Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft
File:                     TsOvwYXRL5hOdelqRL-yme8J6kM.mft (raw, json)
Hash identifier:          AlU/ufEpK3RLNObXecDeGG1X5s4jfLUHJBtvDFwMmg0=
Subject key identifier:   59:68:4D:87:F3:E6:4B:4F:55:0D:09:FA:C3:41:C7:1E:B8:BF:C6:2D
Authority key identifier: 4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43
Certificate issuer:       /CN=A91FE40B/serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft
Manifest number:          0C
Signing time:             Thu 16 Jul 2026 18:19:39 +0000
Manifest this update:     Thu 16 Jul 2026 18:19:38 +0000
Manifest next update:     Thu 23 Jul 2026 18:19:38 +0000
Files and hashes:         1: TsOvwYXRL5hOdelqRL-yme8J6kM.crl (hash: 506Qi4Chiy/Sw7DxUuaFJrMGcbb2csr+CxyCqk6xqKU=)
                          2: A409C5D2746611F187F6609D76A30FBC.roa (hash: b9Kx8HZq0zMs0AyS6Dbt8bMXNKwWP5zX6/W0xwn9etY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl
                          rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE40B, serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43
        Validity
            Not Before: Jul 16 18:19:38 2026 GMT
            Not After : Jul 23 18:19:38 2026 GMT
        Subject: CN=6a5920bb-e946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:14:4c:e6:40:5b:f1:b9:1a:30:0c:fd:3b:
                    1d:00:55:32:e4:44:f0:cc:92:24:76:f7:da:78:a0:
                    2d:03:1e:be:22:f3:82:71:f7:3a:82:70:e4:ec:d8:
                    4c:57:a5:99:01:2a:74:0f:db:75:ab:42:f9:eb:9e:
                    ba:24:e7:2c:1b:5f:3f:65:80:fb:47:21:0b:ae:28:
                    b4:a9:75:2b:65:52:d5:a5:c7:26:87:72:31:44:47:
                    8f:0d:35:1c:e2:b8:23:49:96:d4:86:dc:67:85:03:
                    d1:67:d2:28:79:40:32:32:0b:14:90:87:ac:0b:e5:
                    7e:70:eb:6d:e9:cc:d7:f1:36:40:45:55:af:63:44:
                    19:c0:c9:2a:84:25:86:d0:fb:bf:64:88:eb:5e:8f:
                    5c:72:9e:9a:e9:e3:af:44:02:fe:a4:54:ce:96:e4:
                    04:84:f7:cc:39:9b:f0:0d:30:09:3e:14:a7:b0:f6:
                    26:2d:f9:ec:78:12:db:d4:74:48:f6:89:2b:1f:00:
                    f3:60:d9:b1:71:fa:65:47:24:b8:2f:28:12:38:a3:
                    9e:c2:b1:13:f6:88:61:57:c1:72:4b:40:8f:23:ae:
                    c3:af:57:5a:5a:de:f5:aa:68:c4:f8:89:01:f4:79:
                    e4:7c:d6:96:d3:c8:e8:28:ac:5d:6e:4b:cc:f4:bf:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:68:4D:87:F3:E6:4B:4F:55:0D:09:FA:C3:41:C7:1E:B8:BF:C6:2D
            X509v3 Authority Key Identifier:
                keyid:4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:fd:f9:5c:e6:86:73:59:93:06:f6:b8:57:a7:61:74:19:
         65:b8:3e:60:01:a1:c1:a2:29:6c:e9:42:01:d9:8b:63:f4:9d:
         cf:bb:d2:2b:6f:96:c9:f3:c1:19:74:46:8d:40:55:45:2b:f4:
         86:39:7b:be:5d:08:a0:09:1d:b0:a6:50:29:c9:5e:93:cd:f9:
         9e:cd:40:8f:11:5e:8d:b7:89:bd:8d:ae:a5:6e:7c:b7:71:7e:
         f9:2d:30:74:d5:5a:63:6e:e7:c5:57:dd:9e:95:0c:a1:ce:16:
         2c:88:57:f1:ec:19:13:6b:de:b5:1f:b9:d9:9b:14:8b:c9:40:
         a6:35:49:9e:9c:8f:21:08:01:ed:12:60:07:6c:af:7d:1f:cf:
         ee:94:e9:7c:d4:29:68:b4:cc:07:38:f9:90:99:00:e3:68:14:
         9e:47:72:f0:26:02:42:da:4b:2e:2d:87:ce:3f:73:41:ce:83:
         d3:23:98:32:b5:56:1f:33:05:9e:0d:7c:c7:9d:83:94:d8:ba:
         1b:2e:39:6f:e7:91:8b:e1:19:db:9a:f2:ae:a0:00:9b:89:f6:
         3d:18:e3:89:49:23:0e:1f:5a:54:8c:2b:d1:ff:30:54:c8:65:
         91:24:0e:1b:d0:f9:b3:70:11:a6:66:3e:5a:bc:17:78:71:65:
         0a:46:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:41 2026 by rpki-client