Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
File:                     I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft (raw, json)
Hash identifier:          hvkpFy7/fiJyXE7woe9SrZwcHXfj3Swo/0qdgVTNs/Y=
Subject key identifier:   22:64:61:F0:1D:71:FB:DD:EC:92:5C:57:1C:B8:DE:55:D3:63:33:2D
Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Certificate issuer:       /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
Manifest number:          78
Signing time:             Wed 23 Sep 2026 07:37:57 +0000
Manifest this update:     Wed 23 Sep 2026 07:37:56 +0000
Manifest next update:     Wed 30 Sep 2026 07:37:56 +0000
Files and hashes:         1: I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl (hash: HD8saqeQQknhDFIFoW+w5ppJY3jtDNmpaql6r/w+v/Q=)
                          2: 3F7E724808FA11F1B69E3FD3313D8C67.roa (hash: NZDM0P5b400zVrhyd2jzSLfxw/qGeaxR3jXe0NSn67o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl
                          rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
        Validity
            Not Before: Sep 23 07:37:56 2026 GMT
            Not After : Sep 30 07:37:56 2026 GMT
        Subject: CN=6ab381d4-aaa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:e2:3f:38:93:ed:d4:d9:55:54:a7:68:f8:
                    11:ff:5b:6e:65:f7:9c:cb:88:83:88:09:95:97:86:
                    e2:47:da:84:ec:0d:a6:63:55:cb:5c:e8:83:a6:75:
                    4b:de:c5:81:d8:5f:62:73:78:22:ed:72:52:19:7d:
                    68:e0:8c:eb:4d:d3:d4:87:92:b7:9e:ea:73:94:1e:
                    71:74:6b:2f:e1:ca:e4:df:d6:4f:08:53:b9:3d:23:
                    04:53:d4:d9:79:39:3d:d2:62:cc:3b:9b:80:00:e4:
                    94:2f:07:6e:1a:f2:c1:82:5c:01:e7:11:e8:97:a3:
                    30:ef:01:f6:74:d4:2d:50:d0:72:4c:d4:72:07:a6:
                    87:b7:0b:7f:bd:31:6d:c5:10:78:32:b3:9d:5e:74:
                    49:8a:5f:2c:b3:8d:9a:f5:65:8b:f4:16:2f:12:ac:
                    0d:c8:6a:07:1c:88:34:26:6d:b9:90:1d:85:bc:16:
                    3c:7a:dc:b7:cd:5b:2c:64:07:5d:7e:d5:7b:0b:e5:
                    e9:84:1f:19:4a:08:28:3e:35:db:53:54:ca:6e:d7:
                    aa:5b:8c:29:5c:5f:56:1a:78:a6:55:c9:78:fe:9b:
                    44:00:f0:01:16:5a:fd:0f:8a:fb:e3:fe:67:21:e7:
                    5a:ad:07:c8:b5:ab:1c:af:7c:65:ed:f2:4d:89:46:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:64:61:F0:1D:71:FB:DD:EC:92:5C:57:1C:B8:DE:55:D3:63:33:2D
            X509v3 Authority Key Identifier:
                keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:6a:4f:7e:e8:96:9b:15:88:e4:80:d9:1f:e2:f4:db:8b:
         59:85:2b:30:83:d6:d8:ae:c7:03:59:f8:f9:d2:81:8a:27:18:
         86:e1:b4:d5:07:a0:21:96:62:e0:0f:2c:95:fe:63:fa:ae:eb:
         4b:88:68:06:9c:90:19:ab:d8:e2:22:7a:f0:6e:64:16:a3:2e:
         fd:24:ef:3e:f5:37:74:48:4d:7b:19:1b:97:08:6e:c4:88:2e:
         31:fd:52:e9:7e:b8:1c:20:c1:66:56:ae:43:b1:51:b0:1f:78:
         57:76:88:71:97:4e:72:28:3e:6c:e2:bd:14:2e:06:6b:f6:7b:
         3b:76:0f:55:eb:11:74:6b:68:33:8a:bd:a7:88:42:01:b8:57:
         62:ca:6d:57:2c:ab:94:b8:95:28:f8:5d:a6:0c:c1:42:c2:28:
         de:03:b7:4b:4d:15:d2:4c:e5:67:3a:4b:84:ee:25:11:1a:b7:
         2d:31:9c:bd:2b:23:99:dc:9d:e9:14:d5:d9:c2:95:10:ca:62:
         2d:d1:49:07:6b:67:9b:3c:ed:7b:e6:a9:24:32:ec:83:44:87:
         36:02:4f:e8:b5:39:c5:d3:99:97:86:f1:8b:58:34:07:ee:72:
         b1:16:a4:4d:32:de:88:b3:e0:f4:c1:89:ac:5b:3b:ef:30:69:
         ed:65:1f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:21 2026 by rpki-client