Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File:                     M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier:          f8BkJ87aaoSMZIcosupt70ezqo1agKa0BOPht0F9fAQ=
Subject key identifier:   64:3D:D2:0D:07:67:E0:D0:4B:D2:CE:E5:86:61:48:8D:AE:CF:48:0E
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer:       /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number:          01BF
Signing time:             Wed 19 Aug 2026 04:31:28 +0000
Manifest this update:     Wed 19 Aug 2026 04:31:27 +0000
Manifest next update:     Wed 26 Aug 2026 04:31:27 +0000
Files and hashes:         1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: Ogjz4jYKrNFf/4NvRiBpp+ERc/MOPBvKmjTESK30b/c=)
                          2: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=)
                          3: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=)
                          4: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
        Validity
            Not Before: Aug 19 04:31:27 2026 GMT
            Not After : Aug 26 04:31:27 2026 GMT
        Subject: CN=6a8531a0-bf0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:8e:d9:bb:ff:d2:fe:04:c3:b3:a0:9b:10:
                    17:28:e9:96:60:03:4f:54:19:b9:fe:30:e3:dc:06:
                    d8:7a:65:a0:ac:fc:65:34:92:f5:02:36:d1:5c:62:
                    89:ea:01:aa:6a:bf:f5:11:4f:fe:31:03:53:7e:d1:
                    e7:3b:6e:47:7e:0f:69:40:ff:14:47:2b:36:be:a5:
                    ad:b9:36:8e:fc:df:3c:9e:23:bb:93:17:8b:21:d3:
                    7b:3e:d9:cf:e9:47:e4:87:32:c3:ab:8c:89:4f:9a:
                    d2:14:da:82:b7:3a:85:0e:6e:c1:4c:d2:8f:7f:36:
                    e0:03:55:4b:d7:22:93:15:93:eb:1c:73:c7:2c:ea:
                    15:78:97:59:40:8f:a7:5f:d2:d0:c2:c7:24:a9:7d:
                    37:58:7e:3a:ec:32:5b:a8:ad:cf:00:b7:8e:bc:af:
                    ef:cf:ea:34:8c:5f:8e:27:02:aa:2c:fc:1a:e5:1c:
                    e2:dd:df:05:2e:7c:96:7c:46:ae:99:af:73:41:80:
                    d1:b5:6d:70:e3:9f:f2:d6:4d:8b:52:d8:51:15:dd:
                    3c:95:36:a5:fd:6b:00:89:6b:cc:7d:7f:1a:af:df:
                    f0:de:08:d3:5e:0f:f4:2b:0d:41:66:a0:cc:00:cb:
                    38:55:67:8d:d9:5d:15:c7:2b:13:10:8e:93:b2:6a:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:D2:0D:07:67:E0:D0:4B:D2:CE:E5:86:61:48:8D:AE:CF:48:0E
            X509v3 Authority Key Identifier:
                keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:98:9e:47:41:5c:df:fc:8c:b5:40:4d:96:a1:01:8f:97:
         4f:df:56:1f:f6:91:b5:04:04:c1:6f:a1:d8:2e:94:9a:7a:7e:
         f6:ce:e4:f2:10:03:17:92:21:fa:b7:47:14:83:18:4d:a9:4c:
         c6:b3:74:06:33:83:7e:e0:05:e4:52:f4:9f:e5:b4:27:34:6b:
         a9:4a:fd:7b:a0:a7:c2:f9:f1:cf:57:91:f7:8e:94:fb:a3:3a:
         03:4a:95:66:96:5d:40:9f:83:52:86:4c:a0:6f:55:4b:48:02:
         2d:bc:6c:c6:49:e2:95:34:f4:f1:f8:5d:fa:5c:15:13:eb:02:
         e6:4a:dd:63:76:26:8d:3a:ae:96:e5:37:97:60:03:af:a3:be:
         42:2f:b1:70:57:c3:4b:38:8e:77:cf:fc:3e:ef:0d:c2:bc:b2:
         ef:2f:b3:fe:3b:65:10:4d:f8:d8:67:3c:0d:4e:07:74:b0:ee:
         9a:b3:51:e6:04:c7:47:c8:ba:c1:90:71:c8:d0:52:c9:ed:1a:
         ba:c9:20:c9:6c:27:8f:83:d4:ee:e3:3d:65:eb:08:07:5f:c5:
         0f:4d:12:5b:82:88:11:54:7a:15:90:39:22:e2:c8:7e:ba:be:
         a9:98:c5:b8:82:eb:6d:9a:d7:3c:15:00:83:e3:48:bd:01:b8:
         8b:7b:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:29 2026 by rpki-client