier:
                keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:8d:7c:7e:c8:61:1a:e1:78:75:6f:19:18:8d:da:52:da:
         22:6e:c6:32:f9:61:9a:01:00:50:ed:9f:9f:80:0c:6c:56:9c:
         2e:dc:5c:34:7b:0b:fa:d2:9f:58:27:29:e9:d4:54:2b:bd:d9:
         49:da:21:2b:70:25:7b:38:3a:c4:db:fa:8d:da:f0:9a:fb:64:
         af:b5:b2:89:29:82:b8:9c:4d:c0:80:1e:df:20:ce:b7:9b:dc:
         82:ee:6f:1f:1f:05:74:2e:87:c0:a4:67:c0:bf:17:22:92:f0:
         9c:83:93:94:69:ee:46:f6:4b:1c:96:49:8e:fc:fb:55:7a:98:
         b0:17:5b:c0:8a:61:34:84:bd:8e:05:64:3a:da:75:12:81:ca:
         51:e5:98:70:c3:ab:96:52:8b:fc:40:90:07:d5:e2:17:f2:65:
         05:ac:fd:5a:60:2d:b9:1c:e7:bf:e4:81:61:67:d8:df:80:75:
         60:6d:95:a4:da:ae:f3:8d:b9:a6:ea:4b:ea:97:56:86:d1:1d:
         7a:14:6e:39:fc:6b:37:66:27:f9:7c:e9:73:2e:2f:21:68:04:
         89:db:86:30:49:c6:88:74:38:cb:62:9f:09:67:48:a8:83:85:
         2a:f1:25:f6:de:87:4b:65:d0:e8:ac:86:c2:de:41:d6:7d:b8:
         13:96:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:17 2026 by rpki-client