Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          aVDKBgkVy6ALYoMKTVCq+uLyWvhc2Z/GpxmUhI5YB1w=
Subject key identifier:   83:78:8C:A7:DF:99:19:8D:75:60:2C:9E:F6:54:4B:08:6E:E9:51:D2
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       075C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          0752
Signing time:             Wed 22 Jul 2026 15:15:20 +0000
Manifest this update:     Wed 22 Jul 2026 15:15:19 +0000
Manifest next update:     Wed 29 Jul 2026 15:15:19 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: kXTgyTlPD/G4ce3jSda3ChEwaQ2XmQxNYy76mEfhNxY=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Jul 22 15:15:19 2026 GMT
            Not After : Jul 29 15:15:19 2026 GMT
        Subject: CN=6a60de87-7ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:7d:15:f3:b4:1b:fd:e6:56:e5:25:e4:77:
                    28:28:36:73:1b:17:1a:f9:08:ca:3f:a0:03:b8:8a:
                    f6:86:df:4a:4c:1b:fe:80:9a:30:69:98:83:4c:a4:
                    b7:f4:0e:9d:b7:4a:a6:2b:b2:9a:98:67:b3:2d:9b:
                    03:24:dc:f5:b2:b1:82:bc:95:64:33:0e:a8:59:6a:
                    c3:4e:83:52:b3:5b:b9:2e:d2:7c:55:88:29:6f:fb:
                    ee:8a:b7:4f:9c:25:38:25:e7:d5:24:3e:61:c2:44:
                    9c:57:d4:35:6a:50:aa:1c:55:f0:2c:83:50:87:be:
                    82:7a:a4:76:2a:9a:ff:22:96:fe:13:47:e6:93:d9:
                    23:48:71:aa:f0:a2:06:04:2c:bb:d7:ba:f7:d9:f9:
                    39:ea:f9:5f:df:5c:83:02:c9:e6:04:32:5b:45:d6:
                    c0:3f:67:d6:8e:72:77:49:90:58:af:bd:17:cb:4c:
                    0b:47:e1:68:1b:13:5d:5d:cf:f8:46:60:f1:91:61:
                    ab:85:b1:75:df:4e:12:ae:91:0e:ef:d6:9e:e0:cf:
                    71:fc:41:ce:0b:79:30:2f:2c:a4:6e:42:b8:bc:2a:
                    d3:91:4b:a6:02:b7:fa:fb:6c:c3:cb:63:91:41:1b:
                    05:7f:71:48:73:50:a5:0f:43:3c:53:08:e1:e2:87:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:8C:A7:DF:99:19:8D:75:60:2C:9E:F6:54:4B:08:6E:E9:51:D2
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:80:18:9f:5f:4f:05:89:f3:f6:31:be:77:40:d5:49:fe:
         76:3c:f0:62:e8:46:87:93:ff:70:f1:df:08:fd:12:b2:07:75:
         b5:0d:c1:d2:a7:00:c5:75:e9:75:44:44:79:38:98:fa:43:a5:
         e7:cf:fa:0f:8d:40:ed:45:a1:6a:bc:0f:ed:5f:0b:73:88:80:
         de:08:be:2a:da:7d:18:a0:c3:8f:a0:7d:1a:1a:09:6c:a5:d0:
         6b:e8:63:a9:5c:33:dc:c4:51:95:16:6b:7c:f0:a7:59:8d:fc:
         c6:a0:67:77:c7:66:c9:48:d8:14:d2:ba:b6:10:8c:9f:72:b5:
         3d:46:fa:47:b2:eb:e7:5e:14:d3:d7:7a:63:0e:f6:8c:c5:a6:
         aa:34:3d:fd:8d:79:43:70:8f:9f:ca:10:c5:4c:3b:b7:6e:9f:
         0f:35:8c:72:b1:44:6c:4b:ca:bc:d0:0e:bd:e4:33:a6:e5:76:
         7b:c9:63:d0:1c:c7:85:ae:64:c4:2c:54:79:64:3a:da:5a:73:
         b2:54:60:80:4b:ef:09:bc:24:c9:2e:52:7e:73:51:fe:83:d6:
         16:51:82:4f:b8:f8:70:c5:06:59:2a:d2:27:5e:ff:53:82:03:
         b1:c1:96:6c:2e:31:cd:68:03:79:a2:75:74:54:5c:24:9d:0d:
         8d:12:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:14:04 2026 by rpki-client