Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
File:                     IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json)
Hash identifier:          UIUNzGJUq2mV6T3+YeBWRjYiSHQLWaNSaw2I1CnjITI=
Subject key identifier:   3F:4D:B7:65:9D:59:6B:48:4F:C8:6D:07:13:D0:B3:04:DF:23:26:43
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Certificate issuer:       /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial:       1DB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
Manifest number:          1D9A
Signing time:             Mon 06 Jul 2026 16:10:55 +0000
Manifest this update:     Mon 06 Jul 2026 16:10:54 +0000
Manifest next update:     Mon 13 Jul 2026 16:10:54 +0000
Files and hashes:         1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: GvCGVqbYRRmge1rY05lrv4AI1rTPGlANpj0Om9fqxdM=)
                          2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=)
                          3: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=)
                          4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 16:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7608 (0x1db8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
        Validity
            Not Before: Jul  6 16:10:54 2026 GMT
            Not After : Jul 13 16:10:54 2026 GMT
        Subject: CN=6a4bd38f-bb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:05:c6:10:b6:84:98:36:e7:73:c4:f8:77:
                    8f:82:7c:b1:72:33:0b:24:ae:e1:6f:c6:30:2f:71:
                    b0:ce:04:a8:06:72:7a:37:50:fc:5a:30:ff:20:5a:
                    5f:fb:a9:db:dc:51:90:21:3a:d4:a9:7a:fe:6c:bb:
                    5d:ab:03:1b:ba:35:ec:b5:0e:cd:10:2d:7a:69:cd:
                    3f:f5:38:07:da:01:2a:93:0a:87:8e:68:12:08:8d:
                    11:c0:cc:1a:82:bc:6e:c1:df:37:a7:46:06:41:d1:
                    40:e3:9f:7a:ff:28:47:b9:ce:c4:5f:f5:62:d6:ae:
                    17:9c:9b:7d:9f:67:40:bb:50:07:6e:4e:4a:c4:53:
                    33:82:90:a8:69:a6:76:31:c8:52:ca:0c:d8:37:de:
                    0b:35:17:79:4c:6b:8a:39:ac:88:ab:fa:5a:66:0e:
                    79:a6:4c:07:d2:b1:03:2e:16:2e:ed:fe:73:f6:80:
                    30:b6:b6:f9:dc:7d:4a:1b:8d:ba:d6:82:13:e5:47:
                    8e:8d:4a:b8:59:86:9f:fa:18:d7:94:44:ee:4b:ad:
                    e3:6f:3b:54:3f:d5:15:51:ce:d9:c3:a1:08:74:82:
                    35:e9:20:58:8a:c2:29:9d:f1:d8:d4:4f:04:9b:74:
                    04:b6:f0:95:ec:f3:69:2d:69:26:19:e1:b0:4b:57:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4D:B7:65:9D:59:6B:48:4F:C8:6D:07:13:D0:B3:04:DF:23:26:43
            X509v3 Authority Key Identifier:
                keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:03:a9:f9:ae:a8:d1:32:ce:6c:82:39:88:a1:8f:34:99:
         00:71:a3:ab:d4:5e:06:9f:ed:20:b0:be:4d:f2:66:43:df:6d:
         62:1a:9c:2f:c3:de:b2:25:72:85:a7:ce:2b:4a:b4:c2:8d:26:
         44:c0:c3:cc:56:1e:2c:cf:c0:50:77:a6:df:ca:05:0b:88:1c:
         8d:ec:e7:67:ab:26:19:7c:e2:f9:d6:2c:25:2f:1f:14:9d:4e:
         de:bb:b9:0e:fb:d7:ea:5b:b5:1d:71:dc:1b:35:cd:58:a4:ec:
         11:0c:ef:83:1c:23:61:a6:77:19:54:4c:9b:00:4a:e4:b6:8c:
         68:a1:e5:0d:8e:42:43:be:16:4b:6b:97:52:53:ef:bd:8b:50:
         97:70:5b:78:2b:08:7c:39:bf:a5:81:1e:98:76:89:6c:05:d5:
         76:93:45:4e:76:84:4e:2c:34:32:e5:35:6f:21:52:14:53:19:
         f4:05:29:af:b6:88:ac:6c:b5:be:5b:bb:2c:90:cd:39:07:98:
         c4:66:99:4c:ba:f8:f8:9f:71:05:e5:80:ad:4a:d6:8b:8a:c9:
         6e:a4:c5:e7:11:75:f2:d8:9b:3c:fa:c8:da:22:97:6b:f6:5d:
         e1:1a:6e:ce:1d:ad:ef:90:7a:46:f1:54:50:ae:9b:4b:85:eb:
         79:31:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:49:45 2026 by rpki-client