Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
File:                     6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json)
Hash identifier:          eloWCizkKK0KRY/pVTiy69LZCFGXDnydakLMz4iUcRQ=
Subject key identifier:   D9:40:6F:2E:CD:E8:54:5F:6E:55:24:48:AD:AE:49:90:19:3B:63:7F
Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
Certificate issuer:       /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Certificate serial:       17F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
Manifest number:          17E9
Signing time:             Tue 28 Jul 2026 16:38:38 +0000
Manifest this update:     Tue 28 Jul 2026 16:38:38 +0000
Manifest next update:     Tue 04 Aug 2026 16:38:38 +0000
Files and hashes:         1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: EPn36GymhWKEmgvVXdLc477wgsxeZ1x5tSWUn5N/Tfk=)
                          2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: +KfR9XbiA07UHIB3QQaFMDsbb0IWgivCKLoTziO/wYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl
                          rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6134 (0x17f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
        Validity
            Not Before: Jul 28 16:38:38 2026 GMT
            Not After : Aug  4 16:38:38 2026 GMT
        Subject: CN=6a68db0e-9c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:b0:59:d0:a9:cb:82:a2:23:97:93:72:c6:
                    f5:16:af:fe:75:3f:50:ee:e4:6d:28:f1:df:da:b2:
                    3f:2b:4f:8f:82:a1:dd:39:18:c6:70:b6:fd:ee:c1:
                    0f:6c:c1:de:a7:30:59:8e:41:14:04:d9:a6:90:23:
                    3f:4a:5e:9d:16:2e:5c:05:dd:f5:68:82:d2:15:f6:
                    6a:93:81:55:0d:a8:53:03:00:9a:d1:cc:d6:b3:5e:
                    cc:a3:cd:17:a0:72:da:0b:84:72:c2:e7:b5:d7:50:
                    25:12:bc:10:b2:51:fe:45:30:e0:40:26:55:b2:50:
                    b2:5d:1e:2f:5c:2c:e6:78:8e:54:3e:cf:d2:0b:c9:
                    bc:12:2d:3d:43:59:0a:97:22:e5:fe:6f:b1:78:17:
                    a4:fd:5a:38:33:de:69:5c:c0:76:16:fe:57:e2:d1:
                    2e:cc:8e:a4:9a:96:84:06:4a:92:c2:79:e2:93:e5:
                    fa:1f:26:22:53:4e:fd:79:65:ba:5a:70:f4:35:fd:
                    85:9f:85:6e:6c:53:ee:e4:0e:02:e9:e7:05:26:95:
                    a8:e5:c1:75:38:cc:de:55:c6:b2:68:79:0a:fb:8a:
                    65:ef:0e:7c:b0:e4:25:06:df:10:30:bc:f5:24:57:
                    d4:06:92:ad:9b:c9:f7:cc:7d:67:02:de:bc:11:0b:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:40:6F:2E:CD:E8:54:5F:6E:55:24:48:AD:AE:49:90:19:3B:63:7F
            X509v3 Authority Key Identifier:
                keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:f9:61:cb:85:a7:3e:0a:08:5b:66:e0:36:59:5c:75:94:
         bb:89:90:17:3f:a6:9d:ae:45:62:9a:1d:48:86:9e:e3:60:e2:
         e8:8d:29:f7:0d:d5:a3:19:b3:f4:a5:ad:03:bb:23:a9:df:42:
         11:35:04:71:06:1b:b5:38:7c:b2:de:d4:82:75:75:6c:0c:3d:
         5d:92:e6:99:4d:e4:5f:4e:0b:f7:65:6f:8e:4c:92:e5:66:fb:
         9e:df:1e:cd:d8:3b:4c:99:44:b2:cd:7e:ab:90:cf:26:92:64:
         32:22:37:c8:8c:ac:2f:2d:19:e4:42:f9:6a:68:ae:4a:7d:8c:
         e0:b5:47:cb:61:b5:2d:d1:6c:a3:01:95:dc:66:12:2d:c7:30:
         92:1a:e4:2f:b9:c4:62:d8:06:1e:7d:27:74:f6:c4:ee:d2:2a:
         de:7c:73:1c:68:4a:65:6a:38:68:bb:ed:87:af:92:9a:50:49:
         22:94:0c:14:74:0c:c1:79:26:f9:9b:ba:53:1e:3c:18:b5:6b:
         49:a5:ae:69:88:f0:b7:0a:00:a0:25:33:cf:9a:5e:5b:ca:a1:
         f0:de:fe:61:2b:df:01:d4:97:70:1b:7f:35:72:89:4c:ed:ee:
         6c:b6:e5:f6:7b:bd:5e:f7:71:7e:1a:5e:23:40:f9:ac:a2:ad:
         6e:06:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:42 2026 by rpki-client