Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
File:                     B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json)
Hash identifier:          qwgq3ZA3R9kYEYHy6HqYwEaV3jDua++usBh57FZJF1M=
Subject key identifier:   AD:61:41:C5:9A:32:68:4E:92:53:89:F3:01:8D:CB:B4:5B:76:28:F8
Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
Certificate issuer:       /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
Manifest number:          76
Signing time:             Tue 29 Sep 2026 08:29:09 +0000
Manifest this update:     Tue 29 Sep 2026 08:29:09 +0000
Manifest next update:     Tue 06 Oct 2026 08:29:09 +0000
Files and hashes:         1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: sSkjs4wbZZEeDnDmG0zYm6O0ZcW9YrDH08x79KWNN+Y=)
                          2: 964C388611F511F1B1F03794113D8C67.roa (hash: EHxSKIPAmgyHn407GlIwgWXCJmbJB61yUKXqSCmx8P4=)
                          3: vZjdemcnGfidDt1ovMHVBLKohwY.asa (hash: UP7kXfE9aWUx6k2nLjEi0q4eGM9U97+vXv5hvbv8PmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
                          rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
        Validity
            Not Before: Sep 29 08:29:09 2026 GMT
            Not After : Oct  6 08:29:09 2026 GMT
        Subject: CN=6abb76d5-d1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:8e:53:e8:1e:74:4d:49:cb:f5:c1:de:0f:
                    64:b7:cd:9b:01:d1:4b:a7:aa:0d:79:ee:e5:8f:b7:
                    76:35:02:4d:75:5d:78:98:e3:15:71:16:e0:30:36:
                    b8:4c:8c:00:38:5f:cf:60:24:d0:8f:02:da:c0:8b:
                    61:ba:43:c4:af:79:74:5c:57:db:13:e0:1b:4a:62:
                    00:0f:42:ac:20:ab:d5:ec:bd:28:8a:65:8e:3b:b3:
                    9f:4f:97:d5:9d:70:47:fa:b7:9d:b3:6f:fd:4b:16:
                    39:44:d0:32:5c:ab:f3:13:8a:27:fa:b9:94:85:5b:
                    df:46:22:6b:32:e9:37:f1:69:55:d5:1c:50:53:a3:
                    ba:ed:ec:2f:6b:55:6f:5d:6c:7a:bd:0a:cd:68:ec:
                    16:2a:21:c4:d0:6a:71:24:43:40:38:fe:33:4a:44:
                    4a:aa:4b:80:90:55:09:ad:6e:bc:c2:bd:0c:29:de:
                    de:b6:01:60:b7:8b:e9:16:86:c4:97:34:df:ef:14:
                    dd:4f:0b:f0:f3:76:c6:63:47:9c:c4:ae:fc:25:c1:
                    0f:70:f3:8a:26:11:83:ed:d5:42:13:9f:f7:01:58:
                    25:f3:a1:4d:62:5f:ab:cd:4d:e1:85:0a:0a:9d:36:
                    78:7a:f1:0f:16:88:18:26:a1:7e:a9:e5:32:c8:e1:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:41:C5:9A:32:68:4E:92:53:89:F3:01:8D:CB:B4:5B:76:28:F8
            X509v3 Authority Key Identifier:
                keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d3:26:d3:f6:07:15:f6:34:b3:d4:82:8b:f7:44:f7:60:ae:
         42:0d:f4:7e:58:19:3e:13:51:54:6b:a1:fd:53:c4:5e:30:98:
         fa:e1:58:be:f3:01:1f:91:9f:f8:63:bc:5a:8f:da:ef:9c:ea:
         40:c7:03:8c:df:8b:93:70:4b:3d:80:fd:ae:e8:52:91:93:da:
         ac:07:30:68:e2:d1:b3:39:9b:99:c3:8a:ff:5f:6d:55:23:e5:
         3b:e4:c9:2c:7b:dc:a9:23:8a:0a:34:2e:d6:d7:76:a8:5f:65:
         89:f5:c4:04:84:53:af:c3:c8:18:2e:77:71:e9:f1:71:eb:dd:
         83:61:e1:67:1c:07:56:b6:c4:b4:c2:a8:d3:ab:4d:bf:1c:7f:
         7d:68:58:c4:b5:b4:15:12:f7:d9:c5:3e:46:3d:6d:de:37:54:
         74:83:38:41:3c:5e:ae:78:8b:1a:19:e2:54:03:ba:51:ca:ca:
         01:50:16:68:d7:17:b0:86:d0:43:a2:eb:22:73:0e:72:b9:a2:
         df:73:c6:26:1a:10:74:85:e4:53:6e:36:69:a1:6d:bb:e3:b4:
         ab:8c:ca:eb:52:be:b2:0f:78:23:aa:bc:94:91:ed:3d:58:5f:
         fb:34:02:35:3f:f9:4e:95:c2:88:29:20:51:64:0d:1e:14:c2:
         86:99:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:12:06 2026 by rpki-client