Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
File:                     qEIODiButOkMWHKN1D91Dc_DzIY.mft (raw, json)
Hash identifier:          yQzak7/VdqNljKVpCyA/AnS0Fc1n9V2bGCiaHqSTooE=
Subject key identifier:   EA:3A:ED:74:23:1E:F0:76:C0:59:51:5D:4E:3A:C7:61:DA:F5:C5:EA
Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
Certificate issuer:       /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
Manifest number:          07
Signing time:             Wed 29 Jul 2026 10:49:53 +0000
Manifest this update:     Wed 29 Jul 2026 10:49:52 +0000
Manifest next update:     Wed 05 Aug 2026 10:49:52 +0000
Files and hashes:         1: qEIODiButOkMWHKN1D91Dc_DzIY.crl (hash: iKcWeJz0igW/9pTxVl7k9MUoLwJsD+pqKjyDSjntax4=)
                          2: A41A30BE866011F191F4B56496A30FBC.roa (hash: AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 10:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
        Validity
            Not Before: Jul 29 10:49:52 2026 GMT
            Not After : Aug  5 10:49:52 2026 GMT
        Subject: CN=6a69dad1-23f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:04:74:00:26:ad:f5:a0:42:52:bd:34:cf:
                    e0:ec:82:52:f0:9c:52:56:f9:8a:36:ef:41:ec:3c:
                    61:55:ff:5c:ad:aa:42:44:7c:3e:aa:63:3d:89:b4:
                    91:0c:3c:18:82:84:46:25:68:e0:43:e4:de:9a:a9:
                    53:44:82:91:f4:ee:0f:45:ec:e5:40:e1:4a:41:21:
                    29:16:0e:bb:0a:ba:da:87:e9:16:a0:e5:e3:04:00:
                    66:a2:94:34:fc:79:57:d6:53:d3:5b:fd:e7:42:b0:
                    8d:67:d7:0e:22:b9:29:4e:87:47:5c:a6:03:da:87:
                    24:6b:58:6c:88:49:f5:0a:05:e9:64:b6:f0:d3:a1:
                    d5:d8:36:54:0a:b8:4f:61:08:ee:9c:83:a5:09:d1:
                    d4:fe:83:9f:aa:49:4d:b6:08:0d:7d:9c:7a:41:c6:
                    1b:50:22:bd:23:6e:e3:e0:dc:93:c2:67:89:04:b1:
                    f8:3c:57:aa:92:39:24:40:4f:d0:af:8b:44:19:ef:
                    37:f0:99:22:60:a4:94:19:22:3b:83:6e:de:56:5e:
                    5e:06:70:2b:6b:49:ce:87:89:f0:b2:51:26:93:97:
                    d1:d8:ee:11:f9:aa:f2:58:85:ce:db:78:9d:ed:5e:
                    f3:02:a8:3a:94:73:ec:76:4c:9d:ff:65:20:dd:b7:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3A:ED:74:23:1E:F0:76:C0:59:51:5D:4E:3A:C7:61:DA:F5:C5:EA
            X509v3 Authority Key Identifier:
                keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:60:7b:ba:4e:33:1a:11:5a:c1:d2:20:11:f1:40:7b:46:
         a3:9a:64:ac:38:f6:fe:42:8a:84:4a:f7:25:5c:41:90:c0:da:
         a7:c0:2e:a8:19:19:4a:3f:aa:7b:17:c5:c7:2e:ef:3a:da:b3:
         a9:9f:61:03:44:70:57:77:c2:3f:e3:4c:dd:61:dc:16:7d:b0:
         a8:76:75:e7:eb:92:1b:3b:2d:60:dc:54:6c:52:2e:45:e1:1b:
         9e:1d:6d:7a:d5:d4:54:29:22:e1:22:6b:a7:d9:ef:37:e5:18:
         6a:eb:73:48:5a:34:f7:43:e0:a2:48:3b:e4:8a:93:ea:ed:09:
         11:b2:6c:0f:7a:83:0d:54:21:b9:8a:85:58:a4:50:d7:24:ae:
         3e:cb:44:a7:50:a2:e7:e0:96:f4:4b:33:33:f4:5e:78:a6:00:
         61:8c:bf:ca:9c:f1:07:c0:4b:dc:be:db:09:dc:dc:48:60:41:
         66:5b:b8:0c:23:cd:49:b9:2f:e6:65:65:37:14:a0:57:27:ed:
         a1:3b:8c:4b:9a:0c:16:fc:66:2d:bc:f6:85:22:28:41:07:eb:
         50:ca:1c:f4:51:16:ef:7b:03:b7:ee:26:bd:3d:22:55:c9:b3:
         94:36:74:e6:87:10:a3:e3:6f:8d:72:a9:c9:88:19:1e:b4:de:
         14:5f:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:15:37 2026 by rpki-client