Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          0CsMdHncf58iYknLfV5TTQmsUMM5yyAVIp9DE9bFnYU=
Subject key identifier:   47:B7:EC:BF:04:04:17:AB:98:50:BE:3C:75:9A:85:0D:C9:B5:78:98
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0BB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          0AF7
Signing time:             Sun 26 Jul 2026 20:07:35 +0000
Manifest this update:     Sun 26 Jul 2026 20:07:35 +0000
Manifest next update:     Sun 02 Aug 2026 20:07:35 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: pxvZI9m0pr05f0VTzdiZ5begkop/aS90hWWovIoTijI=)
                          2: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: Ux1l+IgfbwyG+tZBBceLnM6t2MUyOqaW+9GorRGnVbc=)
                          3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=)
                          4: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: YlPGKsDv7idOkXKbw0yX7xAS3MzGrLN5MJqNWuwPTSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3000 (0xbb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: Jul 26 20:07:35 2026 GMT
            Not After : Aug  2 20:07:35 2026 GMT
        Subject: CN=6a666907-d035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:32:f8:c5:15:b9:c8:bc:9e:16:30:97:53:
                    64:18:1b:36:9e:f7:d2:02:a7:04:12:04:ed:da:22:
                    5e:16:50:87:dc:dd:f3:fb:11:a0:69:80:c0:b8:1c:
                    78:26:a6:a3:45:66:e9:69:54:f7:80:c5:f3:7c:09:
                    6d:0d:55:22:bc:7f:a6:a1:6a:60:cc:b5:23:fd:67:
                    6b:7d:5e:b6:0d:2a:9e:3e:7a:56:b0:d7:fe:9e:a9:
                    fb:27:9d:95:7b:88:b0:0a:ca:19:a0:5a:12:97:43:
                    63:ac:ef:be:9a:71:fc:be:6c:03:67:c5:c4:92:fb:
                    c7:f7:e5:fc:08:bd:71:5b:10:9b:ea:fc:14:58:5f:
                    a4:b5:62:43:0b:ad:bf:6e:cf:c2:e4:71:58:9c:00:
                    9a:c4:ec:fc:13:36:7f:70:55:f0:5d:f3:a3:71:0c:
                    16:b7:31:20:74:49:af:b4:03:64:e9:9e:8a:58:96:
                    3c:d2:63:18:c0:2e:e6:a0:20:24:62:41:26:7f:77:
                    25:6b:d3:09:68:f1:98:55:2c:0c:bf:81:c5:72:cd:
                    0f:09:f6:03:40:b8:71:54:88:28:7c:d2:1f:6b:c9:
                    ff:58:6b:6d:21:63:a4:33:16:92:9e:46:52:4e:4e:
                    4a:84:76:f0:0f:c6:11:5c:f4:96:ad:c9:14:55:22:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:EC:BF:04:04:17:AB:98:50:BE:3C:75:9A:85:0D:C9:B5:78:98
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:64:9d:8b:9b:62:c9:8d:34:9f:63:f6:16:e0:0c:51:0c:42:
         f1:70:11:32:ee:59:fd:a2:28:40:e5:bc:87:08:f6:57:7b:3f:
         5f:41:22:ed:63:09:f2:3c:90:07:0b:59:17:07:c2:b7:6e:6f:
         24:80:d8:53:f8:93:32:48:77:9e:1a:5f:13:98:50:22:3f:10:
         f1:9f:af:12:15:ec:e0:6d:a7:55:22:de:4d:bc:bb:c7:78:10:
         a4:1a:02:e1:f6:ae:48:34:31:c7:f2:77:ee:c3:7a:db:40:da:
         2e:c6:d0:51:93:a5:39:b7:bb:fe:32:b6:dc:b5:ae:c2:a5:a2:
         68:dd:43:94:ee:22:b2:e6:84:32:df:6c:09:00:7e:4f:3e:91:
         c6:a7:67:75:ae:89:a9:b5:c9:ef:95:55:07:a7:f6:9c:ef:30:
         9d:c9:53:cb:85:68:df:3f:1c:fb:e5:05:3d:e3:70:dc:f2:65:
         fa:23:26:2b:4d:e1:b6:4a:55:16:62:03:4b:00:89:0c:8d:43:
         bc:1a:83:d0:96:89:fa:87:3b:94:c9:77:5e:85:bb:60:d3:07:
         3c:d0:02:54:c9:90:a7:66:c3:e5:32:91:b1:33:e8:58:9b:8e:
         b3:fd:45:cc:99:d2:17:a6:bc:37:16:84:53:e0:bf:df:ab:06:
         9e:26:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:35:38 2026 by rpki-client