Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File:                     cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier:          U0pt0SZ3ibZt3mXqfB7V74gbweCQl2Dul9hruB6IBCs=
Subject key identifier:   19:91:10:D4:59:AD:61:B6:B8:13:CB:C8:C6:B2:BC:D4:0D:FB:06:90
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer:       /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number:          4F
Signing time:             Thu 13 Aug 2026 06:33:15 +0000
Manifest this update:     Thu 13 Aug 2026 06:33:14 +0000
Manifest next update:     Thu 20 Aug 2026 06:33:14 +0000
Files and hashes:         1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: 3VRTRexIImkYbwbedZDi4w9VveQ/OsCUFPN8QQR5JOY=)
                          2: 8Tg_ZSb-Viei1OQ529_uiTOZ0aM.asa (hash: nINaH8TXBJUn7znOvUaYM7JswX00LEbegro4mFGLb3o=)
                          3: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
                          rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
        Validity
            Not Before: Aug 13 06:33:14 2026 GMT
            Not After : Aug 20 06:33:14 2026 GMT
        Subject: CN=6a7d652a-6f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:65:75:66:04:6e:98:20:97:fd:aa:37:f8:
                    dc:2a:3e:9f:5c:3f:2e:f4:2b:83:dc:cc:c8:11:7c:
                    1f:65:0b:3e:3e:1a:41:b3:a9:07:4d:68:f7:df:2b:
                    9d:f2:ac:c7:a1:eb:31:6f:f0:51:9d:68:8c:fb:08:
                    cb:ff:36:b4:08:51:62:57:0b:b3:5b:e0:be:84:5b:
                    c8:8f:22:c9:24:dc:0a:16:0b:e4:c0:6d:4c:9d:7c:
                    76:90:d7:f7:f5:a3:9f:68:ea:5d:28:fe:3a:51:6a:
                    32:09:b2:ee:7e:94:d2:b0:b5:0d:cf:c6:85:50:ba:
                    6e:4e:2b:b2:44:a1:d9:ff:c0:ff:88:e8:b7:d4:f0:
                    64:06:ea:f3:0a:a2:f9:2f:6e:28:e2:7f:90:f0:30:
                    2a:f3:71:ad:94:41:38:e0:1a:18:74:4c:11:16:82:
                    83:fa:ae:77:6b:97:0d:dc:9e:f5:25:b8:65:92:34:
                    c7:0c:3f:bd:89:72:a7:22:1d:c0:99:a5:2b:71:e9:
                    2f:3f:a2:51:37:23:bd:f5:63:a0:8c:96:76:82:64:
                    cb:83:f4:f6:dc:a9:6f:13:c2:8c:b4:24:e9:2f:52:
                    52:ae:43:3f:71:c7:d9:b3:66:99:1f:50:eb:e0:f5:
                    f2:06:e9:e4:bf:f6:7e:92:5e:1b:c8:09:2e:e5:49:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:10:D4:59:AD:61:B6:B8:13:CB:C8:C6:B2:BC:D4:0D:FB:06:90
            X509v3 Authority Key Identifier:
                keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:c0:e9:76:5f:64:8e:ba:27:cc:34:be:c4:00:aa:3b:36:
         8a:39:97:5c:02:ef:fe:9c:fc:3a:fb:a7:60:c6:ce:25:9f:08:
         47:10:30:ad:ae:38:87:fe:66:da:92:31:18:5f:6f:b3:75:a7:
         db:02:ff:9b:ac:b8:c8:44:d7:28:05:cf:75:9b:0e:dc:a0:02:
         df:ed:c8:b0:0b:0a:3f:b9:58:2b:fc:45:58:8b:6e:ce:9d:72:
         dc:ce:cb:fa:9f:c3:83:d1:a8:f8:53:08:bc:27:3f:68:71:46:
         cb:d0:77:cf:9b:4f:74:57:c1:35:23:95:d6:28:fa:51:df:42:
         43:4f:cc:f8:69:69:bb:a5:7d:63:42:2d:94:03:27:67:e4:ea:
         12:74:8e:18:6c:c2:a2:4b:99:bc:b3:3c:56:45:91:e0:05:fa:
         7b:f0:d4:2c:5b:71:92:4d:63:c2:d9:0d:fb:f9:ea:11:6b:dd:
         71:1f:c1:65:24:f4:ae:4d:dd:4a:cb:f1:98:fa:57:0e:21:23:
         72:8b:8e:ea:f5:b3:4c:21:46:a0:03:7e:9d:5c:b9:5a:4f:10:
         1e:3a:28:6a:d7:80:af:86:94:a1:79:3e:71:93:c0:94:1a:18:
         3f:b8:5f:6c:5a:45:d4:99:26:29:c6:fe:02:d7:48:9c:0f:5b:
         1e:55:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:51 2026 by rpki-client