Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File:                     1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier:          Dwv5/oDkttsMkJ3UszBKfzS551ExFw1ENf0QxLGWID8=
Subject key identifier:   20:E6:C6:7B:28:6E:1D:F7:BE:10:C8:2A:6E:66:91:B0:5D:73:67:D2
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number:          80
Signing time:             Fri 17 Jul 2026 09:01:14 +0000
Manifest this update:     Fri 17 Jul 2026 09:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 09:01:13 +0000
Files and hashes:         1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: RMUPtsVvHcnkuTF+xL1+S77+zv5MhYVN8BBGgHernD8=)
                          2: 2B7DA728397E11F19603F3529B833773.roa (hash: 6jcLP2Ff5kNHQzJq73ID1QGceVd0PGeFk+UxM9roUcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Jul 17 09:01:13 2026 GMT
            Not After : Jul 24 09:01:13 2026 GMT
        Subject: CN=6a59ef5a-0de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:8e:02:eb:9d:10:c2:eb:c5:e4:a2:c9:d5:
                    c8:f3:58:b8:52:de:3f:19:87:c0:d0:f7:3a:a9:fa:
                    c0:34:17:8d:8a:6b:ec:9d:08:67:07:4f:fa:44:5b:
                    c1:da:e3:e4:d0:4c:c2:12:b3:5f:3c:b9:1e:99:c0:
                    a6:f7:46:94:7f:17:cb:d0:7c:19:67:f6:d4:ae:e0:
                    34:cb:e1:9d:36:17:d4:08:6b:ea:45:48:5c:47:d1:
                    2b:92:d9:c7:68:dd:d3:90:3e:b3:bd:a8:c1:28:68:
                    a0:49:c0:08:05:a1:a6:33:05:8f:bb:b5:58:2d:b7:
                    67:d8:37:05:1a:13:9d:af:f3:06:f8:ff:1a:e4:2e:
                    bf:80:a4:97:34:cb:45:96:8c:34:f2:03:f7:b1:33:
                    6e:42:e0:e1:fb:35:bc:f5:f4:58:0e:70:c0:fc:f1:
                    47:64:ea:f8:23:c0:77:d0:55:ce:66:ae:f2:4b:e8:
                    de:bb:2f:2e:8d:db:8a:71:17:ba:e8:7c:93:0f:fb:
                    19:1b:87:12:f2:33:0f:57:19:17:56:b7:5f:f0:55:
                    b1:25:b7:9e:46:58:c7:44:f3:c5:5d:87:17:8f:ec:
                    75:d1:0c:03:d9:80:ea:7a:36:9a:74:9b:b3:fd:ec:
                    57:e1:2e:01:6a:f1:31:cb:54:7b:54:f1:7e:fe:10:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E6:C6:7B:28:6E:1D:F7:BE:10:C8:2A:6E:66:91:B0:5D:73:67:D2
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:0e:fb:01:97:ca:c8:0c:55:cd:e8:2c:fa:e9:14:b8:87:
         29:96:1e:40:d0:bf:af:37:44:72:36:7e:8a:29:cc:03:76:b6:
         74:14:4b:9a:7f:ad:3f:7f:64:5f:d3:d1:f3:7b:b5:83:84:23:
         68:c3:c4:a2:00:7f:1a:11:d0:47:73:00:2d:1c:4b:3b:c1:83:
         e5:84:af:ca:e6:70:4c:5c:b1:7f:53:c7:3c:f1:ba:2c:f9:2c:
         67:26:ac:4f:e9:65:0d:7e:ba:d6:a4:5b:d8:f6:6a:67:19:aa:
         b0:c8:88:51:06:8a:a4:ca:81:26:4d:9c:8d:b7:44:6b:80:97:
         3f:1c:af:e0:bf:05:0a:8e:21:fc:d9:f5:0f:33:52:dd:5a:4b:
         6e:bb:f0:12:e3:5b:44:1f:25:df:f4:f4:6a:ab:46:4e:36:98:
         57:48:fa:90:c5:50:4e:45:04:6e:f0:5d:8a:4d:38:c1:23:cc:
         40:3c:1f:39:81:4f:e3:7a:33:84:eb:1b:0d:18:69:b5:4b:9e:
         7c:f2:82:ae:35:d1:7e:11:2a:da:1d:77:f7:a8:42:77:c9:d9:
         e7:98:93:48:d2:df:a2:d1:f7:00:19:7a:fd:77:c0:62:d8:ea:
         39:37:2c:80:28:55:8c:b1:6d:f0:d2:ff:db:6f:76:7b:74:cf:
         7d:12:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:27:02 2026 by rpki-client