Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
File:                     Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft (raw, json)
Hash identifier:          74dPW12zFJb1u/6UVyy0i5L6Hrvloj0w5CwVFuNGf8A=
Subject key identifier:   6B:01:D7:49:29:EE:C1:CB:92:36:51:5D:6E:9A:02:BB:4C:2E:57:DD
Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Certificate issuer:       /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
Manifest number:          2D
Signing time:             Mon 27 Jul 2026 11:13:32 +0000
Manifest this update:     Mon 27 Jul 2026 11:13:32 +0000
Manifest next update:     Mon 03 Aug 2026 11:13:32 +0000
Files and hashes:         1: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl (hash: Juh7qkSSroIB8Qf6DEavUp8U5y4UqTkvuLg0rjyYV3M=)
                          2: 653B4FA87EAA11F1B173303066A30FBC.roa (hash: EFkhWXtgulJBn3A7ClQDPUCqLh2IZisKv33Z5xFDjxE=)
                          3: 65D380F27EAA11F1B173303066A30FBC.roa (hash: 5gfdpSY7JYQ5F3wG8OEDwn4p3/ZZWjHNEFO05arQYNo=)
                          4: 763DF47E5F3611F192539E378047A888.roa (hash: Q5As8jeHYqHhZ7fSSmextS8z5wVQANqrRtBT9kjNokg=)
                          5: 64B446CA7EAA11F1B173303066A30FBC.roa (hash: tb/s6gLIXaYTsezXokt2OrwPKppQtIENbSawKe+uw8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
                          rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
        Validity
            Not Before: Jul 27 11:13:32 2026 GMT
            Not After : Aug  3 11:13:32 2026 GMT
        Subject: CN=6a673d5c-4009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:f1:32:a3:d3:7f:9e:12:58:73:ea:ef:da:
                    16:91:59:f3:3b:ca:c7:20:25:74:04:18:d8:9c:6d:
                    f3:97:5e:a3:f4:6d:ad:77:0c:0d:ca:4d:29:52:4b:
                    b5:85:f4:1b:45:0e:e9:20:a9:bd:b6:ba:b7:a3:a9:
                    72:7e:b4:94:0a:f8:f4:93:2e:48:f1:0d:d1:cb:fe:
                    9c:de:0a:a9:10:d3:72:55:97:c7:9e:43:67:5e:ac:
                    32:9b:40:f8:98:93:93:44:26:7b:f8:db:7d:01:36:
                    27:9c:40:7c:8f:29:25:4e:26:42:79:6d:d4:55:ae:
                    8e:d1:5c:63:74:87:91:e6:64:69:13:4f:8b:94:0a:
                    5b:db:02:d5:ed:2c:7e:f4:50:81:ba:fc:ac:92:e5:
                    6e:de:09:49:8d:cd:2f:9f:ef:8b:48:4c:ba:da:76:
                    c2:41:37:a1:fe:85:30:fe:c8:32:91:cc:7a:eb:1f:
                    ce:72:27:8f:49:0f:d6:ee:e1:23:39:a9:28:e6:0e:
                    f3:ad:fd:be:61:c0:78:10:ba:73:60:0b:85:41:7e:
                    d3:53:4d:c8:da:b1:7f:ff:06:12:4a:fd:61:72:38:
                    e3:9b:2f:bf:02:98:e6:6f:47:70:91:99:63:de:8d:
                    38:9d:7e:0d:19:c2:d8:59:c1:d1:53:f4:f6:7b:e0:
                    cc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:D7:49:29:EE:C1:CB:92:36:51:5D:6E:9A:02:BB:4C:2E:57:DD
            X509v3 Authority Key Identifier:
                keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:34:8a:9c:e8:bc:b1:ac:a2:6f:f2:56:2d:1c:50:1a:f0:
         e6:00:a8:73:be:d7:c2:07:16:92:09:f5:f2:5c:2c:23:c9:92:
         d4:25:f5:2d:75:82:16:7f:8f:57:dc:30:bc:46:4f:b8:b8:4d:
         00:60:e9:1f:ae:65:24:eb:15:03:d6:74:53:6f:85:b7:f3:ea:
         53:bd:22:b9:47:9e:a8:dc:58:ca:0c:94:a5:36:d6:51:ef:78:
         19:c6:0b:8c:b2:5b:f0:0a:91:e6:d0:8b:7c:1d:20:07:d4:35:
         fa:2a:10:10:14:c0:e7:78:f1:9e:df:bf:79:e5:c2:52:a9:f5:
         3f:8c:90:ca:67:71:9e:d8:db:b5:27:38:e6:cf:9f:4c:4f:be:
         6a:c6:ab:0d:7e:c2:e8:8f:9b:dd:ce:8e:30:be:aa:9e:1e:c9:
         39:79:d8:76:69:f8:54:25:e5:de:67:18:85:79:9b:6d:3a:34:
         76:cb:97:57:2f:46:08:01:00:35:a1:81:95:fa:3a:54:ff:99:
         a5:9d:22:bf:fe:0f:de:e4:90:61:03:83:52:7b:8a:b3:74:33:
         15:5a:80:d8:aa:d5:e0:dc:e7:e2:30:a6:99:a7:e5:7a:2a:46:
         a8:12:59:70:bf:a7:d6:5b:c5:fd:b4:ac:c0:89:e4:77:4f:c1:
         0a:76:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:07 2026 by rpki-client