Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File:                     iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier:          RoP0YHGpW+fZZFv63Gzn3esPC4MYHZy0LuDrBcU0Ib8=
Subject key identifier:   47:D2:5F:83:93:22:AB:D6:93:80:1E:AA:F1:A7:74:57:78:01:71:D4
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer:       /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial:       07A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number:          078B
Signing time:             Sat 24 Oct 2026 21:35:17 +0000
Manifest this update:     Sat 24 Oct 2026 21:35:16 +0000
Manifest next update:     Sat 31 Oct 2026 21:35:16 +0000
Files and hashes:         1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: UTMsjugiEJstretUbyZKG2r6MoCQCyf0ZwxLRHUocEQ=)
                          2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
                          3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
                          4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
        Validity
            Not Before: Oct 24 21:35:16 2026 GMT
            Not After : Oct 31 21:35:16 2026 GMT
        Subject: CN=6add2495-69d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:81:71:bc:d0:18:ec:f9:cb:51:12:5a:a5:38:
                    d4:24:cf:49:d8:76:e9:32:2e:63:6e:c9:fa:4c:ce:
                    38:7b:23:c1:14:72:4c:fd:06:9a:d1:d1:be:bf:f2:
                    d3:77:91:40:7a:9a:61:af:5a:3c:3a:a4:a1:1c:bc:
                    eb:08:d3:0e:fe:ed:37:2e:a2:7e:b6:eb:03:f0:32:
                    81:b8:16:2e:6f:58:c5:35:39:44:0c:62:ee:45:9f:
                    86:b9:e5:7d:03:70:9d:7e:19:7c:0a:e5:f1:88:dc:
                    ff:43:c3:f1:e9:45:b9:90:c2:d0:54:3e:90:b4:76:
                    f6:54:61:46:98:99:37:8b:43:d4:b0:43:dd:23:13:
                    40:a9:35:27:f3:26:23:29:20:3a:4d:16:6b:ce:0c:
                    89:d2:48:b5:37:63:89:1f:6a:0a:62:94:7b:46:f4:
                    60:06:83:12:89:bc:5c:0e:b3:1c:13:96:2c:90:24:
                    05:c3:09:32:47:e6:88:2d:15:f7:70:79:c8:41:7b:
                    b1:c4:ae:fd:d7:c1:4c:7d:d1:5a:a7:7d:f0:6a:93:
                    6a:e6:f6:85:8d:05:0f:bb:c9:76:44:23:14:12:90:
                    6b:e4:f2:45:cb:7d:08:23:7f:73:aa:e3:1f:c7:f1:
                    7f:20:7a:b2:25:5f:0e:41:75:b2:5e:01:17:a7:7f:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:5F:83:93:22:AB:D6:93:80:1E:AA:F1:A7:74:57:78:01:71:D4
            X509v3 Authority Key Identifier:
                keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:62:1e:24:53:09:3b:03:57:f0:d1:19:4c:24:74:16:60:
         de:5a:64:81:51:a3:51:7b:6c:5a:60:95:fc:39:7a:f3:ed:b6:
         70:76:60:ed:40:01:34:ae:95:96:25:2d:f7:60:9d:c1:d1:15:
         67:7e:1a:1a:e1:96:a9:b1:5c:0b:4b:b3:a1:e7:79:30:87:19:
         c3:31:98:8a:10:bd:0a:1c:be:b7:d4:24:d9:77:a3:2c:b7:ac:
         6e:8c:4f:47:d7:4b:35:5d:64:29:1b:3b:ac:23:e2:5e:54:14:
         d6:8f:c8:28:7c:1f:69:d6:22:a2:cc:42:36:f9:f9:2f:aa:23:
         f7:d1:8b:26:18:8d:4b:e2:95:b1:ff:f2:1d:d8:b3:08:c6:f7:
         17:35:55:89:d9:2b:8c:95:1d:a2:3d:b0:7b:9c:04:9f:da:9d:
         cc:e8:6a:d5:bf:79:b8:6a:13:b2:f6:9a:ea:f1:24:91:6a:ce:
         05:97:0d:1a:26:22:ce:93:65:a7:17:a5:26:5a:32:b8:fb:07:
         f8:17:d6:92:6b:e6:97:b0:90:2a:15:95:29:d7:ea:f7:0b:60:
         aa:a7:27:7e:a5:48:5e:3f:89:ae:0b:8f:86:26:5f:be:8a:4b:
         49:17:1c:4e:75:12:a4:29:a0:a0:6e:0d:42:84:0a:56:4c:6a:
         1a:32:1b:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5
MTZDN0I0RkQwHhcNMjYxMDI0MjEzNTE2WhcNMjYxMDMxMjEzNTE2WjAYMRYwFAYD
VQQDEw02YWRkMjQ5NS02OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IFxvNAY7PnLURJapTjUJM9J2HbpMi5jbsn6TM44eyPBFHJM/Qaa0dG+v/LT
d5FAepphr1o8OqShHLzrCNMO/u03LqJ+tusD8DKBuBYub1jFNTlEDGLuRZ+GueV9
A3Cdfhl8CuXxiNz/Q8Px6UW5kMLQVD6QtHb2VGFGmJk3i0PUsEPdIxNAqTUn8yYj
KSA6TRZrzgyJ0ki1N2OJH2oKYpR7RvRgBoMSibxcDrMcE5YskCQFwwkyR+aILRX3
cHnIQXuxxK7918FMfdFap33wapNq5vaFjQUPu8l2RCMUEpBr5PJFy30II39zquMf
x/F/IHqyJV8OQXWyXgEXp3/UkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfSX4OT
IqvWk4AeqvGndFd4AXHUMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB
ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w
YjVlYUpZWFBKenlSYkh0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACKtiHiRTCTsDV/DRGUwkdBZg3lpkgVGjUXtsWmCV/Dl68+22cHZg7UABNK6V
liUt92CdwdEVZ34aGuGWqbFcC0uzoed5MIcZwzGYihC9Chy+t9Qk2XejLLesboxP
R9dLNV1kKRs7rCPiXlQU1o/IKHwfadYiosxCNvn5L6oj99GLJhiNS+KVsf/yHdiz
CMb3FzVVidkrjJUdoj2we5wEn9qdzOhq1b95uGoTsvaa6vEkkWrOBZcNGiYizpNl
pxelJloyuPsH+BfWkmvml7CQKhWVKdfq9wtgqqcnfqVIXj+JrguPhiZfvopLSRcc
TnUSpCmgoG4NQoQKVkxqGjIbbw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:31:23 2026 by rpki-client