Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File:                     F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier:          2SY07deZu7KYWeWL2QepBiQUaGcGd01dYK8rFFKCBZ8=
Subject key identifier:   8E:8F:A0:68:F2:E9:8A:48:44:E0:1B:62:3B:EF:A5:E6:F6:9A:A7:50
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer:       /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number:          0311
Signing time:             Tue 21 Jul 2026 02:12:33 +0000
Manifest this update:     Tue 21 Jul 2026 02:12:33 +0000
Manifest next update:     Tue 28 Jul 2026 02:12:33 +0000
Files and hashes:         1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: oDX43wUaz6vu/R2ZH3S4VF5c1ikY1iFgOBez3USAqXU=)
                          2: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=)
                          3: 1030CBF02BE911F1BE5DE9B7C4833773.roa (hash: EpKA0Qcr8+YCVzQw+n1+P9eI1+6tzWoY6uRcXseyDfg=)
                          4: F6CCABBA580311F18246AAE39B833773.roa (hash: Sy10tfcnlP/icaTyyPCajx/jJSM+JdeLmpgnQckiwew=)
                          5: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=)
                          6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=)
                          7: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
        Validity
            Not Before: Jul 21 02:12:33 2026 GMT
            Not After : Jul 28 02:12:33 2026 GMT
        Subject: CN=6a5ed591-6874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:28:96:86:8c:6e:dc:b2:a8:1a:a6:4c:14:
                    97:ca:8d:3f:c9:ee:aa:04:a7:b6:c4:af:75:24:eb:
                    bb:71:86:47:ce:9d:32:63:50:b6:be:51:b2:03:9b:
                    de:c8:bc:ed:de:b9:fb:98:56:76:8d:e3:1a:1b:a3:
                    fe:5c:4f:b8:cd:5f:0d:2d:9c:ed:b0:06:5e:fd:0e:
                    cd:f0:78:58:0c:6b:7b:3e:99:4f:4e:d3:21:4c:47:
                    c8:6a:bf:60:71:1e:f6:b9:23:5d:99:b1:5a:15:29:
                    10:6e:ff:fc:1c:36:c5:72:a7:f8:e3:e8:56:9e:3d:
                    db:be:78:09:a1:02:94:76:15:b3:61:8a:03:24:7e:
                    79:f0:8a:e2:40:20:9b:2c:6f:a8:9b:86:e4:0e:57:
                    68:3a:4a:9d:f7:4b:44:f8:1b:86:18:b5:24:ea:b4:
                    2a:e3:27:c6:fb:ba:1e:d5:7f:2b:45:74:84:c9:0f:
                    85:e8:c9:e2:21:32:43:4e:d3:da:c6:b8:a3:36:d5:
                    8d:16:bd:e4:87:0a:d0:94:d1:3d:9c:fa:5e:84:1b:
                    20:df:fd:16:bd:93:0f:13:d8:57:1c:96:99:9b:28:
                    02:ec:64:c4:39:ab:9c:02:cc:2b:8b:0b:c8:95:fe:
                    53:32:0d:ba:76:cb:89:d7:ad:bd:d5:7f:28:09:51:
                    4e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:A0:68:F2:E9:8A:48:44:E0:1B:62:3B:EF:A5:E6:F6:9A:A7:50
            X509v3 Authority Key Identifier:
                keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:60:bc:dc:ac:ee:9c:1e:69:10:4a:3f:11:80:f9:d5:ac:d2:
         ce:0f:09:11:1d:c1:6b:8c:95:9e:36:ff:c3:cf:f4:57:86:a2:
         ac:f4:bf:97:0e:2d:60:cd:5d:29:71:04:47:2a:3a:6f:ee:db:
         35:2d:b9:6c:c4:59:01:fa:f0:68:34:d7:83:47:3c:2b:fe:eb:
         78:53:7b:4b:15:bb:ea:87:97:41:39:9d:dc:7a:24:84:03:95:
         3b:30:a4:b4:d2:a8:10:36:30:4f:f6:81:8c:07:b9:10:fb:e3:
         be:0a:66:3a:75:62:13:ff:2d:6a:7a:9c:80:46:60:9e:fb:fb:
         a1:57:a0:64:1c:05:8e:9a:02:7d:b6:65:ba:48:7a:6b:3c:6a:
         05:ce:95:5e:a9:29:83:a3:cb:ee:55:91:2c:66:64:4c:9b:f8:
         b2:44:7c:2f:02:47:8b:1c:00:fc:d7:19:16:af:b4:65:4c:fd:
         bc:33:02:fd:7d:8b:bd:9d:df:bb:a5:30:03:18:00:98:d9:02:
         b4:37:16:cc:71:f0:8b:ca:08:ee:8b:09:ff:f6:7d:1d:d6:0e:
         04:29:eb:2a:a7:bc:23:19:7f:b0:1d:19:6d:f2:87:5b:90:94:
         49:24:50:fd:b9:a0:57:2d:e2:30:0b:b0:50:74:6d:90:b3:15:
         98:bd:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:41:49 2026 by rpki-client