Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          j1wdtz8lfAPHJhVgfjMn2eDEUNOGAW0RYqaWYtCkIWQ=
Subject key identifier:   BE:A0:70:1A:AE:53:EE:1D:FC:3E:4C:70:2B:F2:04:0D:C5:68:9F:F1
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          F2
Signing time:             Thu 23 Jul 2026 08:06:28 +0000
Manifest this update:     Thu 23 Jul 2026 08:06:28 +0000
Manifest next update:     Thu 30 Jul 2026 08:06:28 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: azCp4Yt9HNSvRM3hk81o6qiMydy/m/OcNCbT6e47zMs=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Jul 23 08:06:28 2026 GMT
            Not After : Jul 30 08:06:28 2026 GMT
        Subject: CN=6a61cb84-a149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b5:2a:c7:7d:83:34:27:f4:1c:e6:b0:f8:98:
                    cf:e8:4b:b9:a2:81:3c:89:fc:dd:38:48:0e:68:2e:
                    93:0c:fe:fc:0c:ac:07:a6:7d:3b:2d:c4:4d:70:21:
                    53:9b:fd:f6:1b:68:18:c8:55:a6:22:4f:d7:9b:7c:
                    6d:4b:32:c8:0f:7d:fd:c8:c2:01:a0:16:d3:60:62:
                    f7:48:e6:27:16:8c:ac:97:c5:42:5f:1d:1f:21:79:
                    d0:5c:c7:25:a1:82:24:b3:7a:23:9e:74:67:82:76:
                    c1:e9:b9:84:8b:d8:bf:a9:1d:61:d2:6e:dc:4f:66:
                    1c:6e:42:b8:6e:7d:52:7c:d3:37:32:57:55:a8:3e:
                    de:7b:7b:8e:bc:51:3c:fa:9c:5c:94:2f:36:7b:11:
                    34:93:f5:29:af:94:84:45:84:35:e5:90:8a:6b:96:
                    3b:ff:1e:54:89:e3:a2:b3:5f:fc:cf:7a:33:60:40:
                    60:94:b7:6d:c1:e7:02:b3:fe:28:f3:21:b9:59:82:
                    83:95:e9:c2:cb:c3:01:34:af:e7:91:40:7c:df:df:
                    af:21:c6:59:7c:37:b9:b0:3e:32:0e:7b:6e:02:cb:
                    ac:29:0e:33:fb:54:1c:9f:82:9c:ec:c7:e7:94:42:
                    27:d9:0e:29:ca:43:79:cd:5e:d6:8e:ee:45:05:62:
                    9e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A0:70:1A:AE:53:EE:1D:FC:3E:4C:70:2B:F2:04:0D:C5:68:9F:F1
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:45:b5:73:80:4a:09:3e:e2:87:eb:23:37:13:56:da:59:
         e2:a2:80:aa:2b:cd:da:d4:18:0c:59:ea:d1:ea:6e:67:ba:45:
         2b:b5:1e:02:20:e0:18:0f:fa:32:26:d5:ba:0b:4e:0e:1e:08:
         81:3c:d6:ff:b0:51:a1:0c:c0:d4:95:5a:7f:19:cf:59:3e:c4:
         e9:3c:5d:99:4d:64:b0:61:fa:38:93:e1:d0:a2:df:bf:cc:93:
         9f:46:fb:a5:15:b5:0f:59:9e:77:1d:b6:71:3e:e3:bc:ff:1f:
         bc:6c:85:60:dd:d3:a2:a0:75:c3:4c:44:90:6f:6a:20:bf:64:
         74:a7:9a:5f:2d:de:3d:a6:34:57:12:26:33:4a:2c:56:a9:3f:
         00:6b:b2:f5:d1:d5:5a:9e:10:ed:b7:57:af:6d:d0:ea:fd:4e:
         ab:c7:01:40:f3:8f:bf:dc:2b:c2:22:27:a0:46:f0:22:49:78:
         12:92:ed:42:d9:b7:a9:7e:4d:1a:d1:a0:10:00:e9:9a:a8:66:
         b5:61:5e:d9:4f:04:b4:80:71:d2:83:7e:91:3b:85:ea:90:e2:
         70:67:3b:ae:7e:5c:43:1a:62:33:62:00:74:5a:02:14:d0:1e:
         75:6a:a3:bb:65:3d:22:e4:2c:3b:7d:d4:f5:70:5e:f4:6c:c0:
         42:06:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:29 2026 by rpki-client