Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File:                     iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier:          m5iHzoEYjSN4Xju2rf4Nv1/7RCh9ZJjWYovvFsztsyo=
Subject key identifier:   A9:85:1F:04:D6:7A:CF:84:76:41:63:1D:96:68:C1:5B:52:D6:D0:F3
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer:       /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number:          02C0
Signing time:             Thu 23 Jul 2026 02:24:12 +0000
Manifest this update:     Thu 23 Jul 2026 02:24:11 +0000
Manifest next update:     Thu 30 Jul 2026 02:24:11 +0000
Files and hashes:         1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: aOJfbnDzLpi4txEmhTEK/sbcdyv4Yf4Oujk7La4ud/I=)
                          2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
        Validity
            Not Before: Jul 23 02:24:11 2026 GMT
            Not After : Jul 30 02:24:11 2026 GMT
        Subject: CN=6a617b4c-6520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:3e:18:69:c5:e2:98:8d:38:f8:e1:3c:80:
                    61:2b:24:2e:d0:1c:44:53:d5:4a:6f:82:93:cd:0f:
                    1d:45:8e:d0:75:3f:61:11:82:6a:a3:07:2a:2d:f3:
                    39:06:8d:63:16:57:6a:55:48:2e:53:76:06:85:81:
                    28:eb:6e:ab:89:88:d3:62:4d:35:67:6b:62:86:82:
                    d6:bb:f5:83:74:59:7b:09:96:53:2e:c1:dc:06:85:
                    f8:d1:95:c0:92:ff:b6:32:99:8e:b1:00:14:f5:55:
                    61:09:8f:c3:f9:31:c1:61:c8:8c:3e:80:c0:6c:af:
                    c3:0d:22:29:9c:f4:50:1c:a5:18:30:ac:ca:89:8a:
                    41:88:31:41:b7:48:f6:2e:27:36:94:2e:dd:49:51:
                    6a:8d:fe:cc:80:85:9e:0a:44:c9:5e:86:8d:21:31:
                    82:f1:b5:58:2a:a5:42:7c:c3:95:3a:fd:55:0c:c0:
                    81:df:ec:06:8a:4c:74:77:14:e4:04:49:10:ad:ad:
                    2b:b1:85:01:91:84:3c:c2:e2:f9:fa:76:a6:12:ed:
                    97:5b:46:a0:6b:14:22:30:9d:68:0d:96:12:1e:76:
                    6f:b9:ab:cf:80:54:60:6e:ed:66:68:47:58:6b:0d:
                    81:95:b9:9f:d6:3d:f0:10:30:ef:7f:ba:ee:4a:2c:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:85:1F:04:D6:7A:CF:84:76:41:63:1D:96:68:C1:5B:52:D6:D0:F3
            X509v3 Authority Key Identifier:
                keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:ce:86:7f:7a:ee:99:66:d4:da:50:68:bd:f3:9d:ed:e9:
         3a:a3:23:87:fb:6b:30:a8:89:43:14:c7:e1:b6:32:c0:d3:4a:
         8b:67:18:95:4a:31:6e:fc:e3:ff:38:0c:b2:ed:a2:cb:a2:a7:
         34:e8:a8:11:8c:f0:a1:e5:81:0a:da:c6:31:fe:21:38:52:04:
         5e:cd:47:2c:30:a0:86:0e:8f:da:27:31:d5:77:56:9d:e0:57:
         35:4a:7b:d6:e7:48:02:1f:e0:4a:db:55:03:63:f2:c6:30:59:
         90:84:72:90:ad:cd:fe:b4:13:03:c1:7f:63:68:bc:c6:ee:9a:
         55:a0:e7:11:0c:83:e3:ce:dd:b7:d6:aa:0a:1d:fa:57:32:50:
         a4:ca:f7:54:ed:bd:8a:ee:ef:dd:c2:f9:25:36:5a:92:13:33:
         b5:99:d0:48:5d:6b:31:4c:dd:85:a2:7c:10:83:87:9e:56:3d:
         73:ce:d5:74:3b:e9:ca:ff:98:5b:a8:24:60:93:d9:65:0b:59:
         20:63:04:4f:0d:56:13:94:35:c5:cc:8d:45:f1:e5:48:98:f7:
         43:25:fe:d2:8c:f9:d9:cd:c9:75:30:ad:25:99:6c:ac:7a:5f:
         f0:94:4f:74:d7:8b:b6:45:6d:81:26:fb:7d:56:26:60:e8:8d:
         16:a6:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:31 2026 by rpki-client