Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File:                     IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier:          vrmvY9yzvQUnRE4BFQ1iuUvbhIQq+2h1xX8TCrzyipQ=
Subject key identifier:   D1:99:E0:66:E0:DF:E4:8A:2E:A2:F5:76:95:AE:95:73:E7:70:55:D5
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer:       /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial:       0791
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number:          0745
Signing time:             Sun 14 Jun 2026 21:58:06 +0000
Manifest this update:     Sun 14 Jun 2026 21:58:05 +0000
Manifest next update:     Sun 21 Jun 2026 21:58:05 +0000
Files and hashes:         1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: eBOg16+LQ/BcjsGR+njf3iNX1M1iXFKddChvwGFPAO8=)
                          2: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: GZPk+z2xKk+h7BjajU40ooW3BALI+9amXS7D2eVeUI4=)
                          3: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=)
                          4: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: rQhMSDBbxcSI6MB5lHu+8q8Nh6WWXRx41SB2RuJ5eQo=)
                          5: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8=)
                          6: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: 6caEdCnhzmI2hwVR8XFxrGjD5Z484ugUGSA346QGS2I=)
                          7: 3CEA8114429511F1AFCCDC75B2833773.roa (hash: ZPrkUcTW0dkUrha+IDL+C0J+DeJogup9DGfp3ayHM4Q=)
                          8: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps=)
                          9: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: trmRq5WmOXOs/y5qTNJdndK+x4aDzPI8UTGr6I0y6to=)
                          10: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70=)
                          11: A08AFBB284F211EE89828225C4F9AE02.roa (hash: vbG5EXXlgYlGq5jnBwc913dKTc7sUfrG2TC/jANpYLY=)
                          12: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: RtrKmXveYib5rppP1DIWCcPNm3D6+Flm33UJR0UA860=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 21:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
        Validity
            Not Before: Jun 14 21:58:05 2026 GMT
            Not After : Jun 21 21:58:05 2026 GMT
        Subject: CN=6a2f23ed-0a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:68:93:3b:6a:a9:6f:0a:e1:07:ae:fc:51:
                    21:b6:58:c4:67:4a:36:1b:7a:d0:06:cb:31:4a:74:
                    27:f0:29:d9:95:dd:41:32:ac:ba:b7:7e:8b:c9:53:
                    70:7b:f0:a6:68:bb:93:42:87:15:28:4b:cc:0f:b2:
                    88:6a:0c:09:bf:97:97:44:58:27:1a:d9:12:f4:25:
                    e4:c4:c1:21:12:f3:8b:b1:e0:c5:9a:3f:f6:15:f5:
                    57:6b:6a:b5:d7:5a:fe:ea:8e:d7:ec:d6:92:80:b1:
                    43:a8:00:eb:47:1e:70:cb:c5:93:8d:06:dc:1a:ee:
                    7f:17:4f:87:65:0b:95:39:50:b7:a8:f4:29:ab:e4:
                    19:49:c7:19:c8:f5:ba:89:8e:02:41:77:1c:97:4d:
                    fc:8e:b7:a2:d8:85:52:c4:34:4f:5a:e5:77:2d:1f:
                    60:97:53:22:54:7c:54:c3:0c:b7:f9:eb:ee:20:83:
                    2c:c5:9e:d2:b5:aa:34:db:82:33:4f:2f:d6:14:4c:
                    f4:f8:9f:b8:ed:d2:2b:d9:00:3f:17:3e:03:e4:45:
                    f3:25:eb:7c:68:58:98:88:21:2e:02:23:5b:1e:6b:
                    f1:ec:25:3a:a5:c7:7f:62:fd:47:d3:64:63:38:df:
                    c2:08:8f:a9:7b:73:39:cf:ef:ff:47:dd:8a:17:37:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:99:E0:66:E0:DF:E4:8A:2E:A2:F5:76:95:AE:95:73:E7:70:55:D5
            X509v3 Authority Key Identifier:
                keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:c7:23:28:80:33:dc:4a:3e:23:6a:cd:42:a4:21:f4:e2:
         73:ca:ab:a6:4f:dd:8b:d6:59:21:16:d7:80:9d:53:76:1a:30:
         c8:e8:46:0a:7e:40:50:80:ed:d2:14:46:ac:63:ed:b3:0b:76:
         ef:2f:63:0b:a1:18:ef:ee:f3:42:a2:85:45:c2:aa:84:24:be:
         8f:96:13:94:62:3d:77:c4:7f:bc:f0:1d:42:f4:5e:b7:a7:da:
         81:b0:d5:41:8e:59:74:0e:aa:34:d6:b1:da:e4:97:5c:3f:80:
         02:c2:e5:87:7d:c9:c4:5b:e5:0d:42:77:60:12:d8:be:83:5b:
         7f:ca:60:d0:83:cc:44:81:6a:a0:0e:5e:12:2c:92:18:11:80:
         9f:d7:c7:7d:9e:f2:4c:75:f7:7b:09:dd:a3:e6:1a:46:85:4a:
         63:75:dc:26:bb:0f:90:fe:7a:de:da:48:2e:f2:1a:f4:f6:f9:
         d6:76:47:a2:f2:fa:ed:39:bd:06:02:aa:d8:48:e6:f0:16:83:
         e8:76:0c:6e:6a:44:bc:b9:12:20:6e:05:27:c5:a3:f3:4b:e2:
         fb:ec:d6:6d:a6:47:9e:65:46:10:92:87:5d:d7:cb:6b:3f:ef:
         5a:71:aa:88:49:96:41:76:cd:e1:a5:b0:34:62:4f:fa:1c:27:
         07:8f:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:46:46 2026 by rpki-client