Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File:                     IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier:          /BkPj62YQltsi/aOvOZhPcmVceZTWnIbovqeNkn+9IA=
Subject key identifier:   E6:3C:F9:13:28:75:E1:E8:F3:A1:41:EF:4C:C2:5C:0F:52:A7:DD:DA
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       095E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number:          0901
Signing time:             Wed 22 Jul 2026 20:54:28 +0000
Manifest this update:     Wed 22 Jul 2026 20:54:28 +0000
Manifest next update:     Wed 29 Jul 2026 20:54:28 +0000
Files and hashes:         1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: qCpwt86CyJ77syOivhbyCwxdH33alhDxuGxW21Qy6pc=)
                          2: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
                          3: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
                          4: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
                          5: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
                          6: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
                          7: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
                          8: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398 (0x95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Jul 22 20:54:28 2026 GMT
            Not After : Jul 29 20:54:28 2026 GMT
        Subject: CN=6a612e04-a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:82:01:80:90:0f:a7:d1:30:50:e5:34:bd:
                    76:37:82:44:ce:79:fb:99:cd:a1:61:22:2d:3a:a7:
                    92:c6:e2:62:0a:d1:17:5c:2a:48:96:b9:69:c8:fc:
                    70:f1:ac:9b:24:14:24:1e:61:09:a3:4a:70:a9:d1:
                    a6:df:88:e6:46:b5:ac:b0:b6:25:b8:6a:69:da:d4:
                    3e:30:3d:90:23:05:f9:6d:c9:3e:b4:0c:a9:e4:93:
                    a9:b2:a2:ed:8f:ff:93:a4:f2:52:de:57:7e:52:00:
                    08:38:77:93:e4:f0:6d:04:2d:6f:9d:62:f3:27:6f:
                    eb:c6:5e:23:cb:cc:ca:d6:d5:6f:d4:b3:8b:4d:13:
                    37:c6:bd:0f:29:85:e0:50:4f:25:86:fe:2f:52:d0:
                    26:91:de:4f:3b:aa:a5:ed:70:d4:bd:a7:e1:5e:f9:
                    12:9f:c2:a9:7f:5d:0b:a7:1a:00:58:61:89:59:b5:
                    99:a0:df:90:dc:a6:aa:41:f8:82:18:76:52:17:5c:
                    2d:d6:b1:ab:2b:c7:7f:d2:f9:10:a9:de:58:42:81:
                    de:1e:a1:1a:a6:50:1f:dd:81:48:fd:d5:29:67:97:
                    85:41:34:1d:72:ed:39:43:eb:64:7c:15:9e:fb:c2:
                    f7:12:b3:d8:ab:a0:02:4a:b6:60:52:c7:94:1d:62:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:F9:13:28:75:E1:E8:F3:A1:41:EF:4C:C2:5C:0F:52:A7:DD:DA
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:f3:6d:ff:03:b7:47:51:34:9c:5a:cb:9b:0e:08:e3:9e:
         68:fb:03:46:c1:6c:5a:d2:ae:3c:d2:74:ee:9e:60:9c:bf:2f:
         d8:b1:56:c7:2a:26:a7:94:26:64:48:63:71:e4:02:3b:8f:49:
         ff:45:ac:8b:45:ea:58:01:6b:9e:fc:52:b2:8a:f2:d1:83:56:
         62:18:f0:90:64:36:89:25:9e:f7:a2:55:81:95:ff:5b:d4:1a:
         e4:72:4a:57:18:9d:bf:a3:75:27:2e:b3:30:bf:90:83:06:67:
         bb:a6:b6:bd:a1:b9:e6:c1:74:27:72:f3:2c:22:2f:77:e2:e3:
         c0:5e:a8:a7:a0:d8:fc:0e:1a:76:10:1a:73:4c:55:94:2e:39:
         a9:a5:5b:84:39:25:7d:8e:85:5c:67:27:a3:28:64:9b:a3:04:
         c5:07:61:cc:be:e1:ce:37:4a:97:87:80:d8:31:e6:ee:d5:50:
         59:12:e1:9d:ef:f0:de:b2:4a:0c:0a:83:44:7e:3b:83:7a:ff:
         20:9a:85:4f:13:59:bd:90:3b:90:37:22:cb:5c:18:32:85:bc:
         44:6e:89:db:37:49:89:2b:4e:49:4f:a9:fc:a1:9d:e8:ee:88:
         ce:75:02:bd:18:ef:e4:79:33:75:e1:04:f6:2f:ec:1e:35:e6:
         ab:a7:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:43 2026 by rpki-client