Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
File:                     o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json)
Hash identifier:          7utVcFON9GZn+M9lDWLalzhFjiXaTPtV63PMxlGyxUM=
Subject key identifier:   A4:A3:15:95:A6:D5:F1:AD:63:09:EC:94:D9:3A:BC:48:35:09:16:DB
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Certificate issuer:       /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
Manifest number:          57
Signing time:             Tue 21 Jul 2026 10:06:01 +0000
Manifest this update:     Tue 21 Jul 2026 10:06:01 +0000
Manifest next update:     Tue 28 Jul 2026 10:06:01 +0000
Files and hashes:         1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: ydRbDMiSr8XWNhWCqpUege6nqrHT5ARRWGwzHOQSdxw=)
                          2: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=)
                          3: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=)
                          4: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
                          rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
        Validity
            Not Before: Jul 21 10:06:01 2026 GMT
            Not After : Jul 28 10:06:01 2026 GMT
        Subject: CN=6a5f4489-cffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:31:e8:1f:5c:df:15:39:81:d9:ac:6c:48:
                    26:4b:1c:1b:8e:03:55:46:a7:e4:6f:41:27:74:f9:
                    b3:31:fa:ca:e2:e9:67:31:69:9c:c0:73:d3:68:10:
                    77:d7:56:a3:c5:30:26:e1:f4:50:32:d4:d3:e3:09:
                    df:b6:e7:54:0d:97:3f:77:95:8f:20:bf:33:6d:7c:
                    a9:81:be:f6:e3:ea:a2:38:a7:32:5b:1a:5f:84:ad:
                    ce:14:e6:ed:ea:04:2a:02:e6:5c:86:02:3d:d5:8f:
                    a2:fb:7f:8a:5e:ae:30:60:47:18:b4:aa:df:d7:60:
                    42:9f:f8:18:e7:bb:6a:74:74:d0:41:96:a3:ac:f0:
                    29:cd:44:91:13:2a:59:89:e9:23:e2:a1:f9:a4:7a:
                    7a:7e:9f:88:ce:93:98:d2:3e:7e:8a:fb:da:6a:73:
                    86:a4:e0:1a:20:33:4e:8a:f6:1c:7b:32:18:c6:7e:
                    06:60:30:4f:bb:98:0f:b8:51:ff:f7:b1:3f:24:6b:
                    c6:bb:37:c9:10:99:c6:e8:fd:c3:fc:86:45:7d:48:
                    61:40:2d:22:b8:b7:e3:4d:b2:bf:63:c8:bb:7d:50:
                    d2:4b:8e:c9:d3:a8:ec:cc:b9:4a:4c:9c:3a:b7:a7:
                    5b:f7:23:c6:51:13:05:d8:b5:50:8f:15:6c:ab:cf:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:15:95:A6:D5:F1:AD:63:09:EC:94:D9:3A:BC:48:35:09:16:DB
            X509v3 Authority Key Identifier:
                keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:c6:29:8c:b8:18:17:6f:77:23:fe:af:4b:74:16:02:68:
         2d:4b:fb:41:3d:f8:e8:a1:81:5c:e9:d2:38:a5:70:a6:6d:6c:
         52:e0:93:f3:9d:0d:23:df:8a:07:54:77:31:60:2c:16:db:f5:
         1a:3c:2d:8a:78:a6:77:fe:68:71:15:7a:10:d8:04:d5:25:95:
         8d:aa:fd:1e:21:77:7f:89:4f:02:a2:9a:c1:b2:df:92:46:05:
         ba:4a:b6:90:2d:c3:56:eb:d7:89:34:87:c4:95:2b:ca:b4:c8:
         69:a4:49:a7:36:0c:57:d3:a2:d7:96:61:21:f6:7b:10:f8:af:
         09:8f:49:0d:80:84:55:a9:5c:0f:df:7d:6a:5e:36:94:2f:14:
         59:0f:90:66:11:1f:35:b8:8a:68:8e:7d:91:6e:16:f1:ad:ad:
         f4:de:f8:4d:a4:21:cc:4f:61:b6:47:90:ef:f2:f1:06:b0:e7:
         fd:af:f4:27:e7:f7:91:c3:ce:e3:e1:74:22:81:77:ec:69:d3:
         7b:ea:f3:73:31:3c:0c:53:87:1f:f7:72:5a:5e:90:db:f0:44:
         cf:25:ba:ed:90:1e:77:3c:27:de:f1:e7:b6:61:dc:76:20:31:
         09:5d:4b:be:42:b6:9c:cd:3c:17:65:b2:01:c4:17:13:6e:a6:
         25:e4:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:45 2026 by rpki-client