Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File:                     b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier:          QVCxqt4OSQEvWzv98HC7FSA156J9eYuNyJnXReDqrd8=
Subject key identifier:   A2:27:5C:70:A2:28:19:20:84:6B:4B:15:4D:EC:8C:CC:A6:50:68:16
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number:          020D
Signing time:             Tue 21 Jul 2026 04:20:29 +0000
Manifest this update:     Tue 21 Jul 2026 04:20:29 +0000
Manifest next update:     Tue 28 Jul 2026 04:20:29 +0000
Files and hashes:         1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: MeMKJCemGxhkpIIDbZOCbvUlwyMM7yT5QNSMG48sqYw=)
                          2: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
                          3: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Jul 21 04:20:29 2026 GMT
            Not After : Jul 28 04:20:29 2026 GMT
        Subject: CN=6a5ef38d-f217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a9:6d:fc:bb:70:df:b5:f6:7a:2b:1e:a7:eb:
                    74:12:07:bd:04:04:31:09:a5:1f:8b:28:72:6e:d5:
                    2a:a3:6d:cd:e4:9c:61:36:19:06:f9:67:00:09:d8:
                    41:21:c6:31:70:f6:30:81:8f:ce:ad:d6:87:c0:3a:
                    2a:85:74:2b:83:7e:17:d6:c2:55:de:7f:a6:fc:cc:
                    61:84:b3:7a:ed:c7:1d:4f:0d:03:b0:94:d8:45:c9:
                    d1:12:bd:91:48:d8:d6:81:3b:25:2b:98:0d:c9:1a:
                    30:7d:6d:27:72:ef:b1:81:e9:d1:5e:de:4f:31:91:
                    20:72:52:e4:7f:77:b4:82:33:40:a9:60:08:49:b0:
                    a0:a4:8c:79:de:41:39:8c:b0:0f:c5:4c:6b:6e:90:
                    b7:d9:70:b4:f2:2c:ce:11:4c:ba:e6:3d:80:f2:16:
                    ff:bb:b3:d0:16:eb:41:a3:2b:78:69:e0:4e:58:aa:
                    37:c0:cd:ce:a9:97:11:ec:9b:39:c0:38:61:29:c4:
                    e0:e2:1a:e9:6e:50:07:93:1f:34:84:2d:df:fc:4f:
                    61:44:bb:a0:90:4d:7e:ff:31:2a:b1:f7:43:43:33:
                    5c:be:f0:ca:10:2f:e7:eb:56:ba:db:a6:7a:b9:56:
                    84:d6:e3:72:d7:1f:9f:08:1b:e4:71:23:f0:50:b4:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:5C:70:A2:28:19:20:84:6B:4B:15:4D:EC:8C:CC:A6:50:68:16
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:8c:2f:fe:d1:32:e1:96:18:17:79:66:73:93:38:32:94:
         0f:d9:ef:91:4f:c3:f9:9a:8a:6a:a8:e1:6c:ce:09:35:d1:57:
         7d:35:2d:e5:62:b6:41:82:15:2e:20:78:b6:5f:13:aa:e6:3e:
         38:c0:78:d5:f5:88:59:ce:ed:06:d0:ef:1d:0d:d4:dd:d4:11:
         82:c2:c0:4d:0b:3f:23:f9:22:ac:e1:bf:c8:1e:eb:70:db:ec:
         32:c1:f2:df:c5:26:6c:2f:21:31:2a:a2:5a:21:5f:e6:63:83:
         4c:a2:a9:bf:41:25:b8:03:d1:b0:c9:40:89:bf:4b:67:33:49:
         dc:6c:c1:dd:b1:78:38:a3:61:a0:6c:ce:6b:38:9c:4a:0f:08:
         29:63:42:93:8a:4e:3b:e8:a5:4f:5f:30:cd:1b:b7:18:22:ba:
         e9:e5:b7:e8:36:84:07:87:d9:2b:5e:29:ac:f6:6e:92:d7:eb:
         0e:10:6a:75:50:48:b1:83:ca:41:77:16:82:05:b1:b8:06:a1:
         cb:b4:36:50:a9:e5:22:67:3e:b4:4a:4b:7e:95:80:a8:6c:88:
         6d:e0:04:8d:2c:e5:4a:93:bf:40:bc:dc:b8:85:21:df:51:b9:
         86:2f:a1:f6:8c:72:80:ae:23:7f:2d:d1:3a:84:45:26:54:2b:
         11:73:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:55 2026 by rpki-client