Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
File:                     iBzVaxmrfMJiYzdmnqtzClWnLLY.mft (raw, json)
Hash identifier:          bsKwXXcDgYN1seLhcpA0P4cO6hPbbch/tv7DZnpxOy8=
Subject key identifier:   6A:35:20:D2:FB:17:71:84:C3:A1:4B:7C:DD:1B:E5:4D:05:8D:C2:88
Authority key identifier: 88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6
Certificate issuer:       /CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
Manifest number:          01CC
Signing time:             Thu 23 Jul 2026 05:06:28 +0000
Manifest this update:     Thu 23 Jul 2026 05:06:27 +0000
Manifest next update:     Thu 30 Jul 2026 05:06:27 +0000
Files and hashes:         1: iBzVaxmrfMJiYzdmnqtzClWnLLY.crl (hash: Peg25QBlkSHljAenBVDGWIi08LdWQI1PnbTfehUhIYE=)
                          2: D714E00CB26F11EFB2BFFC58C4F9AE02.roa (hash: IytG8ias0paLkVTw5O/t3fkTpsmCa8qHyJURlQDLoME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl
                          rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED9F9, serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6
        Validity
            Not Before: Jul 23 05:06:27 2026 GMT
            Not After : Jul 30 05:06:27 2026 GMT
        Subject: CN=6a61a153-3297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:fc:1e:1c:15:8b:72:e7:70:51:36:e7:37:
                    e1:b6:53:f2:59:51:03:6c:dc:b4:39:2a:01:7f:4b:
                    3a:90:46:05:96:9e:a6:ca:45:bf:50:51:e8:4e:3e:
                    ed:2c:a0:59:b7:c5:95:48:32:ef:56:58:28:d1:e1:
                    70:54:82:18:69:cb:a6:f7:89:f4:72:4f:6b:5b:87:
                    76:55:af:d1:4b:17:73:a7:b6:ba:2a:ca:dc:e4:53:
                    b5:7c:22:a4:75:7d:64:f0:02:2b:6e:1c:87:80:c1:
                    87:42:16:62:a2:78:ec:54:2f:04:ca:59:42:04:ca:
                    fe:99:aa:2e:b9:b9:6e:77:6c:a6:56:90:a0:54:75:
                    43:2a:a4:f0:3c:9a:93:01:5b:0e:2e:57:09:f5:7b:
                    7c:3e:98:67:0a:70:c4:51:60:76:ff:0b:c4:ec:8a:
                    30:71:f6:76:bf:21:0b:70:ca:5c:63:ae:f4:f7:ca:
                    9d:ad:45:54:73:08:46:09:b5:de:79:6f:dc:16:ef:
                    7e:71:e1:e6:6a:3d:3d:38:d7:7e:88:37:08:29:a6:
                    ab:93:7f:43:22:6c:e0:bb:4c:7f:3d:da:86:55:8e:
                    ff:d5:0c:80:0f:0c:3b:c5:5b:82:a0:1c:fe:55:7f:
                    81:3e:66:52:6a:7b:b9:bb:60:bc:87:14:34:fa:33:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:20:D2:FB:17:71:84:C3:A1:4B:7C:DD:1B:E5:4D:05:8D:C2:88
            X509v3 Authority Key Identifier:
                keyid:88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:23:ca:12:0f:76:19:be:07:78:1a:c1:f5:d0:f3:1e:ae:
         66:2a:52:24:cf:92:1b:84:6c:2b:3d:91:08:4c:51:63:bd:e5:
         14:81:a1:ef:0a:83:19:e9:8c:cb:a3:b0:fb:2b:a7:b6:40:0e:
         0a:87:1f:83:33:b1:e8:84:5f:aa:e6:da:fb:18:d7:93:88:ac:
         b6:b4:e1:52:50:28:09:ee:c8:51:e4:7f:d6:fd:b6:f2:16:b9:
         c0:78:e2:4c:bf:5d:ee:6b:35:6e:d5:6b:c5:42:fd:37:e1:b0:
         a1:6e:c6:79:10:27:06:ce:f2:27:35:36:f1:72:8d:24:89:6d:
         3f:de:cf:e6:21:6f:e0:51:01:05:db:d6:2c:c6:a5:94:df:db:
         7a:e3:67:fe:d6:54:36:86:81:b6:be:2e:09:ca:58:02:c8:b0:
         27:0e:c7:c1:9b:0f:e9:b0:ab:7d:4f:7e:b4:37:71:31:82:a5:
         60:6a:28:76:f7:29:ec:11:76:e0:fb:23:46:2b:1f:9e:0d:d7:
         71:68:3f:53:76:d1:b0:00:59:57:9c:28:3c:58:57:14:8d:e8:
         71:f9:9c:8c:d7:f6:8c:f6:03:bb:2f:06:11:68:aa:71:cb:77:
         89:e0:b7:14:0c:e6:cc:b7:6f:91:56:69:ad:3f:80:98:a3:ae:
         f9:e6:fc:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ5RjkxMTAvBgNVBAUTKDg4MUNENTZCMTlBQjdDQzI2MjYzMzc2NjlFQUI3MzBB
NTVBNzJDQjYwHhcNMjYwNzIzMDUwNjI3WhcNMjYwNzMwMDUwNjI3WjAYMRYwFAYD
VQQDEw02YTYxYTE1My0zMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ln8HhwVi3LncFE25zfhtlPyWVEDbNy0OSoBf0s6kEYFlp6mykW/UFHoTj7t
LKBZt8WVSDLvVlgo0eFwVIIYacum94n0ck9rW4d2Va/RSxdzp7a6Ksrc5FO1fCKk
dX1k8AIrbhyHgMGHQhZionjsVC8EyllCBMr+maouublud2ymVpCgVHVDKqTwPJqT
AVsOLlcJ9Xt8PphnCnDEUWB2/wvE7IowcfZ2vyELcMpcY67098qdrUVUcwhGCbXe
eW/cFu9+ceHmaj09ONd+iDcIKaark39DImzgu0x/PdqGVY7/1QyADww7xVuCoBz+
VX+BPmZSanu5u2C8hxQ0+jPj7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGo1INL7
F3GEw6FLfN0b5U0FjcKIMB8GA1UdIwQYMBaAFIgc1WsZq3zCYmM3Zp6rcwpVpyy2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS81RjM3OURCMEM5
NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZNSmlZemRtbnF0ekNsV25M
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lCelZheG1yZk1KaVl6ZG1ucXR6Q2xXbkxMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDlGOS81RjM3OURCMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZN
SmlZemRtbnF0ekNsV25MTFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgz0jyhIPdhm+B3gawfXQ8x6uZipSJM+SG4RsKz2RCExRY73lFIGh7wqDGemM
y6Ow+yuntkAOCocfgzOx6IRfquba+xjXk4istrThUlAoCe7IUeR/1v228ha5wHji
TL9d7ms1btVrxUL9N+GwoW7GeRAnBs7yJzU28XKNJIltP97P5iFv4FEBBdvWLMal
lN/beuNn/tZUNoaBtr4uCcpYAsiwJw7HwZsP6bCrfU9+tDdxMYKlYGoodvcp7BF2
4PsjRisfng3XcWg/U3bRsABZV5woPFhXFI3ocfmcjNf2jPYDuy8GEWiqcct3ieC3
FAzmzLdvkVZprT+AmKOu+eb8wQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:14 2026 by rpki-client