Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
File:                     755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json)
Hash identifier:          r4bG0zkOlVZqPHV5Z6XULRMe2yNO3BSD3KTl2NS512w=
Subject key identifier:   E6:FF:3F:B7:EF:84:16:EE:2B:D3:2C:4C:56:C0:2A:FF:EF:0A:58:09
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Certificate issuer:       /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial:       0B6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
Manifest number:          0B5E
Signing time:             Sun 26 Jul 2026 19:37:35 +0000
Manifest this update:     Sun 26 Jul 2026 19:37:34 +0000
Manifest next update:     Sun 02 Aug 2026 19:37:34 +0000
Files and hashes:         1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: DgP/HmYH2YsLV1465IrEqa2OMqjgLaoSwJBlEz3fkbo=)
                          2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: KFWCj0VeMTZsryK7dYwol+clwxvg1qf8whaXnrZDGPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2925 (0xb6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
        Validity
            Not Before: Jul 26 19:37:34 2026 GMT
            Not After : Aug  2 19:37:34 2026 GMT
        Subject: CN=6a6661ff-f31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:a5:23:03:41:46:5f:55:ea:da:d7:b2:0e:
                    4b:66:7e:da:bf:95:9e:0c:75:57:29:bb:33:77:b9:
                    69:56:18:c2:4f:98:d9:09:46:04:bb:2f:be:25:76:
                    b0:a2:a9:d0:be:cc:5a:e9:94:cb:af:5d:cb:fa:b7:
                    f8:0f:5f:29:16:63:07:4c:5e:19:22:60:2b:06:59:
                    93:97:8f:19:b4:1e:d0:36:f2:0c:a6:8d:96:89:9e:
                    eb:40:5f:bb:5e:63:b5:85:3b:6d:9d:cb:cb:f3:96:
                    00:18:54:64:bc:f3:48:22:ea:92:23:5b:72:7c:1c:
                    73:fc:c8:a5:16:52:dc:8a:65:0b:16:bb:fb:04:58:
                    e4:7f:50:23:b5:66:85:f1:03:54:cf:12:da:12:79:
                    7a:2d:01:2f:1f:a9:2f:90:b6:12:b8:2a:4b:5c:b4:
                    ca:1e:39:06:f0:f2:9f:73:3d:c5:64:65:ae:ee:1c:
                    6a:7f:91:1a:fc:16:6e:90:9a:21:18:9f:42:17:6c:
                    37:19:3d:f0:c5:9f:f5:94:76:d9:b7:73:66:0a:da:
                    8b:f1:f4:4a:aa:47:fa:4c:76:ca:0f:93:e8:9a:64:
                    2c:ff:dc:81:99:84:ae:5b:4f:da:2a:01:d7:85:48:
                    16:97:a6:59:4a:6e:ca:85:a0:9a:8a:e0:32:ea:5c:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:3F:B7:EF:84:16:EE:2B:D3:2C:4C:56:C0:2A:FF:EF:0A:58:09
            X509v3 Authority Key Identifier:
                keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:74:8a:be:fa:8e:94:4d:15:8a:49:90:cd:cc:87:8a:fd:b7:
         fc:8f:b7:2d:f0:f6:47:3f:2c:bd:e9:d3:17:ab:ed:db:de:85:
         bf:7b:3b:1b:33:c9:d2:1d:5d:2d:38:7b:a9:14:00:77:32:c1:
         c8:62:e2:b7:da:54:13:84:1d:ed:75:44:9d:ca:e2:0b:e0:d7:
         18:ac:9a:ae:ac:6d:27:ff:3e:8f:df:45:72:a5:22:38:99:cd:
         5c:75:f5:dd:8b:3a:ea:30:94:6a:a5:e5:be:e8:c3:fb:13:1c:
         c2:c6:bb:4f:0c:37:c5:15:d1:dc:16:96:ea:9d:83:cb:ff:b1:
         69:2f:35:63:ac:95:9a:6d:da:27:3e:51:9b:4d:7a:17:4e:37:
         76:b2:54:b3:58:87:89:d8:fb:2f:37:c6:1c:27:19:66:c4:ab:
         68:36:4c:b9:07:ca:c2:32:1f:ae:0c:8e:01:d1:48:89:1b:03:
         b7:b4:2a:22:c3:fb:8f:5a:d2:36:45:11:93:90:71:6f:6d:de:
         41:0c:30:34:e1:b8:80:2b:f5:f8:2b:b7:ab:5d:21:8b:be:a7:
         e6:d3:7a:3c:a3:c8:30:3e:5e:71:69:be:8c:72:c1:7e:09:96:
         ce:e1:a9:94:ac:0e:4f:2f:4c:f9:a9:fe:33:96:3b:bc:a1:6b:
         e6:41:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:43 2026 by rpki-client