Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File:                     EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier:          QZzsC6BEUQ64dkYm/OV3LqSBIGGMGTEPdMSrtF4q5Hs=
Subject key identifier:   AC:B7:19:C4:AA:9A:0C:89:CF:19:B5:73:AD:69:A3:81:7E:30:3E:55
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number:          0194
Signing time:             Mon 27 Jul 2026 06:09:11 +0000
Manifest this update:     Mon 27 Jul 2026 06:09:10 +0000
Manifest next update:     Mon 03 Aug 2026 06:09:10 +0000
Files and hashes:         1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: oXxKt6Ohmf3DtJmsJRQfQPB2Sspx/7gksie6k5Yo5A4=)
                          2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: s7GLGtp6WWZ+8tGGQw/IP17opBzX+2RCOigurVObf4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Jul 27 06:09:10 2026 GMT
            Not After : Aug  3 06:09:10 2026 GMT
        Subject: CN=6a66f607-8d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:2b:f1:e7:72:93:2e:cd:bf:10:00:14:75:
                    08:8b:92:20:46:af:eb:ae:0a:0b:23:ed:37:49:c0:
                    0c:02:11:94:99:63:91:42:47:87:72:60:15:73:2f:
                    7c:89:ea:bc:b1:a2:e7:1d:21:4a:92:ad:b2:04:f1:
                    00:5d:13:4b:1d:7c:46:b7:0e:29:b6:e6:84:db:78:
                    28:3e:83:e0:8e:93:aa:e9:0f:d2:c6:fa:9a:3f:c1:
                    a0:9a:9d:38:44:4b:6a:42:c1:86:08:bd:57:ac:bb:
                    35:cf:e6:24:84:f2:7f:24:49:96:3f:fc:33:47:f7:
                    40:b5:3f:85:c9:fe:52:ff:df:57:8c:b4:df:13:9e:
                    d2:61:4d:8c:a1:02:45:ae:89:f8:0a:e7:f7:b6:c2:
                    ea:8e:27:61:47:01:23:44:12:42:23:cb:b6:6c:a8:
                    f6:f4:79:da:24:4f:10:d8:85:25:64:c4:73:46:82:
                    0d:e5:29:90:de:a7:90:ff:cf:f5:9a:22:87:0c:8c:
                    04:09:2e:03:98:4e:fc:8a:91:d3:25:0c:fd:e5:fd:
                    6f:05:d5:fc:a1:60:4f:9b:e6:b7:dd:c2:88:e2:bc:
                    61:b2:30:32:83:fd:76:12:f4:92:b9:e4:06:4e:34:
                    23:72:5b:9c:a5:bf:1e:15:86:a6:af:41:68:a6:57:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B7:19:C4:AA:9A:0C:89:CF:19:B5:73:AD:69:A3:81:7E:30:3E:55
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:03:34:ab:4d:00:17:fd:74:0d:fd:b7:41:d2:fa:6a:60:
         40:66:7b:36:24:9e:6e:4a:bc:44:40:09:f5:78:24:24:03:f6:
         a7:a0:69:39:d7:7b:a5:c0:35:f9:32:14:73:be:63:b3:71:80:
         10:c0:95:3a:05:52:5d:fe:37:d2:bd:69:dc:aa:20:24:66:03:
         4b:3c:28:d7:e0:46:08:91:ac:a2:6d:54:b6:94:82:d6:7e:14:
         f0:49:00:25:34:ad:02:55:01:60:1e:07:d8:c9:67:d5:7f:64:
         46:7c:69:7b:35:19:8d:ae:90:5f:c1:07:05:bd:91:92:19:3a:
         21:f0:80:e6:0c:b8:27:48:d5:81:cd:4b:5a:8c:d9:65:f2:2a:
         4f:db:ae:58:85:c8:b4:f9:13:a7:01:5c:71:e4:71:b7:69:93:
         b3:15:b9:c2:a8:c2:4c:99:4b:d9:75:c2:63:82:1c:1d:d2:91:
         d6:dd:37:eb:2a:40:d0:7b:73:80:07:28:4b:fa:f0:6a:2b:6f:
         32:24:a9:8a:20:8c:dc:00:00:2c:b5:14:6e:64:8a:dd:20:ac:
         3e:b6:f7:d5:8a:11:10:31:6e:e8:ee:ef:85:1e:c1:82:4b:c3:
         8c:15:e4:38:7d:c7:06:16:3e:43:cf:d4:7e:48:a5:4a:51:5c:
         75:b1:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:30 2026 by rpki-client