Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
File:                     _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json)
Hash identifier:          JGuoyzfnSVVHAKE+rD4cvrxulj8zNAp+0INbzkpRSlw=
Subject key identifier:   2D:E7:BB:08:E4:CE:5B:A2:E3:8D:D9:F0:A9:F5:1F:E5:2A:38:96:7E
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Certificate issuer:       /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
Manifest number:          01CF
Signing time:             Thu 23 Jul 2026 05:02:58 +0000
Manifest this update:     Thu 23 Jul 2026 05:02:58 +0000
Manifest next update:     Thu 30 Jul 2026 05:02:58 +0000
Files and hashes:         1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: mINMyu269fGAfOf0ut5KBau79kjnHjGflTAUAuGhM30=)
                          2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: fXqbBRWZeBNZ3fZzOgA4a+7wMB/4xdAxxRaA5d6gc6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
                          rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
        Validity
            Not Before: Jul 23 05:02:58 2026 GMT
            Not After : Jul 30 05:02:58 2026 GMT
        Subject: CN=6a61a082-8c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:ae:5a:bb:09:b3:3f:ab:2b:29:7f:e5:a0:
                    67:ee:20:3b:85:b5:98:55:f3:1e:81:88:50:d9:d7:
                    f8:7e:36:22:a5:5f:9a:7e:3e:29:7f:47:63:14:96:
                    4d:a6:30:d1:dc:7b:54:3f:f3:ec:b0:6b:45:b3:cd:
                    59:5c:ec:8e:e1:4e:22:c2:29:04:db:1c:a9:0c:41:
                    f0:ef:5d:1a:8b:16:0c:76:2d:92:71:c0:04:f7:cc:
                    e7:4f:63:f3:5c:a2:a2:51:3e:71:24:3f:81:b8:78:
                    38:c7:8a:06:d7:a4:8e:9e:2d:f6:46:5a:30:d5:ce:
                    51:4a:87:16:ca:63:aa:fe:b0:fc:b9:ff:5f:7a:2d:
                    d7:71:3c:5d:f3:66:1c:a2:99:01:a2:cf:3a:d5:8e:
                    d5:77:16:3d:81:25:ab:e6:43:a8:7d:4f:e9:a4:9e:
                    57:8e:bb:cf:31:2f:2b:a2:7e:f7:46:77:23:29:60:
                    34:06:aa:f0:c2:b7:6b:87:f9:08:ad:ac:00:bb:b1:
                    00:a9:e6:51:d0:7e:a4:62:63:26:ad:6c:75:a7:a2:
                    15:40:29:eb:77:8c:88:db:13:8c:00:28:82:3c:3b:
                    dc:72:3b:f1:02:cb:cc:d1:e3:8a:7c:0c:58:1b:a1:
                    5b:ab:cf:bd:8a:68:3a:81:52:45:b5:17:74:7a:ad:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:BB:08:E4:CE:5B:A2:E3:8D:D9:F0:A9:F5:1F:E5:2A:38:96:7E
            X509v3 Authority Key Identifier:
                keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:54:7e:c1:4d:e7:80:6e:52:c4:7e:59:01:1e:7e:4a:dc:
         fe:bb:09:31:84:b2:c8:55:ed:5a:01:b5:ae:ed:e7:aa:d8:58:
         3d:d5:17:13:e4:af:85:ec:c3:a6:2c:52:14:2a:b1:31:79:27:
         f7:36:f8:9a:82:9d:67:bf:9b:8d:0d:b7:32:ab:9e:14:7d:08:
         6c:e2:f7:80:72:09:b5:ac:42:e2:3a:aa:5b:5b:cd:90:a6:a5:
         da:3b:8e:ee:b4:ef:d2:bf:af:5e:d4:1c:b6:f4:52:9c:b3:5d:
         5b:19:af:62:d2:75:ec:c3:dd:2b:ed:bf:f9:70:22:7a:e1:d4:
         1d:91:53:56:ce:b6:30:e8:cb:75:68:89:4d:db:b1:0d:f8:a7:
         ab:2d:53:56:34:b9:f6:26:b5:d1:25:a8:b0:f7:e3:d4:e0:17:
         dc:d2:9b:24:07:b7:c3:62:13:67:d7:27:19:38:ac:a0:53:1b:
         a4:bb:d9:f8:ad:f3:06:74:8f:94:ed:54:ef:e3:ea:35:84:4b:
         b6:34:ba:b8:ba:58:0e:2d:5e:d4:11:da:2a:91:37:0c:a6:ae:
         b9:82:0f:bc:73:ea:64:0d:64:61:06:fa:5d:a3:da:8d:76:af:
         ea:cc:ed:c5:55:53:ef:45:8c:34:97:6f:45:af:43:6a:98:c9:
         da:db:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:31 2026 by rpki-client