Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          k8/N2fw+u22YVkdcbwIBm2c4RidNK2kEiDxCa+Z5tnM=
Subject key identifier:   9E:69:D0:AB:B0:EA:82:69:D3:BE:E5:2C:C8:80:4A:A6:A1:2C:4C:BF
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          72
Signing time:             Sat 25 Jul 2026 09:49:37 +0000
Manifest this update:     Sat 25 Jul 2026 09:49:36 +0000
Manifest next update:     Sat 01 Aug 2026 09:49:36 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: +z6E+U4P5jY0DP0fWE4a9N+fqZEsq3B/OX1Pvh1LNCU=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 09:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Jul 25 09:49:36 2026 GMT
            Not After : Aug  1 09:49:36 2026 GMT
        Subject: CN=6a6486b1-6ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:d1:5e:3e:eb:a5:9e:19:81:88:32:33:13:
                    82:0f:ec:d9:75:f8:6f:9c:db:28:2d:41:52:a0:fe:
                    91:8a:e8:43:a9:d4:c2:2d:9a:30:5a:79:b3:39:28:
                    b9:9a:6d:87:0c:7b:48:86:a4:6b:f7:ce:84:2a:80:
                    21:98:66:c6:fa:7a:f7:0c:fa:ef:bc:1c:dc:f8:05:
                    dd:f5:89:ab:41:19:18:89:24:5d:e1:e3:47:b4:ed:
                    ea:3e:56:07:97:bd:53:dc:9f:4c:4d:1d:25:95:d7:
                    29:f5:dd:f1:6c:0f:ea:41:17:42:d4:7c:a8:60:4f:
                    4b:c8:1f:79:07:55:4c:8d:7a:13:1b:4a:08:26:13:
                    0e:bd:c7:a6:08:01:f6:46:fd:0f:04:1c:71:5c:e8:
                    b0:06:4c:05:a8:1a:92:68:8a:de:d4:aa:fb:fe:79:
                    be:8e:47:4d:f5:b9:6b:0f:72:0d:8c:07:69:6c:47:
                    c0:a1:b4:86:d3:1d:3e:e8:93:87:fd:05:9e:e7:c4:
                    6a:ed:17:55:ed:cb:2c:63:82:b4:bc:2f:d8:40:16:
                    6f:09:8a:1c:eb:5d:e6:ce:fe:da:2f:40:5f:69:e8:
                    56:db:73:30:22:a8:c6:8f:69:cc:a5:42:b1:de:d1:
                    57:7b:27:95:a6:b5:1d:05:d3:fc:d8:91:4c:8e:01:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:69:D0:AB:B0:EA:82:69:D3:BE:E5:2C:C8:80:4A:A6:A1:2C:4C:BF
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:52:d0:c6:87:88:d7:b2:0b:82:ec:7e:8b:68:59:74:7d:f7:
         2a:5b:2e:b5:a3:73:79:48:ff:cf:a4:94:3c:1a:61:38:e0:ed:
         e2:74:c8:6b:c2:43:0c:92:20:a7:1b:ca:aa:76:37:4c:bd:7f:
         59:de:d3:f2:18:7b:bf:8f:bf:86:ac:81:d0:c1:ea:f1:9d:64:
         25:0b:b8:0d:50:d7:1d:b9:01:4b:d2:42:92:ea:a5:f9:6d:19:
         41:07:06:f9:95:65:be:26:b6:31:50:1a:6a:3f:07:04:e3:d2:
         3b:5d:5c:8d:d7:93:93:d8:92:34:42:17:fd:12:d7:8e:c5:f1:
         32:4b:90:d1:ab:c9:ce:63:a3:cd:3a:cd:f4:4b:d4:2b:7a:f0:
         ce:1f:72:ad:ad:53:a3:ea:aa:61:4c:bd:2b:96:10:56:90:4c:
         a7:78:a5:2f:08:5c:6a:8d:53:03:6e:0f:2a:33:ca:47:b7:a1:
         a5:10:88:bc:f1:07:8b:7a:11:94:fa:eb:1c:37:2e:35:e8:a0:
         5a:e7:07:fd:0b:59:8e:2e:0d:7a:d2:b0:f4:0d:90:67:84:84:
         ff:5f:cb:83:8e:96:05:9a:90:09:85:df:05:cb:13:00:51:a3:
         5e:26:b2:da:4e:08:7a:01:42:43:7b:92:3d:92:a2:6f:e1:0b:
         93:05:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:03 2026 by rpki-client