Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
File:                     4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json)
Hash identifier:          rqS6WxmUfDEJytXfKCZ4ECmD3KXlHwc/4ZyRVn8a2bw=
Subject key identifier:   2D:C1:7D:A0:B0:86:F5:0A:CA:FF:24:76:4D:BA:68:61:69:9A:65:11
Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
Certificate issuer:       /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Certificate serial:       03A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
Manifest number:          039D
Signing time:             Mon 27 Jul 2026 01:49:34 +0000
Manifest this update:     Mon 27 Jul 2026 01:49:33 +0000
Manifest next update:     Mon 03 Aug 2026 01:49:33 +0000
Files and hashes:         1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: qeTJoNQvRbhTROtW1XqGPi3FaYTd+YKuas/6+zi7Kx8=)
                          2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: GXpK+pRpG+NlM+6tNcejzOKzO0QAHDY9K5I7GneuBi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
                          rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
        Validity
            Not Before: Jul 27 01:49:33 2026 GMT
            Not After : Aug  3 01:49:33 2026 GMT
        Subject: CN=6a66b92e-cb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:17:e0:49:3b:21:71:66:d6:ec:15:18:d9:
                    d4:a3:d8:3e:9b:0b:cc:4c:f1:7a:1d:82:47:22:c1:
                    ec:de:6f:47:b5:a7:e8:6b:e0:62:f6:96:5d:a8:ea:
                    16:4c:f3:b0:20:b6:48:d4:a8:3a:f6:9b:4a:c3:d6:
                    9b:56:8c:f5:f0:2b:0b:1a:47:02:0a:5c:39:ea:c1:
                    e0:76:c4:47:db:8c:1d:c2:cd:8c:98:c0:ed:4e:22:
                    cc:db:d3:58:f5:b6:ee:a0:22:8a:36:d2:52:40:06:
                    18:0b:3f:ba:ec:56:18:b8:68:f4:29:fd:f2:29:15:
                    44:28:c7:36:35:1a:fe:42:1e:8c:58:20:cf:65:98:
                    81:15:12:77:1c:6e:44:6d:3c:e5:10:d0:0a:8f:f2:
                    d3:8c:c0:dd:93:73:09:c4:10:a0:3d:48:6d:42:ce:
                    f4:59:7f:76:8b:c4:de:7d:30:2a:b1:58:cb:02:78:
                    4e:06:e2:cd:8a:a2:eb:50:bf:06:d8:f5:06:e9:c4:
                    d5:b3:ed:e8:d5:e6:b3:52:e9:0e:5a:66:7d:04:d1:
                    26:7f:37:a9:6c:75:f4:24:d7:74:3a:10:7f:f0:a9:
                    29:a7:be:45:47:c8:f0:54:eb:fb:e7:9e:24:ae:ce:
                    cb:29:00:9a:c0:f3:5f:88:ff:7a:e7:80:6d:3b:ab:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C1:7D:A0:B0:86:F5:0A:CA:FF:24:76:4D:BA:68:61:69:9A:65:11
            X509v3 Authority Key Identifier:
                keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7b:82:31:73:a8:ad:ee:17:9c:cc:95:98:cc:54:69:1c:3a:
         97:d5:d9:9d:4e:f4:f2:3e:05:81:c3:3e:98:99:5f:85:4e:da:
         32:ee:ca:c5:32:cf:bd:5b:f0:4e:4a:a0:81:11:92:2b:4a:9d:
         63:66:63:7a:a4:d9:9b:99:16:8c:f6:82:47:1a:9b:07:28:eb:
         5b:87:0b:5f:6b:27:e6:fc:64:f9:a5:b4:04:79:2d:a7:86:b7:
         2a:95:9f:f0:7a:09:00:a9:46:2d:da:f0:fa:36:d9:69:77:07:
         c9:a2:a8:f0:cd:41:88:11:11:a4:ad:e7:05:69:45:05:35:a9:
         d7:cc:53:2a:5a:2d:f1:6f:58:5e:c7:47:bd:7c:8c:19:a8:7d:
         9b:06:50:c6:54:4f:29:f7:b9:62:97:50:f5:5d:5a:91:1d:59:
         f6:77:1b:c1:14:cd:e5:de:1e:63:56:11:33:ba:54:b0:de:8c:
         11:ca:e3:6a:b3:e3:af:0a:cb:61:37:d3:47:53:d0:4f:92:f7:
         46:47:db:3c:a7:16:8f:9f:8c:dd:fd:5d:49:d9:7a:65:d9:fa:
         f4:36:c9:45:e0:70:ef:56:3d:17:8d:76:dd:c4:58:38:9b:df:
         9a:49:db:27:a0:dd:96:66:06:b5:e7:fb:9c:7e:21:6d:55:82:
         35:8e:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:09 2026 by rpki-client