Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File:                     -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier:          4YipBOVe7tZQPvnyerPzoFKk99Qluu1e+LbPDDyH/7k=
Subject key identifier:   6D:F9:EE:3C:C6:14:3C:4F:FC:1E:4C:77:F8:C0:AD:30:31:5E:51:8D
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer:       /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number:          92
Signing time:             Fri 21 Aug 2026 07:33:11 +0000
Manifest this update:     Fri 21 Aug 2026 07:33:11 +0000
Manifest next update:     Fri 28 Aug 2026 07:33:11 +0000
Files and hashes:         1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: Ab23isDCjS5qOaogtz/PyWfNwzj1QAtlvEAwNL2JnFk=)
                          2: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: ld7P2PELFqfVNXiU+jG2B0uLi23klkJ5bfoslPWrnms=)
                          3: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: 2k7Wq4CHpU8Bw8EpqXkLKI+dAtlRsC/snU2j4T/Ufjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
                          rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
        Validity
            Not Before: Aug 21 07:33:11 2026 GMT
            Not After : Aug 28 07:33:11 2026 GMT
        Subject: CN=6a87ff37-fe1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:2d:38:03:35:bd:c0:6d:a9:b6:4c:ce:71:
                    91:52:e9:63:4a:30:f6:de:af:ef:eb:b1:a7:e6:1b:
                    26:77:aa:1c:ea:a5:b8:88:64:f2:dc:45:43:1c:20:
                    40:07:18:41:de:12:20:9e:32:ac:fc:62:c8:65:31:
                    e8:b7:b6:04:c9:c8:f5:ba:e4:c7:a3:fe:d4:c5:cf:
                    c0:88:5c:33:69:18:da:47:38:40:8e:c2:1b:a6:c8:
                    be:43:fc:da:f1:17:fe:9d:4b:4a:08:a4:9f:0f:2d:
                    9a:db:ad:a2:eb:1b:c8:e0:aa:da:4b:e2:c7:ef:e4:
                    21:13:bd:f7:8f:09:ee:a5:9b:03:14:a6:3d:1d:62:
                    e6:5b:56:88:63:bd:bb:d2:75:76:fe:a8:2f:02:7b:
                    80:99:0a:2e:f7:ba:a0:9c:2c:87:aa:40:42:6a:cb:
                    f1:8b:70:32:d5:89:e2:f5:cd:54:41:75:81:8d:17:
                    ef:dc:9e:43:e6:d2:54:43:62:96:ce:79:1a:a0:99:
                    47:c9:2c:46:98:1f:0d:62:fa:6c:5d:6b:8b:5c:5c:
                    43:0e:30:74:e8:f9:c4:ea:ae:11:ef:f6:95:45:a3:
                    82:1d:f2:fc:57:25:61:b3:8f:ca:48:14:df:72:e9:
                    57:9e:2d:8c:cf:73:d6:cd:a8:11:fb:01:e9:31:57:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:EE:3C:C6:14:3C:4F:FC:1E:4C:77:F8:C0:AD:30:31:5E:51:8D
            X509v3 Authority Key Identifier:
                keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:92:68:92:ae:b6:40:72:f1:3a:31:92:7e:4c:9b:5b:b2:04:
         9d:3e:7e:8b:03:ce:55:2f:81:ec:76:1d:4b:a8:c4:e5:c5:cb:
         78:b0:ca:23:97:8b:ed:11:ab:b8:ce:9a:04:39:24:2f:24:47:
         28:ff:64:01:91:9f:2a:77:ab:f4:c7:1b:d3:43:fb:95:41:c7:
         0a:38:57:ae:ad:da:08:e5:fd:aa:f5:09:6c:6f:76:6c:d9:c2:
         31:52:23:a0:81:c3:d1:fc:de:fa:ec:63:37:6b:15:1b:d4:fc:
         ff:f4:07:17:8d:66:d6:d2:b3:bb:b7:e4:f9:16:04:f5:71:da:
         0d:13:40:ee:7f:5b:3a:b4:fe:ca:20:5a:fa:3a:f2:fe:48:58:
         d2:a2:89:08:87:a2:97:0c:28:c6:f4:84:69:bb:92:a7:f7:a2:
         27:b7:47:15:80:3f:15:2b:88:b5:5f:b4:d0:89:54:55:70:29:
         7a:b6:e3:21:b6:83:b7:11:03:d5:3d:53:8e:26:5e:81:6c:f5:
         11:50:43:a0:91:f7:00:c9:c3:a8:38:39:65:9c:d0:e0:e5:62:
         4f:dd:9f:7f:c2:7e:7e:90:77:ef:7f:11:22:95:0c:4b:f3:99:
         0f:e9:9a:c3:35:1b:c3:05:6c:b0:9c:5d:b8:61:4d:30:a9:5b:
         aa:f8:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:02 2026 by rpki-client