Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
File:                     rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json)
Hash identifier:          0UZtygynFyX9jk0/2ItKy7tBJTAOdWBTPuCHa0CAEgk=
Subject key identifier:   7F:AE:F8:19:EA:10:63:95:53:BC:09:DB:D8:07:5F:7D:AE:4A:43:55
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Certificate issuer:       /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial:       0BB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
Manifest number:          0BA4
Signing time:             Mon 22 Jun 2026 19:05:22 +0000
Manifest this update:     Mon 22 Jun 2026 19:05:22 +0000
Manifest next update:     Mon 29 Jun 2026 19:05:22 +0000
Files and hashes:         1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: 4toBn6eoRsVCmuyrLr0t/nevKKM/4+f3rBaxIhj0j/I=)
                          2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: tFJq8prm/jm01/luS9MVt882V4/WGQN42LpWhd1UgG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
        Validity
            Not Before: Jun 22 19:05:22 2026 GMT
            Not After : Jun 29 19:05:22 2026 GMT
        Subject: CN=6a398772-28bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:5d:8f:22:1f:04:d3:6e:8a:99:68:9a:c7:
                    c3:73:56:ec:7c:08:60:58:9c:f9:a1:21:7d:79:1d:
                    b1:cb:46:02:56:dc:40:16:24:6f:14:6f:fa:64:c9:
                    10:6f:65:8b:bc:63:07:ef:6b:18:31:f4:c8:e6:b9:
                    3b:eb:29:67:9f:a5:0f:39:1e:17:cb:e6:b7:52:00:
                    21:52:0e:8b:c5:9c:16:d5:6e:13:d4:9a:23:ef:e3:
                    eb:52:e6:b3:29:a7:25:cb:c2:4a:09:ae:c8:b4:f1:
                    23:3e:55:f5:9b:d9:7c:ae:90:75:64:1a:8a:94:76:
                    e7:9c:13:8a:17:ed:02:9e:f8:f0:46:d7:3e:82:17:
                    d5:ba:62:b0:be:30:ca:c2:bc:0a:f4:04:1d:b9:85:
                    59:0a:7a:d9:cd:11:b2:36:e4:5b:76:91:33:9c:d3:
                    f8:a1:2b:0c:cf:d8:8c:fc:5a:1d:d5:c0:ff:97:23:
                    ce:c3:be:a8:f8:8d:7b:86:d4:dc:7c:b3:0c:5e:9d:
                    ea:02:4f:56:ce:07:ec:89:f1:02:6c:92:35:22:a0:
                    82:ed:69:06:0f:d3:77:e2:09:8c:8b:09:a3:9f:89:
                    6e:c2:5b:25:aa:1f:d4:5a:2d:19:94:f9:7c:17:30:
                    da:cd:df:0d:d6:be:e8:98:f2:bb:6d:e4:a1:55:3d:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:F8:19:EA:10:63:95:53:BC:09:DB:D8:07:5F:7D:AE:4A:43:55
            X509v3 Authority Key Identifier:
                keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:7b:89:70:33:7d:02:ea:c8:c7:cf:7d:f3:97:da:a6:cb:
         d8:7d:f6:1b:01:62:52:42:c8:f7:de:00:09:78:56:36:48:87:
         5f:36:9a:f1:10:bb:12:5d:cd:83:12:52:d1:d6:8b:cd:8b:e2:
         62:eb:32:96:00:e9:6f:d3:ec:74:09:17:a4:6c:45:f7:59:e0:
         6e:be:36:93:e3:a4:39:2d:b0:17:00:c3:7f:4d:26:c0:84:40:
         cd:4b:27:af:48:d0:4b:5c:60:8f:f8:87:23:e5:93:ae:41:08:
         a3:9e:ee:91:69:0f:e1:3b:39:8e:d6:b7:1c:c5:74:3f:2a:9c:
         fa:d6:dc:5d:52:9e:7b:a0:80:69:9d:42:88:45:d5:e3:12:5e:
         84:0a:ab:78:5f:dc:d3:00:cd:33:e0:f4:78:51:51:43:08:81:
         d3:d3:42:38:b1:c1:44:64:29:f6:8a:db:12:2a:4d:f9:7e:db:
         d9:44:71:c3:fd:d4:6e:2a:7c:9e:e2:36:ca:c1:04:36:64:a2:
         4c:c6:11:42:ae:2a:f5:30:8d:db:ba:eb:b0:ec:11:43:8c:7d:
         d7:a0:c0:cb:e7:07:8b:91:5c:95:5b:e6:51:da:50:43:b7:91:
         3a:3f:de:f0:44:e5:38:5b:2e:33:50:07:e3:88:0b:f2:88:4e:
         a2:3e:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:34 2026 by rpki-client