Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          KaomkuwSj/YVN3fWAyIVyQQAAtVgW+e2Neya3palLu0=
Subject key identifier:   85:91:7D:61:5F:E4:E2:16:C5:23:F1:FC:3E:60:09:65:90:E1:BC:9B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0CC5
Signing time:             Mon 20 Jul 2026 19:11:26 +0000
Manifest this update:     Mon 20 Jul 2026 19:11:25 +0000
Manifest next update:     Mon 27 Jul 2026 19:11:25 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 0NpaPS0MyJgVrA7WGoyuaZinDe7v7oUyCIJiKasSIa0=)
                          2: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
                          3: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=)
                          4: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
                          5: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: g2GkrwqDM8g4EPcoRU14VtmMWrRkEc3nm/o6l5+kRws=)
                          6: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
                          7: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          8: 50C74740608511F1B54688666E47A888.roa (hash: IQGnQ5zQbYNcFjoaC/X8FlYzSh99L1UkIksPVrl/4Lc=)
                          9: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          10: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          11: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          12: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          13: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          14: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          15: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
                          16: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
                          17: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
                          18: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3487 (0xd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Jul 20 19:11:25 2026 GMT
            Not After : Jul 27 19:11:25 2026 GMT
        Subject: CN=6a5e72de-f24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:dc:ad:c8:fe:26:49:0f:a2:71:ef:a6:ba:
                    8d:0c:14:a6:0c:59:67:ca:da:0b:d9:ff:5a:3e:c3:
                    7e:81:b8:e3:eb:fb:09:41:b9:da:dd:6d:a5:bc:a3:
                    da:f1:ba:1e:73:cc:71:87:78:57:19:d7:7f:24:24:
                    b2:f0:08:ad:cc:33:6d:5f:2e:d8:f2:9f:c3:0b:36:
                    2c:52:e5:e7:1d:9a:8c:ea:98:ca:bb:f6:c6:e7:e7:
                    f5:40:97:d8:f5:9d:1e:37:2f:12:93:4d:c3:70:78:
                    e6:71:ca:fc:95:0b:f2:a5:85:41:21:51:28:c4:5a:
                    26:a1:fb:2e:63:83:35:e7:95:98:8c:48:50:00:78:
                    ee:22:d6:1b:ed:ea:3f:c5:38:67:9f:22:9b:33:cd:
                    2c:89:ea:f9:a7:b6:85:fa:73:7e:0f:0d:41:71:83:
                    f2:8c:96:ce:cf:31:f4:89:2b:4c:26:15:28:90:e4:
                    1f:fd:96:30:b5:64:2c:8e:a6:62:80:66:6a:56:22:
                    96:06:11:ab:4f:bb:45:17:1c:76:d6:50:86:6d:04:
                    63:64:82:f8:60:12:52:d8:dc:a4:d8:3c:4c:cc:f6:
                    ec:b5:0b:06:60:38:28:c3:67:bc:b5:2f:80:39:79:
                    d3:cb:f7:7f:86:ec:8c:a4:78:df:20:59:35:30:f8:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:7D:61:5F:E4:E2:16:C5:23:F1:FC:3E:60:09:65:90:E1:BC:9B
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:0e:9c:38:1f:3c:ee:f3:13:b0:ec:34:4d:6c:44:c4:5b:15:
         06:aa:84:22:3a:27:6c:a8:2b:b1:87:01:c2:18:45:f3:8b:a4:
         17:f4:15:47:e8:88:b3:9f:b8:ba:e7:f4:2c:2f:c7:0f:eb:85:
         86:fe:a9:b6:28:ae:80:9f:b3:7d:b8:03:9d:08:e6:6f:1c:1e:
         c4:f7:3b:d4:1c:ff:1e:b0:91:df:23:cb:25:f5:96:e4:2f:bf:
         74:e6:a1:28:17:9b:48:83:ed:db:51:32:67:7a:22:38:8b:e3:
         71:cd:79:12:26:94:12:7d:75:ed:27:44:db:ac:3b:e3:55:79:
         ae:3e:0e:22:38:5c:f6:e6:af:a4:10:78:21:45:b3:c4:c7:f2:
         f8:49:bb:f7:9d:67:a1:bc:c1:d3:13:5b:8e:85:06:a1:02:98:
         54:d4:16:27:08:5f:c6:82:76:9a:d6:94:74:1e:c4:ed:13:ce:
         53:57:ff:16:18:a9:a0:6c:40:c5:85:ab:8c:b1:38:8d:cc:4d:
         92:82:31:5c:21:e3:e2:d9:2f:9e:74:da:25:74:4f:84:89:7d:
         e3:46:aa:9a:7c:32:0b:60:17:ef:6e:e9:1f:48:2a:47:c7:f8:
         29:02:f0:17:f2:d1:9c:19:a6:0b:ad:d1:78:6e:93:0b:d9:3c:
         c4:f0:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:06 2026 by rpki-client