Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File:                     IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier:          ugr59t45szPOGdFiy81SowyzaxRkjjhhVAKmJBbvgMs=
Subject key identifier:   22:C3:19:3A:87:39:94:39:F9:4F:47:C1:39:C5:2E:AD:8F:BF:7D:7C
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number:          81
Signing time:             Thu 23 Jul 2026 09:37:11 +0000
Manifest this update:     Thu 23 Jul 2026 09:37:10 +0000
Manifest next update:     Thu 30 Jul 2026 09:37:10 +0000
Files and hashes:         1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: K/FeBLCnW+tuQVGQIEci5ZpopZ6t/oif7X59QZ5VONA=)
                          2: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
                          3: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
                          4: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Jul 23 09:37:10 2026 GMT
            Not After : Jul 30 09:37:10 2026 GMT
        Subject: CN=6a61e0c6-66b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:8e:7a:42:99:be:4a:ef:c7:7b:ed:d6:e4:
                    b2:1b:f7:88:93:c8:b6:8e:55:7a:c2:96:60:04:15:
                    2b:76:e1:10:b9:68:e4:7c:81:4b:6d:27:ed:c1:16:
                    18:ef:57:2f:32:87:00:c2:76:e4:b4:a2:32:72:c6:
                    99:e3:a6:9c:a4:57:1c:42:c0:14:b2:7f:23:46:b6:
                    ac:d9:99:37:af:49:28:a7:e3:57:cd:44:c2:f2:cb:
                    07:68:bf:55:8f:2e:fc:63:86:92:18:6f:4c:c5:8d:
                    ba:67:8d:0c:9c:11:9b:fe:74:c8:d2:a7:07:8a:86:
                    6c:4a:66:a7:f0:5c:1b:b2:96:66:23:92:ec:7c:4e:
                    e5:69:28:91:1f:15:e8:72:a5:e1:a4:5a:7a:6b:0a:
                    d9:dd:b7:23:09:69:fc:c9:4a:c6:72:f5:c7:04:66:
                    f8:5b:fe:bf:89:76:a3:5e:d0:3b:4a:86:3c:07:9c:
                    5d:b1:38:7a:14:93:af:50:16:a6:ce:aa:d4:08:a0:
                    9f:28:b1:e1:a0:1d:df:1f:27:6e:94:63:27:dc:ad:
                    8c:2d:cf:00:94:1f:00:95:25:1d:ec:0a:d1:a8:3c:
                    8d:ba:52:98:f8:6c:4d:a1:d8:24:31:df:fb:5a:4a:
                    77:a7:1a:2d:85:83:9a:b1:ae:b1:3d:3e:2d:ec:2d:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:19:3A:87:39:94:39:F9:4F:47:C1:39:C5:2E:AD:8F:BF:7D:7C
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:40:35:17:ce:03:2c:28:f2:bb:de:b9:03:68:3c:3f:87:37:
         06:66:3a:e2:b1:84:dc:c3:0c:b9:b5:3e:f3:0c:03:13:7e:73:
         74:f4:ef:25:2f:98:42:ff:ab:44:8e:21:25:4d:1b:ab:d3:fe:
         11:1d:24:4d:c0:c1:d3:bc:c1:a0:ca:b9:01:ca:f5:f6:ec:bc:
         74:88:d1:6c:6c:95:1f:7f:00:45:1b:00:fb:9a:89:01:89:26:
         1f:a7:56:7c:1f:15:a9:ab:6a:92:ae:c6:27:f8:83:f4:c4:08:
         9e:3d:e9:82:e3:e3:22:92:7b:61:b1:2c:ad:6a:a5:89:63:2e:
         ea:a8:ff:b1:6e:f8:9d:90:66:14:69:40:19:e9:1e:82:fa:d0:
         28:61:7b:d7:dc:b3:fe:4d:fe:73:84:5b:17:61:3d:ca:65:3f:
         9d:4a:43:df:2c:e7:68:2d:ef:7c:59:71:94:90:45:35:4b:65:
         b7:be:ea:7e:42:b3:6e:ee:59:06:44:18:fb:a2:37:af:59:b0:
         1d:26:a5:4a:83:12:43:e4:cc:0d:e2:b9:28:57:d6:ac:e3:07:
         84:9d:37:a4:00:55:89:26:17:04:22:d5:a6:96:be:b1:68:91:
         1e:4e:73:c9:3c:c0:22:38:85:00:a4:66:6a:81:d5:96:3b:4c:
         0c:65:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:26 2026 by rpki-client