Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
File:                     apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json)
Hash identifier:          ukyUrUBM4uKi99n/hX0IOiXN3/quTvFSiMkGGkt/ZMo=
Subject key identifier:   C0:AC:94:6D:1B:75:61:E2:98:70:70:40:3A:FA:C9:1E:59:D7:86:A3
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Certificate issuer:       /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
Manifest number:          0502
Signing time:             Tue 21 Jul 2026 00:31:40 +0000
Manifest this update:     Tue 21 Jul 2026 00:31:40 +0000
Manifest next update:     Tue 28 Jul 2026 00:31:40 +0000
Files and hashes:         1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: UuKpUiMrXGwPcM9zMQQESV7r3hVpSGVBG7OMHa6i+vQ=)
                          2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: w4vmk0k0tj0CqVbPYlrB/AsgbCIeobBsis6ku1ih1HE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
                          rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
        Validity
            Not Before: Jul 21 00:31:40 2026 GMT
            Not After : Jul 28 00:31:40 2026 GMT
        Subject: CN=6a5ebdec-cead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:b1:ca:52:2d:c6:93:0e:56:36:3b:9e:99:
                    02:48:2c:96:58:b9:60:6f:c2:43:44:b8:df:ef:42:
                    4d:e0:22:c3:8c:7c:65:15:14:3d:11:59:9b:73:92:
                    a8:9b:47:45:0b:a3:d9:c6:7a:ee:c5:2d:24:3d:23:
                    00:54:2b:df:18:4e:6e:53:78:18:0c:ad:6d:28:c6:
                    01:ae:a1:1b:33:9e:50:cc:67:69:60:e9:45:b8:c9:
                    db:e3:0f:04:ce:22:de:a6:19:dc:27:08:33:ed:58:
                    66:d5:99:59:43:f7:9b:91:72:07:4e:c8:8f:e3:ce:
                    2a:17:8b:14:99:70:76:b8:16:59:2d:ad:57:43:06:
                    bb:03:70:43:d4:89:a6:83:f2:17:05:e2:e3:d2:87:
                    7a:b2:5d:6f:e0:fd:5e:2c:5d:57:e0:84:16:35:81:
                    55:fd:37:d7:12:1a:3c:cc:0b:e0:b1:ea:90:0a:2f:
                    94:65:63:8a:7f:ff:8b:9a:5c:ef:3d:a8:38:a7:ae:
                    8b:26:0c:78:3a:bb:90:bf:44:50:10:59:9d:33:04:
                    13:3e:cc:c3:cc:19:d6:38:61:1c:37:2b:f4:35:d2:
                    f7:ee:82:9a:a4:3f:36:63:79:2d:aa:3c:73:cc:59:
                    24:e6:35:dc:96:e1:bf:f5:6f:91:b6:56:d3:9f:03:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AC:94:6D:1B:75:61:E2:98:70:70:40:3A:FA:C9:1E:59:D7:86:A3
            X509v3 Authority Key Identifier:
                keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ed:24:33:fd:f1:9e:1d:17:bb:5a:e0:6a:56:52:4d:59:bb:
         98:e6:53:c8:a7:ed:cd:e4:41:99:23:a4:b8:90:ab:44:95:20:
         30:8f:70:60:da:6a:ee:d7:19:6e:f1:aa:2a:70:11:eb:6b:71:
         32:f6:2b:21:76:ce:13:71:54:ec:da:e1:73:fc:70:79:8d:12:
         17:c9:9c:d5:1c:c8:28:07:2e:9d:a9:d3:be:3f:54:1e:0a:d1:
         1a:8a:a6:ec:ca:f3:89:bb:ee:95:f6:a8:c9:68:ce:34:fa:6d:
         98:73:5f:f1:0e:df:0b:26:e0:76:6f:a5:b7:ec:b7:a9:54:30:
         f0:97:21:52:b4:46:96:06:7d:7c:1d:f3:4b:47:59:7e:53:e4:
         48:8b:df:1b:a2:ea:0b:67:e6:b3:c5:df:7b:89:e3:b0:5c:10:
         a7:5e:93:fa:9d:4c:87:ce:22:1f:9d:a8:51:84:ab:84:94:63:
         8a:04:7c:22:5c:40:be:e6:a0:6a:33:62:97:c3:43:5b:e0:dc:
         d0:1a:68:f4:64:ee:2f:d2:d3:23:cf:53:f2:31:28:09:a9:b7:
         40:35:20:0c:db:60:b0:ad:d5:ce:b0:9f:05:a6:90:a2:c0:7a:
         7a:7e:8d:34:17:ec:4b:7d:2b:b6:f1:d7:d7:aa:87:19:3e:83:
         02:21:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:45 2026 by rpki-client