Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
File:                     dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json)
Hash identifier:          fBe+WheAqO+UNHMSSGhRos6MHfXExahXjmK6DMx45d8=
Subject key identifier:   67:A9:D8:89:CE:D6:68:5B:E7:19:66:E2:2E:92:A2:87:02:68:04:2D
Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80
Certificate issuer:       /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
Manifest number:          0391
Signing time:             Fri 17 Jul 2026 04:45:38 +0000
Manifest this update:     Fri 17 Jul 2026 04:45:38 +0000
Manifest next update:     Fri 24 Jul 2026 04:45:38 +0000
Files and hashes:         1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: CRNHkcor/SV1lc3BF+YJPp0xIVn6N0AoQ01WFiLs+CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
        Validity
            Not Before: Jul 17 04:45:38 2026 GMT
            Not After : Jul 24 04:45:38 2026 GMT
        Subject: CN=6a59b372-7f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:67:4a:e7:73:c3:ef:4e:1f:b8:b3:d4:c5:
                    3c:1c:d5:21:6c:32:c5:70:a5:33:db:80:cd:45:2e:
                    61:8c:d0:93:49:ff:ab:98:75:c3:45:fd:70:ac:1b:
                    9b:66:4e:b7:3d:da:ed:2c:0f:7a:2d:89:b8:25:7a:
                    79:28:dc:e6:c1:22:e8:9b:26:79:d8:27:80:2a:bf:
                    82:3d:2d:6f:b0:21:b3:f7:e5:43:80:72:28:4f:e8:
                    66:66:fb:a7:d8:1f:9f:d4:b4:59:98:ae:5a:ea:4b:
                    09:52:45:70:85:4e:ae:f0:df:36:3d:06:0d:ba:d5:
                    fd:f1:15:aa:35:23:6d:b2:60:3f:69:a8:a6:47:69:
                    b0:e6:c4:64:73:f7:ef:f6:18:0b:19:75:ea:be:b6:
                    ca:ed:d7:91:cc:ba:eb:90:34:50:ee:16:0c:f3:43:
                    8c:db:d2:2a:43:d6:ba:2f:40:af:98:8b:fc:3b:0f:
                    b5:27:cb:9c:44:7e:43:ab:cc:a2:2f:79:4d:22:ab:
                    93:de:ca:27:03:17:e3:aa:cd:5f:a9:dc:da:d4:43:
                    fe:f8:f9:92:6e:9a:75:1c:b6:60:54:b8:ae:42:6e:
                    8a:c7:2f:f7:99:12:11:be:14:e3:35:fa:3a:01:7b:
                    d7:1c:9f:a5:4e:6e:ad:7b:19:01:1f:01:62:2b:7a:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:D8:89:CE:D6:68:5B:E7:19:66:E2:2E:92:A2:87:02:68:04:2D
            X509v3 Authority Key Identifier:
                keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:25:ea:11:27:cd:90:88:32:d5:03:6c:86:7e:d7:b8:da:f7:
         b1:01:67:db:2a:a1:15:5d:03:b0:a4:60:a4:59:05:a5:bb:34:
         ac:cd:10:0b:f3:e3:e9:ee:87:db:27:01:2a:5e:00:f4:4b:67:
         e2:7e:5d:e2:09:f7:70:cd:6b:a1:53:fe:82:10:ba:6b:56:5a:
         2c:31:64:63:1a:57:8e:98:c5:71:91:42:9d:f8:fb:35:56:68:
         69:f2:1a:08:78:74:94:b6:59:1d:8b:74:41:90:ea:57:fc:93:
         a8:cb:c4:9c:6c:8c:be:ec:f2:e2:94:68:50:35:a9:ef:a1:6e:
         45:62:fd:f0:24:d0:01:74:e3:7f:f9:9f:c1:68:54:f3:73:e6:
         b6:ad:9f:09:43:a3:db:b0:c5:99:85:45:54:64:0d:19:7b:8c:
         d2:65:37:c7:9c:56:6e:61:51:32:e3:c8:f4:b0:90:ac:32:5c:
         29:84:9f:b7:f7:67:d5:1c:fe:70:0a:ca:b4:60:db:68:b2:c7:
         4f:e5:a5:27:71:b6:f2:36:4f:49:eb:a1:42:76:52:54:73:ac:
         41:26:74:2c:10:d3:f9:0f:fc:45:4b:ec:16:cc:a0:30:c6:26:
         2e:0f:ca:1e:5f:71:8f:73:c8:47:fd:63:77:75:68:c0:f7:d0:
         80:52:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:11 2026 by rpki-client