Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File:                     dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier:          9JGXu3oKTBsSCDmoKenerDl07aY+o6i2CmZw03Yajzw=
Subject key identifier:   B0:01:B1:94:D3:86:01:74:AA:97:75:BC:4F:08:58:61:71:E6:11:83
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       094B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number:          093F
Signing time:             Tue 18 Aug 2026 20:31:18 +0000
Manifest this update:     Tue 18 Aug 2026 20:31:17 +0000
Manifest next update:     Tue 25 Aug 2026 20:31:17 +0000
Files and hashes:         1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: 2fCmkbegp+E9NE5ySKFM1NzonNo/L811l/w1a18ySK8=)
                          2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: qKTt9ATlz/vyXKRzdg+bUvwyPMjVccPyHDh5rJ6vtFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
                          rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379 (0x94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: Aug 18 20:31:17 2026 GMT
            Not After : Aug 25 20:31:17 2026 GMT
        Subject: CN=6a84c116-d86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:26:ff:fe:ef:ed:9b:2f:63:80:c8:7a:05:
                    57:24:31:dd:11:73:68:ce:e6:38:b5:c2:63:f9:66:
                    1e:11:d8:f0:2f:9a:9f:f5:0d:16:01:c4:25:04:da:
                    03:8c:6b:0e:93:55:8c:56:ee:db:67:2a:3b:93:89:
                    95:4b:04:dc:bb:26:fb:b1:31:ca:81:3a:2e:3c:e9:
                    16:03:f0:91:df:43:5b:d0:93:d1:57:ad:1e:a0:55:
                    96:b5:c6:ec:95:81:b8:ba:fd:8c:c1:a1:e6:45:39:
                    92:a5:0f:97:2d:ac:f6:95:3f:55:77:8a:ec:72:9b:
                    3a:cd:72:96:a2:b4:dd:e8:af:50:0e:0f:f8:1b:fe:
                    db:3b:ed:51:e2:70:33:5a:1b:af:73:c4:ca:90:08:
                    d4:03:56:0b:c6:6e:84:84:3e:cb:06:b0:e9:2f:d9:
                    61:80:48:a8:ce:9a:0c:32:4a:d4:87:ab:0a:be:00:
                    e5:c8:c0:a6:9a:f7:9d:78:9f:53:1e:11:24:59:9b:
                    37:80:c1:57:e8:0d:85:80:64:96:4f:d4:d8:96:d4:
                    69:6d:ba:04:7e:30:af:a4:98:64:c2:a6:bc:83:f4:
                    db:2c:28:59:d0:bf:87:4d:68:46:9e:44:98:40:05:
                    9f:8a:3f:66:54:b4:2f:d6:82:11:7a:92:6b:44:52:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:B1:94:D3:86:01:74:AA:97:75:BC:4F:08:58:61:71:E6:11:83
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:cf:12:a2:c7:b5:73:6f:0c:2a:e2:97:b8:56:ca:87:d2:c0:
         bb:95:ea:59:f1:60:b8:85:5d:b5:48:11:31:b4:17:dc:c2:e7:
         65:42:ec:fe:c9:ae:3b:63:96:c5:b1:a0:2d:cd:c2:c8:63:aa:
         bd:dd:23:9c:dc:81:1a:c2:84:3a:38:89:b6:16:ee:25:97:12:
         4c:b6:c7:73:b0:ef:6a:ba:6e:c8:c2:9e:d5:c5:75:37:07:a3:
         e6:3a:f3:ee:43:72:dd:ee:bd:ea:57:28:79:66:f0:ea:f0:d8:
         62:5f:b6:d3:12:15:0a:42:c9:2f:e4:97:2c:e6:23:e4:91:78:
         73:27:f6:94:a0:aa:68:fb:57:77:6d:e8:f6:72:12:12:ce:ea:
         a5:95:8a:41:1b:46:e7:bf:aa:6c:b6:f8:ff:65:eb:7b:88:d1:
         91:35:40:9b:5d:a4:68:25:f1:19:ed:10:e8:ca:a9:75:cc:02:
         54:b5:7d:46:40:7d:4f:0c:9e:fe:59:fd:3a:ab:78:89:64:3a:
         8b:ed:52:98:7f:e6:12:ba:bd:54:f4:0a:3d:5e:69:24:e6:4e:
         d5:d7:7a:95:5a:d4:f1:76:fa:a8:43:b9:d8:9d:9f:87:99:d0:
         f9:81:05:d0:da:98:f2:68:8c:43:99:00:32:b0:94:4b:7b:c4:
         59:4d:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:39 2026 by rpki-client