Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File:                     a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier:          Odt7itAVqMg7iohlQSjDS0eWPI76pGSZwB/7lt/rPpI=
Subject key identifier:   33:4F:18:D5:D6:9E:D1:1C:29:2E:0A:04:27:46:D6:A7:E2:14:7C:74
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer:       /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial:       17EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number:          2202
Signing time:             Wed 22 Jul 2026 16:38:21 +0000
Manifest this update:     Wed 22 Jul 2026 16:38:20 +0000
Manifest next update:     Wed 29 Jul 2026 16:38:20 +0000
Files and hashes:         1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: hepsDQhgXXymEZubhpl0EOMucIi9Wjve6ayhQxubcZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
                          rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6123 (0x17eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
        Validity
            Not Before: Jul 22 16:38:20 2026 GMT
            Not After : Jul 29 16:38:20 2026 GMT
        Subject: CN=6a60f1fd-93ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:94:6f:d0:f9:98:8d:4f:0f:83:5e:e5:6f:
                    17:30:1e:a8:ab:6a:49:bc:b9:68:fc:c5:3a:c1:94:
                    78:ab:ec:69:b5:2b:fb:81:98:6d:31:b5:a8:69:a5:
                    5e:58:3f:5e:12:b6:41:ea:c8:5b:40:4a:ee:05:47:
                    c7:be:07:23:a4:d8:67:2c:64:83:f9:76:cf:92:4b:
                    14:2c:42:46:d7:f8:a5:b9:fa:31:04:a7:5a:b1:d0:
                    3e:19:cd:3c:37:9f:f4:b3:ec:02:50:2b:b8:59:72:
                    72:65:91:98:94:26:c5:44:97:f3:f5:9d:fd:09:6e:
                    01:45:fb:cc:83:16:ea:fa:d7:59:e8:bf:43:f5:24:
                    9d:de:6d:8a:8d:08:fa:9e:ab:9a:6b:3a:c4:f8:89:
                    f1:ae:31:82:1d:27:73:3a:da:35:04:04:d3:66:22:
                    4e:f5:08:9a:c1:10:46:1a:9a:c4:bc:a9:25:26:d8:
                    ef:91:6e:3e:2a:ab:0a:e0:5b:aa:49:c6:3d:97:b8:
                    a9:05:cb:c4:ea:56:5f:e5:e5:92:7e:fc:8a:ba:31:
                    c2:df:84:3b:63:7b:fd:f7:3c:f0:5e:03:a2:92:62:
                    d0:82:d2:3b:f6:af:a6:20:4b:29:b5:19:ca:9d:1f:
                    f0:01:e6:4b:80:c9:85:04:76:c1:0d:cf:49:3c:0e:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:18:D5:D6:9E:D1:1C:29:2E:0A:04:27:46:D6:A7:E2:14:7C:74
            X509v3 Authority Key Identifier:
                keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:66:58:12:1b:6a:d5:ed:eb:8a:75:90:1d:fd:20:f0:32:dc:
         c5:97:6a:7a:f0:2c:ab:b9:9c:27:4c:dc:ca:fd:7f:2c:87:da:
         57:53:d0:d6:7b:fb:2a:ca:e1:45:e4:04:f6:e1:a0:bf:d3:fe:
         c7:ae:73:17:1f:42:13:47:34:67:bb:a6:72:cd:a4:84:f2:51:
         94:58:53:5b:53:29:04:b6:49:73:1d:83:c6:c1:44:97:c9:6c:
         29:8e:1b:d0:9f:10:3b:8b:72:1c:02:fe:92:e9:93:1f:0d:96:
         5f:23:d5:3c:ba:08:f7:ae:2a:47:97:b8:cc:84:cf:8d:f2:ed:
         c8:da:a7:7f:64:37:05:a1:77:8f:96:0c:77:87:d6:9e:99:2a:
         91:b5:b2:a9:e2:4e:5c:bb:c5:e6:1e:21:59:fe:2e:6a:79:5b:
         b2:93:39:39:b7:36:ae:cd:ba:e3:76:2e:17:04:9e:08:e6:c3:
         1e:98:5d:57:e6:c9:26:b4:6f:7b:a4:0e:5a:48:d0:1e:4e:ef:
         a6:82:9e:81:df:b8:71:0c:42:b8:dc:38:04:43:f0:30:33:20:
         07:25:71:20:15:6a:f8:28:6e:9d:e9:cd:5b:03:f3:29:8e:a4:
         7b:8e:55:27:72:2f:6e:ac:f6:31:55:51:3f:44:fd:24:48:23:
         3b:73:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:15 2026 by rpki-client