Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          65tI4QNcwdfD9yNGIlEoJgotYpTnM+tnpkVphajtwws=
Subject key identifier:   58:6C:C3:13:D0:17:81:AE:B3:54:14:C0:68:44:A6:ED:DD:2A:64:03
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       09C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          09AD
Signing time:             Mon 20 Jul 2026 20:23:38 +0000
Manifest this update:     Mon 20 Jul 2026 20:23:38 +0000
Manifest next update:     Mon 27 Jul 2026 20:23:38 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: jejGfsQliMp5bdbABluzIkV7LwZd/OppTV/gq5takKE=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: uB90XoJd0h+ZsfjSZb2jo0kKEK2zlo/T12QD2KhR6to=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: 6SFxnAYtEmDY0FSpqWSl0msvr8nqW/ZhQvTYvJBPZWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Jul 20 20:23:38 2026 GMT
            Not After : Jul 27 20:23:38 2026 GMT
        Subject: CN=6a5e83ca-f556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:13:2c:ea:1a:f1:8b:74:52:51:45:0d:16:
                    b4:01:dc:1b:29:44:95:0b:31:6f:0d:f8:81:78:41:
                    2b:c0:db:d7:90:4e:33:52:dd:90:f5:20:3c:e9:f9:
                    11:49:4a:fe:03:79:15:29:93:fe:de:45:92:02:4a:
                    dc:de:41:73:62:94:7f:cb:16:2c:c1:64:2a:d1:69:
                    b5:b3:3a:b0:40:c1:30:d9:cf:1f:d9:dc:e8:42:ec:
                    bc:85:1e:2e:7c:a8:bc:18:d3:8b:fd:11:19:32:5a:
                    fc:88:b1:ba:f3:4d:5f:fc:20:3a:44:f4:e6:39:0d:
                    7d:01:3b:4a:b7:f5:6b:52:e1:18:99:5e:7b:b8:50:
                    dc:d4:65:d2:4d:ef:3e:3f:3b:84:7e:bc:aa:b4:bc:
                    ae:b4:b7:e2:40:a7:91:52:ce:c2:3a:75:3b:81:ca:
                    0e:5b:9b:5b:7e:47:59:00:c3:04:dc:b3:67:11:62:
                    1b:db:8c:70:51:dd:0f:82:ba:64:f3:7e:fd:78:10:
                    b8:44:44:e9:99:b1:cf:23:2d:85:69:db:69:57:b8:
                    ca:b3:43:57:df:d5:ac:94:41:0c:8e:86:71:97:62:
                    b0:f0:ff:9c:c9:8e:c4:b0:fd:f7:3e:47:58:cf:41:
                    26:75:84:00:e4:5a:74:f5:6a:bd:55:03:22:ee:be:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:C3:13:D0:17:81:AE:B3:54:14:C0:68:44:A6:ED:DD:2A:64:03
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:c9:61:23:ba:71:25:0a:76:3e:42:d5:93:a8:19:ff:5b:
         ed:ae:ae:e6:72:77:1a:8a:5d:ab:b9:26:6f:b6:7f:13:55:50:
         e8:4e:24:35:8f:f2:63:ce:6a:b6:ac:90:e0:24:31:70:0a:73:
         d2:2e:1b:27:d0:96:6d:1b:a1:fe:9a:89:b3:9d:62:87:ff:28:
         39:e9:fc:c7:a7:11:55:56:98:c9:9f:5b:96:87:fa:5c:95:de:
         e3:34:25:67:64:72:58:bd:6f:74:7a:be:71:c1:1a:e0:f4:e7:
         cd:77:c9:69:33:95:f6:2a:2e:c8:49:25:67:a3:52:2c:94:e7:
         c5:43:7c:ac:13:6b:b9:0d:64:31:e3:68:e1:40:15:52:77:54:
         59:95:f1:e2:7f:58:02:b8:ac:42:08:e4:8a:b3:ca:63:2a:d6:
         b2:1c:bd:4f:da:f2:dc:c3:92:10:5b:c3:e0:4a:f5:70:1c:54:
         5b:3c:ba:0f:68:6b:c7:77:89:9f:af:f5:bd:1c:88:cb:2f:11:
         74:5e:9d:3f:4b:03:4f:e4:65:b2:ea:52:87:d3:d6:8d:f9:cf:
         95:ae:e3:61:a9:d8:b7:de:80:b0:26:b1:c1:10:22:7b:6c:ab:
         fd:ac:dc:76:56:ce:5e:9a:9f:47:f6:1a:32:de:f4:b6:20:f0:
         22:2d:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:53:26 2026 by rpki-client