Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File:                     X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier:          LF87THlXCRmhay09RuFre/zDHwIRfoDzigrpY7HPCCQ=
Subject key identifier:   66:CF:ED:E3:7B:13:EB:25:68:FD:02:C1:B6:7A:8C:F8:87:D8:CF:8D
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer:       /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number:          74
Signing time:             Mon 29 Jun 2026 08:30:42 +0000
Manifest this update:     Mon 29 Jun 2026 08:30:41 +0000
Manifest next update:     Mon 06 Jul 2026 08:30:41 +0000
Files and hashes:         1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: emRjbDgslDiSijWTKQ7QeRHEj/nFwPdRMfhQMCqFC6c=)
                          2: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=)
                          3: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
                          4: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
        Validity
            Not Before: Jun 29 08:30:41 2026 GMT
            Not After : Jul  6 08:30:41 2026 GMT
        Subject: CN=6a422d32-b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:d0:8a:ad:a0:6d:63:27:99:5f:2e:c7:33:
                    5d:78:d3:25:a7:47:74:ff:20:ce:68:16:54:3e:19:
                    28:e3:35:5e:68:04:17:2a:a9:06:49:2a:8f:dc:4c:
                    95:f6:07:f3:1e:d0:95:d4:32:fd:39:a4:49:ed:9f:
                    22:ed:83:3c:b6:2d:f3:20:1c:4c:f8:14:2b:17:71:
                    84:ea:37:50:38:b3:1f:5e:6c:4f:d6:8d:73:bf:83:
                    ea:75:e4:78:7f:f2:19:49:4a:3c:57:b4:50:05:cd:
                    48:45:c4:dd:00:7c:cd:32:02:85:ee:e5:58:da:4c:
                    4f:e0:f5:93:82:c6:06:02:3f:4a:1d:48:af:5b:29:
                    6e:41:65:4c:1d:63:52:ab:f3:29:14:2a:91:1c:72:
                    37:ec:29:1b:02:22:9a:0d:fc:05:6c:80:91:97:10:
                    e4:7c:04:6d:65:ec:e1:cc:8c:f1:96:81:50:0e:e3:
                    fd:b8:79:ca:fb:66:7c:75:0d:c8:5d:66:f1:a5:5e:
                    5c:4d:01:bb:fb:32:f3:2f:b6:b9:56:98:10:df:39:
                    22:af:78:6b:95:cd:c8:28:e8:fe:96:5b:ab:34:c4:
                    93:4c:38:cc:12:97:b9:73:78:d3:d0:28:65:3f:93:
                    d0:1f:6e:f3:02:f6:d4:fe:b2:b6:fd:74:a8:ca:f7:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CF:ED:E3:7B:13:EB:25:68:FD:02:C1:B6:7A:8C:F8:87:D8:CF:8D
            X509v3 Authority Key Identifier:
                keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:62:03:1b:89:c7:25:53:17:36:c0:43:11:3e:cc:ff:d9:e6:
         9e:d2:55:f9:f7:bf:11:9d:97:2f:9d:98:68:bc:ec:84:45:00:
         c4:ee:3a:1c:fc:ac:f7:0c:08:fc:8e:f8:69:ee:f2:10:da:03:
         4b:0f:94:ae:1a:f8:fc:57:08:d1:8b:f9:87:e4:28:a2:7d:3d:
         8e:49:c7:6f:8b:2e:26:d8:a9:65:73:f1:92:15:57:4d:1e:d5:
         4d:a7:14:ea:2c:26:dd:6f:2b:5f:9e:51:f1:a4:d3:9b:f3:7a:
         71:ac:56:aa:cd:99:56:8b:7e:59:2c:f4:7e:7b:9a:08:bb:ec:
         9a:95:6e:04:76:d3:6a:72:16:64:e8:02:ab:50:60:aa:64:78:
         31:66:e1:9e:54:b4:40:1c:eb:f7:36:25:49:c3:83:27:95:2f:
         4c:68:25:75:7c:cb:b3:7a:5d:00:ef:55:5c:84:46:69:54:76:
         09:09:3d:9f:84:dc:42:af:04:52:8b:79:06:38:be:d3:f7:11:
         2e:41:a9:91:06:57:78:bc:9c:03:8b:fc:b1:b3:59:ba:51:92:
         d8:d9:d2:52:be:4e:86:c9:ed:99:e8:15:ab:7d:8f:f6:75:8c:
         80:84:21:3d:ed:4c:da:fd:6f:46:6b:bf:d4:43:27:a9:83:20:
         c5:1b:7c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:28 2026 by rpki-client