Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft
File:                     rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json)
Hash identifier:          J5UG/cMJLYGhefietAecT4fxfZ1rMiRW+oOaWz0DFY8=
Subject key identifier:   8E:FC:BF:6C:B7:C2:1D:A3:4F:4B:75:85:49:10:2B:C3:C5:4C:BB:43
Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC
Certificate issuer:       /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft
Manifest number:          9F
Signing time:             Fri 17 Jul 2026 08:28:14 +0000
Manifest this update:     Fri 17 Jul 2026 08:28:14 +0000
Manifest next update:     Fri 24 Jul 2026 08:28:14 +0000
Files and hashes:         1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: UOgSQtluKhvMHsXr71TzgzgnFEU88qPdA42oYuCNSbA=)
                          2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: TEkM5L9gYDSbXl7l7QCjyJ+tRJyP8a0ZBB6nUCwEyKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC
        Validity
            Not Before: Jul 17 08:28:14 2026 GMT
            Not After : Jul 24 08:28:14 2026 GMT
        Subject: CN=6a59e79e-3d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:bf:cf:d3:62:08:eb:42:f7:23:9b:50:1d:
                    90:8d:bb:e4:71:f4:2d:b4:ef:23:40:60:9f:42:2d:
                    42:57:59:0f:df:11:4d:f8:58:e6:39:50:dd:38:f2:
                    eb:5c:5b:cc:be:0a:d5:e1:8c:1a:26:31:f3:0c:3f:
                    ea:a5:9e:e1:c2:53:6a:47:06:dc:71:cb:a0:07:b0:
                    f5:85:82:29:ce:ee:28:78:a9:e5:0e:ed:66:45:32:
                    97:ec:94:53:99:13:53:31:96:5c:e0:69:69:b1:af:
                    6a:9e:ed:83:4a:cb:4c:82:28:9b:72:19:03:f2:0a:
                    39:bb:ed:5a:f4:a3:03:20:41:46:10:a2:9e:bb:4f:
                    56:28:eb:8d:ac:3c:fc:44:82:b3:44:96:3b:87:c3:
                    5c:f3:db:13:e0:54:25:99:c0:fe:6e:89:79:2c:c1:
                    c7:a8:fa:6d:00:bf:8d:46:04:43:42:9f:fd:36:c3:
                    c7:87:8b:94:a2:40:39:78:2b:c5:05:49:20:7b:e7:
                    1f:76:d0:26:c8:bd:7e:31:ab:69:71:e6:79:5e:d6:
                    bd:b5:c1:a9:15:1a:71:ec:e5:53:3b:f8:69:83:7b:
                    22:4c:90:b5:54:82:b9:2e:44:03:06:1f:88:bc:f5:
                    6a:b7:d6:b3:76:40:50:e5:f6:c9:af:73:6c:99:1a:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FC:BF:6C:B7:C2:1D:A3:4F:4B:75:85:49:10:2B:C3:C5:4C:BB:43
            X509v3 Authority Key Identifier:
                keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:db:48:7c:ef:21:76:e7:86:b0:4d:69:54:fc:77:07:d2:
         4d:93:05:eb:a2:14:92:9b:09:8f:64:48:7c:f2:9f:ce:61:51:
         97:06:83:cb:79:96:e2:72:b6:c1:33:8d:c9:25:ab:a9:f9:c6:
         ca:37:0d:c9:a1:f9:c7:98:f3:27:8a:2b:68:fd:37:06:ef:04:
         a1:ca:bb:7c:9a:f6:09:50:4b:80:cf:b2:a5:8c:6d:19:f2:c0:
         90:39:45:08:e9:3e:6d:44:0b:66:a8:7a:60:cd:64:96:d0:1f:
         f0:c9:6f:43:e7:dc:46:ca:75:51:91:c7:5f:db:c6:32:95:04:
         f7:f9:c4:89:bf:9b:5b:19:4e:5d:51:5d:ba:47:13:5f:e7:d1:
         4e:8a:84:e0:46:db:f0:51:8b:e0:2e:23:6f:bd:39:22:2e:5f:
         cb:6a:7b:57:6e:56:55:06:6b:e3:3a:7e:39:7f:18:90:4f:f0:
         34:e0:17:29:82:cf:99:a5:94:0f:f5:78:d6:c9:b8:fb:6a:f6:
         4f:42:5e:aa:6e:30:9b:6f:af:82:4f:89:f4:c2:c4:d6:87:f3:
         c9:63:64:c8:e1:33:12:c6:f5:4e:94:56:ab:02:2c:74:16:a0:
         c2:43:14:c7:94:ce:6d:8e:dd:0f:ff:2d:0d:2d:ea:fb:90:69:
         c7:f2:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:20:51 2026 by rpki-client