Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File:                     iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier:          2ZjC0KWc95nJ3sa+cezNRodeO+9IsboeD+Dz73Hw/4s=
Subject key identifier:   73:A5:88:05:BA:5E:C3:0A:F2:9C:2C:44:0B:CB:86:F6:80:25:3E:41
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer:       /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial:       0775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number:          075B
Signing time:             Wed 22 Jul 2026 22:20:34 +0000
Manifest this update:     Wed 22 Jul 2026 22:20:34 +0000
Manifest next update:     Wed 29 Jul 2026 22:20:34 +0000
Files and hashes:         1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: 90z/7X6UJWKvXgekcTs3FYQwUBczKP7XSEXzbCyL0cw=)
                          2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
                          3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
                          4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
        Validity
            Not Before: Jul 22 22:20:34 2026 GMT
            Not After : Jul 29 22:20:34 2026 GMT
        Subject: CN=6a614232-f4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:f9:9a:67:7a:9f:5a:a3:18:ce:56:da:a5:
                    d1:47:2f:43:b4:4c:d9:bb:de:02:45:01:37:03:00:
                    7b:83:7b:1f:c9:c5:cb:79:30:93:87:b3:d3:fd:e3:
                    db:91:f0:70:02:a5:ee:10:30:01:82:03:1f:6e:a4:
                    1a:32:f8:3c:8e:c4:a2:82:a2:0e:5c:1c:ea:d5:88:
                    cd:5a:5f:08:b2:23:18:77:8e:8b:7c:3a:fa:1f:4d:
                    44:a0:84:d6:94:fc:4a:d5:b7:98:43:7d:51:8d:42:
                    a4:af:08:f8:5f:44:3f:f2:47:f7:4a:a1:6b:ec:ce:
                    9d:ab:27:9b:a0:a6:b4:d4:4d:dc:50:3f:6d:f1:c9:
                    a0:1b:c2:8d:5f:0e:03:f3:8a:47:d9:91:34:bc:e8:
                    78:8f:8f:aa:bc:87:0e:ed:d7:20:65:b3:00:42:8c:
                    39:e0:d5:af:a2:f5:44:65:ea:17:a4:6e:0c:2b:fc:
                    0b:85:7d:f1:60:38:bf:d5:86:0e:b8:5c:6c:ab:09:
                    6e:97:56:98:9e:2b:52:d0:3f:34:a4:a5:2e:ec:9d:
                    0f:95:63:93:78:43:23:ab:e6:1c:32:81:8f:0e:59:
                    5c:dc:9a:a3:0f:49:5c:6c:5b:b5:8c:a7:39:84:90:
                    86:dd:e4:a6:8e:7a:62:6f:9d:14:6b:b0:a2:78:e8:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:88:05:BA:5E:C3:0A:F2:9C:2C:44:0B:CB:86:F6:80:25:3E:41
            X509v3 Authority Key Identifier:
                keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:25:e4:6c:f1:6c:b8:70:81:03:14:28:f8:93:cb:c5:ff:18:
         b3:9f:13:bc:e6:c6:e8:16:f6:3f:ee:13:07:0f:f7:99:a0:87:
         47:f7:60:b6:55:cf:df:4d:f1:a2:c2:00:5e:7b:c0:8c:6e:fe:
         08:9a:27:b0:30:b1:64:9d:89:17:aa:80:f7:e1:38:09:2d:09:
         26:e1:6a:bc:d8:64:db:ae:a3:0b:66:02:1e:15:45:b4:d2:64:
         3b:85:1f:3b:6e:db:d1:1f:a3:88:07:b8:69:d7:e9:ed:8c:1b:
         00:70:2d:4a:f9:ac:a6:16:10:2c:19:5c:46:dc:f2:b6:f9:88:
         81:5d:ee:1b:c9:a9:ad:ad:e0:f3:cd:12:46:a5:01:c5:5f:5f:
         98:d7:f1:c7:6e:02:66:c7:5a:d4:30:d2:2d:16:88:2d:ef:58:
         96:e8:9f:b9:4d:40:ed:3d:21:6a:f3:51:a3:55:31:5c:04:9a:
         82:76:b5:2a:de:d5:8d:17:29:d8:3e:95:02:7f:eb:b0:14:5f:
         3f:d0:b1:4f:7d:06:59:58:86:4f:c3:cd:f3:94:e5:6a:47:fd:
         d5:17:9a:82:d7:21:cc:95:43:84:34:b7:81:2b:6b:52:0a:e5:
         da:9f:9c:82:b4:77:28:2d:54:ab:26:bd:54:df:05:f3:4c:a6:
         d7:53:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:41 2026 by rpki-client