Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
File:                     9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json)
Hash identifier:          kZIVn6PYjJvELaTfT8iY2VCuZoZod1inoUkHeqtfkMg=
Subject key identifier:   5C:CD:4F:01:95:56:81:7C:56:47:3B:89:D4:81:B1:AC:BF:1F:1C:6D
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Certificate issuer:       /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial:       073A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
Manifest number:          0713
Signing time:             Tue 28 Jul 2026 22:41:28 +0000
Manifest this update:     Tue 28 Jul 2026 22:41:28 +0000
Manifest next update:     Tue 04 Aug 2026 22:41:28 +0000
Files and hashes:         1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: q0L8qwlSR0ksYFG2unvzmHGQcl1BedpuvgqEzw6wCCU=)
                          2: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=)
                          3: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=)
                          4: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
        Validity
            Not Before: Jul 28 22:41:28 2026 GMT
            Not After : Aug  4 22:41:28 2026 GMT
        Subject: CN=6a693018-3732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:44:a0:82:74:3b:09:60:84:0d:08:03:b7:
                    f2:85:2e:a5:8b:39:67:6b:0c:90:9e:75:f6:31:70:
                    21:f5:2c:94:98:1d:6b:f8:02:bc:37:96:ea:8c:eb:
                    2a:f5:bb:b8:1e:4a:65:b6:2f:da:91:c8:64:3f:d9:
                    c1:02:15:30:67:c4:40:71:e7:f9:1d:03:c3:cb:2c:
                    82:f2:fb:40:fb:c4:8d:b6:ce:bb:48:d9:f0:4a:50:
                    e4:b1:86:7d:6c:19:5a:b9:9a:36:fb:be:27:13:8f:
                    76:7c:01:d8:7e:e3:e0:87:92:bf:8c:4d:74:73:b7:
                    cd:c6:48:3e:79:43:cf:87:59:77:7b:ce:cb:f1:81:
                    19:c8:de:b0:78:01:e0:34:d3:d8:07:ba:b8:65:ec:
                    77:72:0b:a6:11:6d:e7:d8:b0:dd:9d:f1:8b:92:b5:
                    cf:81:72:02:4c:36:0d:b2:7c:93:7d:89:88:7c:fa:
                    2f:94:91:b3:a1:10:eb:5f:0c:f4:64:5b:f5:47:0a:
                    ea:64:0d:81:43:99:cf:53:8e:96:34:2b:42:38:cf:
                    e0:a5:a0:95:69:bd:d3:63:ac:6b:35:8e:11:da:c9:
                    99:f4:0b:72:a4:d8:46:bb:2b:fa:04:56:7d:c2:8a:
                    de:d1:26:96:5f:63:c7:62:a0:a4:4e:d0:15:2b:2f:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CD:4F:01:95:56:81:7C:56:47:3B:89:D4:81:B1:AC:BF:1F:1C:6D
            X509v3 Authority Key Identifier:
                keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:38:e6:5f:69:b6:cd:19:f8:a8:86:d5:88:3a:ab:65:b9:
         df:15:16:43:5f:7e:b5:c1:dc:f8:be:37:f7:d9:e6:e2:9e:27:
         c9:ca:05:dc:a5:5c:ed:95:84:d3:3e:96:ee:36:ca:26:11:8b:
         c9:ca:63:27:2d:9e:61:10:5f:ce:63:68:0e:0b:af:ab:a5:66:
         fb:ec:b2:0c:e7:53:2e:39:e5:8f:cc:0d:5a:0e:d2:07:8a:c6:
         31:c6:00:da:02:79:ca:2e:7c:ea:bf:46:30:52:dc:04:c3:b8:
         14:cc:92:b1:2d:2f:8e:ff:d3:0c:90:19:bf:18:a1:ab:c4:5b:
         58:bd:c8:ee:0d:90:25:f3:ce:7a:c5:82:f6:cc:6e:e1:bc:b4:
         7e:88:6f:38:60:06:9d:3c:dc:fb:da:a8:a8:09:4b:4a:c8:22:
         87:cf:c2:7c:f8:38:56:0a:a0:90:13:e1:6f:59:09:d2:86:d6:
         92:47:c9:db:ba:1f:d9:96:dd:8c:b1:42:30:9a:c7:55:26:8e:
         05:a2:a6:98:9f:45:07:25:60:09:ba:28:8c:b2:31:b1:72:10:
         e0:48:bb:0d:ef:e4:88:44:33:fa:9b:2f:5e:7a:97:bc:2e:90:
         06:a5:d8:26:2f:68:13:6c:a0:3b:10:45:09:a3:4b:71:1e:c7:
         5c:90:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:27 2026 by rpki-client