Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
File:                     -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json)
Hash identifier:          T+yH3e5ghG0Xe8Ah79kS+eoZtepOGEPwYJm8lJwqWZ0=
Subject key identifier:   ED:0F:C6:91:D9:07:D1:61:7A:C8:60:38:1E:FD:84:BB:13:E3:02:74
Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Certificate issuer:       /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
Manifest number:          027F
Signing time:             Fri 17 Jul 2026 02:43:23 +0000
Manifest this update:     Fri 17 Jul 2026 02:43:22 +0000
Manifest next update:     Fri 24 Jul 2026 02:43:22 +0000
Files and hashes:         1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: xAxxO5C/PkcyE69jCYuR7eYCcrOR3j5RoStnTTscbj4=)
                          2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 8Y4nrhPY6RsS1NE1gpg04ierg266aCYEgZiZ3ft65yY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl
                          rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
        Validity
            Not Before: Jul 17 02:43:22 2026 GMT
            Not After : Jul 24 02:43:22 2026 GMT
        Subject: CN=6a5996cb-6b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:21:cc:13:2a:58:4b:36:21:9e:50:a3:27:
                    f2:07:5c:9b:24:25:0a:a3:21:e8:16:a7:58:9c:c3:
                    5c:81:e9:0e:0b:b5:e0:69:6e:38:0f:9e:d9:9b:d2:
                    0d:b0:e7:fd:6e:44:b3:63:ac:a4:55:96:c6:93:6b:
                    4f:9d:6a:fb:21:35:ec:70:dc:b6:29:f9:17:4d:b0:
                    59:6e:d4:69:76:9a:2b:ae:97:2e:5c:54:49:13:6d:
                    1e:a5:6d:0d:1f:21:c4:3e:18:4b:03:b6:92:bf:e6:
                    5a:cc:af:8c:c1:79:d4:44:dc:56:35:6d:b2:13:d4:
                    1c:00:99:41:27:ff:cc:ea:a4:75:24:a9:0e:c6:20:
                    2a:68:72:6c:3e:1e:c4:67:1b:71:b2:ff:18:0c:9a:
                    91:5a:2e:e8:a5:ec:f5:7e:da:62:a4:25:1b:0c:06:
                    a7:44:16:3d:c9:97:4d:0a:9e:22:52:6d:80:71:27:
                    93:83:4b:ea:20:0e:86:fa:08:6c:d8:00:33:3a:ca:
                    54:86:68:67:2c:79:66:23:83:33:57:10:a7:a7:39:
                    06:b5:ef:58:32:07:a9:ab:07:d1:46:01:0e:ca:91:
                    f1:e0:b5:34:4f:26:50:0f:c4:d9:1a:a1:31:8d:eb:
                    ef:34:38:b0:84:aa:6c:c4:41:2b:d8:ed:92:04:e6:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:C6:91:D9:07:D1:61:7A:C8:60:38:1E:FD:84:BB:13:E3:02:74
            X509v3 Authority Key Identifier:
                keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:b9:f0:89:76:26:58:2a:c9:2f:ca:42:cd:c2:4f:00:ec:
         85:da:70:c8:da:07:6f:9a:5d:3d:9c:84:f2:d1:27:d7:4e:6c:
         19:fa:7c:7d:63:56:f6:56:2d:06:56:d1:f6:e2:5c:50:d2:cf:
         08:46:02:dd:52:f0:4a:f8:73:fa:20:e3:30:a1:39:8f:28:20:
         bb:7b:2b:69:e9:23:01:c7:70:ef:1d:c3:c7:82:82:e7:c9:df:
         b1:eb:04:95:b1:3a:9f:4a:a7:f6:f1:68:65:2b:7d:0a:16:36:
         ef:f7:71:e7:a2:30:85:4a:9a:bb:d7:ba:91:0e:0a:a4:8b:ca:
         b1:b1:21:10:45:93:86:20:28:cd:5b:a1:d9:6c:51:7f:9c:46:
         fb:5c:c7:9a:e8:e2:76:df:ee:8a:69:0d:da:5e:e8:ca:0d:9e:
         d4:48:f5:4b:62:10:0f:7e:55:41:43:f8:6e:37:f2:21:2f:0d:
         76:4f:34:70:3c:d1:64:67:01:75:b2:cc:a8:ac:ea:b1:14:c1:
         0d:7f:ea:60:43:dd:f1:ff:77:5c:7a:be:0f:e8:ba:cb:28:d0:
         ee:45:13:79:1a:89:60:00:a3:6a:4e:0c:9b:4c:23:9e:96:23:
         50:57:02:6c:4d:fb:25:96:3c:0d:9e:96:ba:7e:e2:3a:68:55:
         07:88:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 13:32:21 2026 by rpki-client