Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File:                     i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier:          1T8J54kaEDCpeR2OUAXECtD+nFgv4CHJHc+HnVttd8E=
Subject key identifier:   67:1D:F2:56:35:54:BC:DA:80:DF:B5:46:8C:AB:11:D7:C6:0F:E7:1A
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer:       /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial:       02F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number:          02E7
Signing time:             Mon 03 Aug 2026 02:00:39 +0000
Manifest this update:     Mon 03 Aug 2026 02:00:38 +0000
Manifest next update:     Mon 10 Aug 2026 02:00:38 +0000
Files and hashes:         1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: 6Xti4ZYh6CriytG63jDBSv/yAc6xjj3fdtIEXPRTfuE=)
                          2: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: QQORdPKkCBGXWBMZkno+T8u87+gp990frsFu1rUngIM=)
                          3: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: vysf+JOpL7OvntYiYikMIsDz8nEsAs8IBD8OzimL+Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
        Validity
            Not Before: Aug  3 02:00:38 2026 GMT
            Not After : Aug 10 02:00:38 2026 GMT
        Subject: CN=6a6ff647-34c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:d8:48:8b:ec:b2:ec:b2:e5:7d:59:27:02:
                    7f:b4:ed:62:77:20:a7:62:04:1d:63:ae:47:fe:d2:
                    d7:9c:43:d7:39:c3:c4:6b:3e:60:71:86:97:36:06:
                    62:c3:ba:4a:2b:97:f8:11:04:34:02:9a:69:17:a6:
                    f9:10:76:ea:5f:2a:03:8c:10:5b:d3:f5:69:98:1b:
                    25:75:e2:da:cd:01:ea:57:10:23:97:29:46:1a:62:
                    66:b2:97:8d:38:6b:18:22:c1:1a:f3:d0:0b:55:3b:
                    da:d9:49:99:9d:37:1c:ad:a7:38:c8:37:8a:98:dc:
                    9a:39:53:36:80:22:b9:e7:97:eb:3d:80:f7:65:43:
                    70:95:2a:42:96:33:4e:5a:53:bc:75:5b:00:21:d1:
                    6b:57:68:2f:52:d1:85:d3:84:4c:16:ec:d9:f6:0b:
                    de:17:3a:29:8b:06:8a:58:de:1c:4f:31:80:1f:b2:
                    d3:b5:9c:5a:c3:d0:7f:6c:a5:0a:13:67:b1:4e:b2:
                    6a:86:5c:b7:64:26:4c:42:05:f7:15:e3:67:bd:ee:
                    7a:9b:12:27:b0:d0:3e:86:17:49:b5:d4:b9:e4:9e:
                    87:e9:76:55:d2:8f:f1:fc:4c:c8:b5:f5:78:da:ff:
                    62:12:0f:ad:3b:24:e0:ba:a7:22:27:1a:4a:88:b2:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1D:F2:56:35:54:BC:DA:80:DF:B5:46:8C:AB:11:D7:C6:0F:E7:1A
            X509v3 Authority Key Identifier:
                keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:40:f3:a8:69:95:ca:9a:41:ae:8d:98:bf:ab:00:25:44:
         a5:c1:5d:03:81:37:41:82:22:d5:c1:c3:18:1f:96:85:3d:c2:
         72:11:d5:53:08:ab:6c:9a:ca:64:b6:21:a6:4c:60:e4:98:7b:
         a4:59:dc:a0:aa:36:81:27:8d:cf:3d:44:dc:39:e2:4a:45:b4:
         8f:f6:60:d8:b1:7b:9c:90:ce:c2:6b:17:38:16:0e:bf:41:0d:
         3f:d6:78:40:ea:3c:68:9d:24:d9:68:28:16:18:c9:9b:86:c0:
         d7:7d:54:82:c5:fb:dc:57:d2:4f:39:10:73:b1:a4:ca:a6:38:
         4d:8f:23:67:63:43:55:07:32:8f:71:fc:8f:4c:83:21:b7:d9:
         05:2e:ec:ec:95:c9:ab:71:bd:bc:e6:68:3c:74:50:be:f7:97:
         12:fb:61:76:a1:56:f7:e5:bd:db:41:0f:44:91:c6:3a:0f:0f:
         b8:a4:37:14:5c:0e:c5:c8:35:9a:32:4d:06:3a:bd:8e:f9:13:
         94:47:e3:df:c9:14:81:54:5f:68:bb:b1:b0:95:18:2d:78:17:
         fc:5d:01:f0:db:f6:b6:62:03:a2:0f:fa:ca:de:00:1d:c8:15:
         36:f6:3e:5a:5b:30:8b:86:c4:9d:4b:d1:4d:8f:fb:75:3f:e7:
         d6:6e:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 22:50:33 2026 by rpki-client