Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
File:                     mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json)
Hash identifier:          eHYGQJRz1AygPtsUZJQc3TCeOfed+P8WvmdnEvTTUHc=
Subject key identifier:   82:69:3C:E4:5A:83:C1:82:EB:65:BA:64:22:AD:8D:F0:5D:04:03:17
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Certificate issuer:       /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
Manifest number:          5A
Signing time:             Tue 21 Jul 2026 10:08:56 +0000
Manifest this update:     Tue 21 Jul 2026 10:08:55 +0000
Manifest next update:     Tue 28 Jul 2026 10:08:55 +0000
Files and hashes:         1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: LBHj3bcpccRoPooEYy2EDiazl8Ku+WDAOl12gcMySeg=)
                          2: 198EDB1034E511F1828F838E91833773.roa (hash: 5rQyQHbY+5t3PI7uWTPeIpLhKz0IBw52hEVYsHCpwMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
        Validity
            Not Before: Jul 21 10:08:55 2026 GMT
            Not After : Jul 28 10:08:55 2026 GMT
        Subject: CN=6a5f4538-adfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:e2:24:d2:dc:58:cd:f0:3c:21:0b:b8:f3:
                    ce:99:6b:9e:ac:56:a4:ef:c6:74:10:ba:f8:e5:2f:
                    ae:18:97:3a:60:cc:48:4c:eb:ff:ce:69:aa:59:71:
                    e1:af:63:d6:f6:30:f6:48:9b:d6:e4:25:a5:c4:29:
                    f2:fb:de:13:31:6c:f1:f6:34:6d:40:4c:97:af:1e:
                    9b:b5:26:e8:34:de:62:5e:4c:22:cf:f6:32:36:3f:
                    a4:bd:e0:95:13:2e:3e:14:82:db:08:32:85:59:4d:
                    77:dc:3f:f6:f4:59:90:c8:d6:a3:e5:6e:18:6c:5a:
                    38:07:fb:ed:75:d0:9b:64:c0:74:c1:82:de:dc:a6:
                    7a:84:0d:b3:a4:39:f4:cd:41:da:dc:38:ff:6c:f6:
                    32:90:23:2f:48:ef:c6:57:aa:f0:96:c0:51:f3:fa:
                    5e:77:d3:09:98:50:93:2f:c8:fe:56:39:12:63:2b:
                    69:01:2b:81:80:88:03:b3:47:97:d1:2f:21:8b:35:
                    4e:4d:9a:c4:d5:d7:cd:08:d1:66:cc:fd:d8:7f:f4:
                    c0:94:fd:cf:95:ac:fc:a7:7d:77:ac:1b:fc:2c:57:
                    07:27:69:0b:ce:04:4b:2d:0f:16:b0:94:93:16:35:
                    4c:25:88:b4:1e:29:ad:a2:96:7c:ae:24:67:b2:b3:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:69:3C:E4:5A:83:C1:82:EB:65:BA:64:22:AD:8D:F0:5D:04:03:17
            X509v3 Authority Key Identifier:
                keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:54:99:65:8c:34:3a:2f:a9:f6:1d:b1:78:a0:0e:1a:08:59:
         c5:5d:3d:e9:e6:7c:55:a4:0d:31:16:d2:f2:81:2e:ad:1e:0d:
         6e:85:40:f2:95:8b:47:83:8a:b2:d2:46:7e:b8:70:82:1a:95:
         9e:e3:cd:41:18:8a:f4:f3:e3:63:bf:e3:93:1f:28:91:59:5b:
         b5:94:a8:33:35:53:49:48:69:8f:c9:8a:c9:47:b2:8c:bf:d7:
         97:0b:be:15:c6:d8:4c:c6:bf:65:52:5d:92:6a:1b:08:df:32:
         67:22:db:97:66:7b:91:b4:ae:eb:1d:91:70:2c:85:6b:5b:e2:
         e4:84:4c:b7:ee:3e:cd:8f:84:5b:e5:9c:47:f3:9e:32:ad:ad:
         c7:3b:68:42:45:a9:4e:c2:d3:2b:c7:a7:23:8e:33:ec:1d:d1:
         67:f1:f0:c8:3a:f5:db:18:4c:81:f7:5f:fe:4c:0c:21:28:d6:
         56:3b:e4:07:a7:ce:d7:4f:a7:ed:39:63:9d:e3:fa:49:1b:bb:
         43:73:95:14:ec:6b:32:b4:a6:59:0b:d0:58:6f:cd:ab:fb:5d:
         49:24:f1:f2:15:0b:e7:d5:31:b4:61:f1:25:51:27:59:be:d7:
         24:b5:9f:12:de:98:de:7a:5b:b5:46:61:6f:2b:9b:c0:1c:a4:
         41:24:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:57:47 2026 by rpki-client