Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File:                     CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier:          O6gF/CFxZsEZ1mM/nIo75Pqz0x/MSao77pBMKN5StoI=
Subject key identifier:   86:AD:1E:E9:CD:D2:D4:C1:32:C3:0E:8B:79:BA:6A:7D:4C:E0:D0:3D
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer:       /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number:          EA
Signing time:             Fri 17 Jul 2026 07:43:36 +0000
Manifest this update:     Fri 17 Jul 2026 07:43:35 +0000
Manifest next update:     Fri 24 Jul 2026 07:43:35 +0000
Files and hashes:         1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: gk/bUPy+fin0hM8E7513LrOF5/hd9jLd/XXmfqS2gdY=)
                          2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
        Validity
            Not Before: Jul 17 07:43:35 2026 GMT
            Not After : Jul 24 07:43:35 2026 GMT
        Subject: CN=6a59dd28-d6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:cb:22:39:9c:b3:a9:a2:f4:8b:ff:b7:10:
                    03:31:b1:6d:80:88:4f:bd:21:9a:f7:fa:f1:40:84:
                    ce:a7:bc:36:ea:e5:d6:87:d2:20:13:19:4d:4a:fb:
                    f5:9e:ea:96:06:6a:2a:72:1a:39:ce:e0:0f:84:b0:
                    6f:9c:8d:fa:4b:26:f4:7f:8a:93:a1:72:57:d9:41:
                    40:72:8b:96:5b:a3:b1:5e:b3:e4:17:cf:cf:8c:45:
                    31:56:eb:e9:fb:f2:ac:40:fd:77:51:a4:00:36:b2:
                    66:97:6b:dc:fc:0d:c6:17:8c:22:6a:fa:98:be:b6:
                    f6:a6:27:6f:b8:0f:1e:97:b3:ae:e4:cf:b9:88:35:
                    d2:2b:fe:a8:75:d8:d3:ee:5c:40:8c:f6:bc:78:fa:
                    9d:0a:67:c3:dc:19:5a:a8:7b:98:67:2a:17:3c:e4:
                    49:98:df:5c:fc:41:e3:53:1e:9e:1f:41:2a:87:bd:
                    00:99:62:b6:9d:25:75:8e:12:b4:90:21:19:dc:29:
                    f3:64:76:26:7e:96:54:40:25:b1:c6:ba:ae:bf:01:
                    1a:7a:3b:cb:4c:84:a7:6b:54:9e:e7:e1:59:26:3a:
                    96:12:05:35:b7:94:17:a9:eb:72:5b:ed:c0:a7:aa:
                    ca:ed:17:80:de:97:61:5e:0c:aa:cb:52:77:4d:5b:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AD:1E:E9:CD:D2:D4:C1:32:C3:0E:8B:79:BA:6A:7D:4C:E0:D0:3D
            X509v3 Authority Key Identifier:
                keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c5:9b:c3:16:55:24:37:c1:d6:eb:09:a7:1e:fe:9f:34:40:
         50:c7:ca:4d:bf:d7:63:75:7a:74:bd:b6:24:c6:db:35:09:2f:
         b3:cb:da:f0:1e:6a:81:03:d2:03:ed:27:9d:e6:4e:06:94:95:
         ab:8d:97:46:4b:61:e9:f7:ce:5f:8d:67:6e:28:12:8a:b5:70:
         29:f9:b5:07:19:68:7a:64:3b:0d:17:39:ef:c0:41:8d:98:c3:
         04:d4:fa:c5:4a:14:60:6b:27:cc:45:c6:80:61:95:61:7d:23:
         bb:7b:c5:01:75:3d:2f:c3:7c:8e:da:10:fe:03:9b:0d:db:67:
         af:9b:78:8e:d0:58:40:3d:b5:f9:f7:4a:17:b8:3a:37:37:d7:
         b8:7d:fa:41:4c:80:00:77:e1:19:29:52:9d:ee:5b:9f:9b:4f:
         48:5c:ca:e1:e3:39:cd:e5:bc:5e:9d:be:f0:c5:c2:45:5e:21:
         94:0a:94:ba:be:6e:68:5d:19:1a:ae:fe:ce:6f:c4:7e:99:ad:
         11:02:39:19:01:6f:b1:b1:53:38:e6:9b:c8:68:d6:1a:be:49:
         96:d2:e0:e0:32:07:44:50:a8:c7:a6:a7:81:30:42:af:5b:66:
         26:85:f2:81:61:da:a7:25:1a:7d:20:41:78:a6:76:a3:6e:5f:
         d3:5e:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:08 2026 by rpki-client