Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File:                     v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier:          m1yH5tr4Q+Hc+aXhIiBINIljdfYoPTvRVsl6NNPGJhE=
Subject key identifier:   C6:85:5D:76:61:5F:25:62:1B:2A:A3:4D:8A:B0:2D:3A:4E:2E:EE:59
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer:       /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial:       22BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number:          2297
Signing time:             Tue 18 Aug 2026 15:57:06 +0000
Manifest this update:     Tue 18 Aug 2026 15:57:05 +0000
Manifest next update:     Tue 25 Aug 2026 15:57:05 +0000
Files and hashes:         1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: U6a7TjcPScrV7+hj95c3GFkeTYXqKjo9WK+mI7HEWeQ=)
                          2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: JN5MdgQyOnCl7sTnuuhfSC+dcJigA58t5/ie8y0Mx7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
                          rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8891 (0x22bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
        Validity
            Not Before: Aug 18 15:57:05 2026 GMT
            Not After : Aug 25 15:57:05 2026 GMT
        Subject: CN=6a8480d2-cc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:00:27:a9:20:1b:d4:48:f2:73:d5:59:5f:
                    bf:f8:d9:27:b3:57:3c:1c:74:94:86:a3:6f:2c:ee:
                    0f:43:c0:ed:40:56:8c:7b:9e:a1:99:c9:9c:35:6a:
                    3a:35:4f:f5:48:73:f8:c4:96:3a:60:41:0a:21:ed:
                    f3:b0:59:0e:47:3c:20:b5:e2:a7:c4:06:d9:12:6e:
                    f4:e0:d8:ca:6c:84:8d:f4:86:5c:49:2b:61:29:0e:
                    e4:7c:ea:8f:22:22:c2:48:b9:ba:19:7c:5f:cb:4f:
                    02:99:15:2c:ac:42:34:ca:c4:68:c3:28:de:30:1e:
                    f4:8f:61:dc:fe:da:bb:fb:dd:d1:2f:a8:76:c8:39:
                    64:e3:0c:8f:4c:a3:67:7d:45:ad:91:90:cf:c4:12:
                    04:1e:03:bc:16:3a:95:b8:ec:96:24:7e:b8:31:14:
                    31:25:ce:0e:c6:bc:ae:c0:c6:80:92:42:c4:9a:7a:
                    84:de:48:88:29:36:68:79:18:62:39:dd:be:27:aa:
                    20:4c:ba:7e:e1:23:61:bd:d7:a5:20:5b:21:9d:93:
                    a5:96:c9:74:c3:a1:8c:fd:4c:bc:ef:c3:b9:3e:9d:
                    1c:02:78:19:91:d3:6d:6f:23:c2:65:5b:45:99:39:
                    f8:5e:7f:7f:00:b7:30:20:ca:45:cf:ec:2f:88:f8:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:85:5D:76:61:5F:25:62:1B:2A:A3:4D:8A:B0:2D:3A:4E:2E:EE:59
            X509v3 Authority Key Identifier:
                keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:88:ec:a7:30:d6:cf:e8:93:93:fb:93:6e:03:11:ac:a9:96:
         a0:31:9a:c2:00:af:f1:59:08:0f:7b:98:c3:ae:e6:f0:f3:07:
         ee:4d:cc:cf:1d:73:65:25:28:b9:2c:79:40:e0:0a:fa:1e:ff:
         d4:03:52:15:60:00:17:0c:9b:6f:c6:51:13:b2:b5:da:fe:17:
         87:f5:f2:4f:ca:02:99:e4:7a:1e:b8:85:f6:91:6d:7d:a7:53:
         fb:09:17:dd:c0:b3:ff:88:3c:ed:cc:89:41:c3:6a:55:06:44:
         dd:99:36:ad:a0:73:63:aa:b0:1a:8b:74:0d:d2:11:37:d2:53:
         12:d3:b7:1c:6b:14:c8:4b:e6:e3:32:b6:88:06:5c:4c:87:3d:
         7e:4b:c6:9d:16:21:67:7c:31:8e:ac:7f:e9:ff:f4:17:89:96:
         3f:64:02:5a:28:71:c7:8e:a3:77:55:6c:a6:49:49:9e:d0:35:
         cd:a7:eb:59:9b:ad:d3:16:0e:5f:ee:52:e5:51:66:bc:18:93:
         74:4a:56:dc:2f:eb:79:00:64:60:0e:70:e6:4f:5c:9c:2d:c0:
         79:57:bb:e7:0e:f4:89:dd:f6:83:33:9f:27:87:1a:67:85:97:
         60:91:3c:a5:55:58:67:05:3f:52:38:9f:62:6c:51:19:b0:98:
         ac:c1:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:28 2026 by rpki-client