Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
File:                     ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json)
Hash identifier:          U9ZIsV+tbW55ACBk+1jSRwdNvWzUzlK1eB01A5eoRxg=
Subject key identifier:   99:70:E4:9D:59:FD:7B:FD:11:6D:49:9D:08:37:E2:DF:B4:3C:9F:FA
Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
Certificate issuer:       /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
Manifest number:          010B
Signing time:             Mon 27 Jul 2026 08:20:23 +0000
Manifest this update:     Mon 27 Jul 2026 08:20:22 +0000
Manifest next update:     Mon 03 Aug 2026 08:20:22 +0000
Files and hashes:         1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: vIUl5xVtT00GSceYJd0bDU4Bn8SWhkxJz3MdSXFUGEw=)
                          2: 794B993A4DCC11F1A3B35A8FB3833773.roa (hash: EXcXAWkPRKy2b0v846Dwu0vaIsA4gr6bY0tTEvdv/RI=)
                          3: B3849A9A359311F09B54926FC4F9AE02.roa (hash: 5TjucLw3rqG1PVaTMa1TZO4hKoccTXSUW0WPJZfPVSg=)
                          4: 5448D8AC4DCA11F18462840CB2833773.roa (hash: j8iatOZvVQg41rHjPtQGn8/eNVWR8JQ4DuhiAOfavec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
        Validity
            Not Before: Jul 27 08:20:22 2026 GMT
            Not After : Aug  3 08:20:22 2026 GMT
        Subject: CN=6a6714c7-2fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:2c:74:98:a6:70:56:5e:d9:59:6b:cf:66:
                    c3:10:51:ae:68:ed:59:3f:64:ed:48:f9:69:69:2b:
                    29:f0:44:c1:d5:03:4f:22:34:19:d4:33:12:0f:ea:
                    7b:e7:f3:29:54:12:9a:31:6c:09:0d:a4:ab:f0:7a:
                    56:24:5a:09:5d:2a:dd:36:31:f7:89:af:7c:a4:ef:
                    01:bc:c3:5c:33:09:85:a9:1f:b2:1a:f3:2a:0a:3a:
                    cf:e6:03:9f:9f:d2:09:db:ff:3a:b0:9c:d6:32:b4:
                    af:8b:16:61:f8:cb:ea:11:99:16:83:a2:57:f4:77:
                    d4:14:bd:23:05:c8:84:9d:1e:5b:5e:b9:41:6a:2e:
                    c3:38:b7:f6:b8:34:0d:9f:a6:73:9c:d7:3a:33:50:
                    90:47:fa:83:d7:a8:56:2b:2a:04:9c:ee:2d:32:7c:
                    f3:1e:42:72:89:20:c2:0b:cc:d3:ea:89:3b:4f:f8:
                    c8:de:af:c5:50:f8:bd:dc:13:d4:97:d3:93:d7:25:
                    b9:c3:08:db:9f:ac:ff:1b:3e:0e:21:1f:ad:e3:ee:
                    81:74:63:f5:02:3d:6d:6a:39:6c:c6:64:6f:61:be:
                    0f:2c:b5:30:8a:92:88:cb:61:83:11:b9:cb:eb:9d:
                    4f:a5:28:41:03:a7:b4:da:31:55:d9:13:9f:61:2f:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:E4:9D:59:FD:7B:FD:11:6D:49:9D:08:37:E2:DF:B4:3C:9F:FA
            X509v3 Authority Key Identifier:
                keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:16:96:45:ef:a8:dd:57:6c:4a:6c:2f:0b:6f:25:cc:20:04:
         84:6a:37:c3:a4:3f:ea:6d:40:d9:be:72:a4:ad:54:cb:d2:bb:
         a9:79:10:45:9e:f9:25:e3:34:4f:c0:4d:bd:07:48:83:16:9c:
         d0:8d:97:66:c2:48:31:9e:81:0b:42:44:ca:28:7d:bf:bd:44:
         29:a8:9e:e2:c9:49:1c:21:ee:b2:a2:47:03:4f:d2:ac:42:61:
         15:a9:32:d7:d5:d2:95:74:f5:c3:15:2a:fe:95:7d:bf:45:41:
         35:49:ec:3a:ce:4a:7f:cb:d5:00:8b:24:66:a3:3a:95:f7:21:
         27:e8:0c:d1:d8:35:ae:73:13:52:80:47:2e:9b:1c:fc:8b:57:
         f2:f9:46:26:18:d0:bc:3b:59:c5:13:bb:7b:0d:1e:94:97:81:
         e9:d4:8b:7c:f5:64:1b:c0:11:41:f3:da:48:2c:0d:e8:d7:fc:
         ad:77:91:6f:bd:35:33:ef:cb:43:80:f4:77:d2:d5:d1:5d:de:
         44:a2:5e:a5:dd:bb:5d:2b:98:ce:b3:40:64:8e:57:44:71:93:
         d8:03:5d:2f:4c:e7:01:82:d5:4c:32:2b:cd:b9:61:9a:54:72:
         9c:f8:cd:c4:cc:33:5e:aa:90:63:00:f2:ff:ff:7f:57:81:f4:
         56:fa:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:44:58 2026 by rpki-client