Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
File:                     72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json)
Hash identifier:          U5iImeMp+86MuHhb42+fdbmykFwXtY6SoGekj+yf5Lc=
Subject key identifier:   1A:BA:4B:BC:13:C5:C4:5D:27:67:BD:4A:68:30:84:2C:60:96:24:E4
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Certificate issuer:       /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial:       059B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
Manifest number:          0586
Signing time:             Thu 16 Jul 2026 23:48:53 +0000
Manifest this update:     Thu 16 Jul 2026 23:48:52 +0000
Manifest next update:     Thu 23 Jul 2026 23:48:52 +0000
Files and hashes:         1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: 6SFnxuCZu3/jBoL1jFZjL/T77Br+OehX5gjV1E9InDM=)
                          2: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: CtlN2Faru+xDk/jym7szi2Dss5+eT2ey7yUoE46ChWo=)
                          3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: nNfdgdLoLhr6Vy9d41UW1l+EsR1U5EgpKmeHjbrVZXE=)
                          4: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: n4tuVdk3omfSB8XzyCrNJHNaBap0wt8tJ/fhHnIddvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
        Validity
            Not Before: Jul 16 23:48:52 2026 GMT
            Not After : Jul 23 23:48:52 2026 GMT
        Subject: CN=6a596de5-95c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:e5:ce:f4:8f:9e:b0:f5:43:f6:db:6d:0b:
                    4d:45:fe:96:10:23:65:15:57:e8:59:8a:6f:fd:0f:
                    3c:ef:69:93:b3:23:89:cc:11:fb:4f:74:d3:00:22:
                    c9:70:1c:2a:0b:df:84:3d:13:13:a2:85:b7:16:f0:
                    d6:1a:b1:63:4e:73:ff:30:a7:62:56:48:a8:0f:01:
                    02:90:40:6f:85:a6:6e:b6:ca:31:3c:01:6a:58:93:
                    f0:f3:68:49:e7:50:87:53:44:82:08:88:03:d9:93:
                    3a:f9:7f:74:30:b1:52:90:3a:93:69:f4:81:06:04:
                    84:49:80:22:e9:52:3f:fa:78:f8:11:84:65:7f:30:
                    bf:16:90:4f:ce:a8:45:b6:50:f0:35:46:6a:92:a9:
                    ff:32:31:e0:a5:0d:36:08:c4:75:24:96:c8:1d:69:
                    c4:97:67:d8:c2:33:50:14:51:a2:70:aa:20:55:de:
                    ab:9e:da:de:0e:ec:f3:62:7e:67:6c:db:86:63:78:
                    86:27:a0:dc:fc:6d:1e:4b:e5:77:03:c2:62:8f:87:
                    6b:14:56:68:73:a9:f3:50:ca:51:11:4b:0c:88:e6:
                    96:57:5c:2b:ff:12:a4:c9:33:cc:2b:36:38:57:c3:
                    9d:57:13:46:61:91:d4:02:33:4f:29:94:1d:b3:15:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:4B:BC:13:C5:C4:5D:27:67:BD:4A:68:30:84:2C:60:96:24:E4
            X509v3 Authority Key Identifier:
                keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:4b:26:fd:f1:5c:e0:12:38:e6:cf:2c:5b:55:e7:cb:a1:
         74:f5:00:21:c1:4a:67:49:b7:ba:c3:6f:5a:43:5b:99:37:85:
         b4:d7:56:5e:6e:0c:14:23:fb:a6:79:7c:9d:61:62:8a:3a:84:
         37:cd:52:46:fb:cf:0f:6a:2c:f7:47:c6:3e:40:4d:1e:35:ba:
         4e:8d:3d:8f:d8:87:4f:1d:67:af:c4:b0:6a:c1:0f:ec:b7:19:
         b6:04:a8:65:33:31:ba:6e:1d:6b:50:43:17:e1:e5:73:4a:76:
         ee:44:33:55:e7:03:7c:bf:6d:82:9d:0f:fa:c6:2c:48:47:b2:
         0d:88:61:b7:a2:52:f8:30:8b:bc:cc:c1:36:ad:cf:45:d5:ca:
         5e:9f:02:81:25:b3:ef:a1:35:d5:7d:c8:95:a4:00:00:21:88:
         ad:25:64:9d:2c:24:b3:44:90:97:85:16:f2:d9:aa:e6:cd:32:
         03:ad:1a:8d:7e:f6:e7:68:a2:25:56:cc:1f:a3:ae:81:02:15:
         27:0a:b0:fc:c8:3c:77:f4:0d:9f:54:0f:4f:7e:5a:d8:30:94:
         81:65:45:60:ef:fe:0c:9c:eb:d3:64:67:67:f7:87:62:1b:38:
         55:af:b3:1b:e9:6c:d8:5a:e5:67:a6:50:29:7e:82:a2:75:1c:
         21:ef:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:15:06 2026 by rpki-client