Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File:                     2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier:          qDz1EtfQJsEX6IyZDzyX4IkPNCcL1FjkP5YIxyA5prc=
Subject key identifier:   EE:52:52:EF:88:E2:D6:E0:A6:B4:AB:28:FD:7B:64:AF:E4:81:0B:B6
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer:       /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number:          031A
Signing time:             Sat 25 Jul 2026 02:10:01 +0000
Manifest this update:     Sat 25 Jul 2026 02:10:01 +0000
Manifest next update:     Sat 01 Aug 2026 02:10:01 +0000
Files and hashes:         1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: PctDuJlYg/1unMlW9nWjNGXc550lhgTAKrzGrJvjM48=)
                          2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: tluEXRfv1yfj6g2yuqwe5cSshlgt2BkkJs3C6pzFBNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
                          rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
        Validity
            Not Before: Jul 25 02:10:01 2026 GMT
            Not After : Aug  1 02:10:01 2026 GMT
        Subject: CN=6a641af9-b4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:76:fd:33:a7:72:f5:57:dd:dc:c2:58:8e:
                    be:9f:6c:d3:c4:d2:8e:a5:47:27:6c:43:a5:a3:4f:
                    b7:ac:0e:3d:d9:de:07:b0:d3:c7:12:1d:e2:77:f0:
                    4d:3c:ae:42:30:3c:aa:ca:7c:78:e5:0f:b2:63:ee:
                    61:d5:77:dd:c0:2d:19:4e:2b:b6:1c:c2:d9:35:cb:
                    58:b0:90:3f:d4:6c:86:8b:55:e4:32:8b:d9:e6:5e:
                    5b:87:c3:a5:9b:f1:51:f5:00:d2:bc:a9:80:c4:73:
                    74:d9:d2:3a:dc:5e:f7:82:94:58:6a:7d:28:18:6e:
                    ff:04:50:10:b2:fa:58:4d:5d:3e:71:4e:0e:cb:1c:
                    c6:15:b0:fb:d2:e7:be:09:00:0b:07:c2:95:40:50:
                    f9:63:f4:8a:41:22:e8:7a:95:25:b2:2d:fa:23:41:
                    f8:14:88:ec:af:7d:2f:5a:aa:72:96:cc:13:a8:05:
                    7a:6d:1d:43:94:86:c1:92:17:b0:45:66:00:aa:50:
                    1d:89:8b:90:37:b4:b2:fa:8a:9f:76:3a:6a:71:74:
                    0a:0b:4b:47:aa:04:68:67:79:05:a8:69:ae:9a:5a:
                    ab:f7:68:e6:c0:ff:62:30:8c:0f:85:76:a6:29:8b:
                    ba:03:e3:6b:dc:ae:29:b6:e5:39:17:02:e4:09:0a:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:52:EF:88:E2:D6:E0:A6:B4:AB:28:FD:7B:64:AF:E4:81:0B:B6
            X509v3 Authority Key Identifier:
                keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:90:13:a5:7d:74:bb:1a:5c:c2:84:f5:be:f2:97:5f:17:1e:
         1e:a8:be:48:5c:66:10:dc:b2:f9:5e:0a:ab:83:0f:15:16:20:
         d7:d8:4e:97:6a:34:c2:08:71:8d:41:a0:b5:a4:21:8b:09:74:
         fe:c6:11:77:4a:07:57:12:3d:c0:7d:a5:4a:23:dc:13:80:d2:
         d3:41:90:1b:dd:98:1c:b8:8b:52:ec:d2:cf:cb:17:32:e4:86:
         80:07:b6:83:d4:d9:28:b4:d6:4e:70:27:6e:9c:e8:2a:86:ad:
         1b:20:70:89:75:00:38:9b:ca:67:b3:8a:20:fc:be:15:83:68:
         f9:c2:d4:93:fa:a2:e7:8e:f3:cd:06:4c:6e:76:69:83:4b:9f:
         87:a0:70:bf:11:a2:ff:d8:ae:27:37:38:7d:c6:eb:8d:96:b6:
         e7:3a:63:18:71:0d:99:49:80:b8:cf:01:dd:44:fe:da:77:43:
         ce:c6:9e:ef:f2:14:c9:1c:b8:b7:08:e9:89:1a:b7:ca:b5:72:
         ce:6f:c0:1a:c8:79:99:d8:d0:32:2f:34:af:d0:9c:ff:12:31:
         c2:c5:36:c3:31:24:d1:71:e7:21:1d:89:2f:77:78:b1:81:aa:
         dc:aa:9a:5a:41:aa:60:44:7d:41:91:a4:f7:ba:37:ad:7c:96:
         2d:92:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:58 2026 by rpki-client