Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
File:                     T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json)
Hash identifier:          vPFs4JZXayDn56o3juyiY6JEz4vYn4vgkJOhdQisMW4=
Subject key identifier:   66:61:E2:4D:9D:8A:53:25:3A:97:A8:00:B4:84:3F:B0:E2:25:C5:18
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Certificate issuer:       /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
Manifest number:          0140
Signing time:             Fri 17 Jul 2026 06:37:23 +0000
Manifest this update:     Fri 17 Jul 2026 06:37:23 +0000
Manifest next update:     Fri 24 Jul 2026 06:37:23 +0000
Files and hashes:         1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: XFPJxdosn1gta/OA7VVInKNzRswnCa+7enB18SKEBlc=)
                          2: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=)
                          3: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
                          rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
        Validity
            Not Before: Jul 17 06:37:23 2026 GMT
            Not After : Jul 24 06:37:23 2026 GMT
        Subject: CN=6a59cda3-f868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:e4:e7:92:e3:82:47:93:1b:de:ce:39:5d:
                    75:1f:eb:fb:12:26:6b:68:a6:f1:df:98:2d:65:5c:
                    ab:e0:71:d6:60:e0:b5:0e:1c:3d:23:de:f2:ae:93:
                    83:39:91:87:7d:d0:86:3f:51:7d:58:76:3d:3d:86:
                    b4:0c:4e:f7:2e:96:17:87:98:7a:42:72:5b:cb:66:
                    2c:96:83:c2:b6:0a:c5:90:5f:37:60:c8:05:5a:4e:
                    2e:4e:7d:3a:38:38:5d:b2:d2:36:52:6e:67:f2:b5:
                    5e:d7:0b:1c:bc:14:c4:d4:aa:ec:15:22:22:8e:41:
                    12:d3:ca:56:64:0c:44:60:36:40:9b:e7:3a:bb:a5:
                    91:5f:21:38:12:aa:07:6b:e4:ac:cc:96:41:78:ca:
                    bd:c7:e2:6a:98:1b:2c:db:1d:c6:73:86:c2:cd:fe:
                    03:71:0e:b9:e4:76:ee:31:fa:43:37:23:eb:b8:46:
                    89:dc:1d:91:01:89:72:6f:0e:6b:0a:98:ca:a8:2c:
                    a9:db:33:6a:a8:26:5f:7f:14:7a:eb:2e:fa:7a:74:
                    9d:ba:0e:a4:ab:50:39:ad:89:37:50:6e:b6:8e:8b:
                    e4:75:a6:06:1f:d9:66:7e:f8:25:8e:06:30:cd:05:
                    bd:38:95:9a:b8:3a:ba:e6:0f:c3:08:ba:48:5e:d8:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:61:E2:4D:9D:8A:53:25:3A:97:A8:00:B4:84:3F:B0:E2:25:C5:18
            X509v3 Authority Key Identifier:
                keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:3d:41:ac:53:ce:73:ca:de:48:99:10:8c:fe:9c:26:8e:
         af:6d:69:6f:d4:c9:29:59:c8:98:c7:a6:97:35:20:92:4d:a2:
         b1:56:a6:df:cf:4b:05:9a:7a:b3:29:dc:24:1e:05:74:2e:b5:
         d0:25:44:55:65:43:e5:b3:df:94:56:07:35:4c:62:b8:d0:56:
         0f:5e:c8:c9:71:10:c1:39:02:ad:75:46:a0:a9:f9:7e:50:08:
         c7:52:4a:06:34:0b:34:d5:2b:c4:81:07:b7:9c:12:dc:dd:1f:
         c3:a3:68:2f:f9:ca:d2:05:c7:94:ae:01:84:22:9b:b6:b7:16:
         96:6a:64:8a:f3:94:06:b4:fe:60:e7:04:86:f5:7a:46:2f:00:
         7c:72:db:fe:a9:e5:b5:d1:b0:0a:ba:e9:e2:a7:eb:2c:eb:f6:
         dd:04:90:86:c1:6a:b9:de:5f:1b:6f:c1:62:39:cc:eb:9e:a1:
         ae:df:5e:71:c3:1a:e2:c7:b9:d4:f9:03:b0:46:fc:fc:6c:98:
         dc:1a:2c:11:56:af:77:ae:d8:46:92:b9:f4:64:07:78:08:7d:
         59:58:d0:c4:52:36:63:2a:e2:6f:1e:18:bc:2e:1e:84:e8:2b:
         d0:c2:e8:b1:74:fa:42:ba:5e:e6:5a:19:57:a9:ec:a0:e6:bf:
         a9:22:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:22:35 2026 by rpki-client