Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File:                     -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier:          aOGw+b8hXVJ3EQWRsDrAUgB3JcR3n09pZeQpqTptej8=
Subject key identifier:   0E:4B:6C:C8:A2:1B:60:89:E7:59:74:2D:01:B0:30:02:CF:34:44:1E
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer:       /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number:          0231
Signing time:             Mon 27 Jul 2026 04:07:13 +0000
Manifest this update:     Mon 27 Jul 2026 04:07:12 +0000
Manifest next update:     Mon 03 Aug 2026 04:07:12 +0000
Files and hashes:         1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: RXvh2t405J2LcMes5sM1NsKJGD76JZgqfzM2iVdzkzM=)
                          2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 8yrKk69D5xN242remo4AGa14gprPSgbcyqKZK/Du0rY=)
                          3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: dd8IIaigjdeFVHSi8ZJQL2JFa2im8RBvLxqCRUWskxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
                          rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
        Validity
            Not Before: Jul 27 04:07:12 2026 GMT
            Not After : Aug  3 04:07:12 2026 GMT
        Subject: CN=6a66d971-8e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:a3:f1:23:5d:56:09:f1:09:a3:59:08:56:
                    8f:8c:26:c9:44:24:d3:76:0d:76:30:18:c0:86:5d:
                    7b:1d:7f:e7:55:08:6f:ca:24:36:8a:87:4b:74:23:
                    5b:40:df:ef:de:f3:ef:af:dd:54:28:56:65:f6:5d:
                    4e:15:7d:7b:1a:36:56:11:50:43:22:82:a2:63:5c:
                    68:75:a6:39:6e:d2:df:2c:d8:2d:61:2f:e5:70:07:
                    5b:fd:df:e5:da:c5:f6:72:dd:05:8f:e2:9f:6a:31:
                    38:8c:7f:60:bd:f7:08:d9:50:98:2c:49:2b:5f:23:
                    20:b2:17:36:90:ee:db:e4:18:db:d8:a2:f1:df:90:
                    65:b5:57:6c:10:c3:21:d4:68:d1:4f:c8:b2:25:18:
                    1e:e1:be:7a:b3:bc:58:ae:6a:e2:92:95:cb:0b:49:
                    16:51:41:4c:8a:73:fc:f8:25:00:10:3b:e5:13:30:
                    cb:f1:99:aa:19:91:b2:f2:59:32:cc:3b:91:2c:c8:
                    0a:21:e1:ba:ae:c3:06:97:a6:d3:de:f3:b0:65:8f:
                    f0:ca:a4:3a:2c:e9:ba:30:cc:5b:ef:6e:4f:69:fc:
                    d9:73:c4:e2:2e:f8:a2:27:18:70:0b:cd:9f:56:fb:
                    67:45:08:56:7f:60:d6:93:fa:ee:93:c4:43:92:6d:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:6C:C8:A2:1B:60:89:E7:59:74:2D:01:B0:30:02:CF:34:44:1E
            X509v3 Authority Key Identifier:
                keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:4b:30:77:0e:a7:bc:d2:f1:59:bc:8b:d0:aa:50:69:f1:
         a2:4d:5e:30:ce:ed:49:0d:7f:8c:96:0e:10:3a:df:76:db:2b:
         55:44:a9:d5:2d:2d:bd:d0:a1:f3:c2:64:16:05:ab:b5:30:59:
         6b:3c:14:50:1d:25:16:12:5f:50:e4:6b:3e:00:91:a0:02:ff:
         ae:00:d8:ec:77:e3:0e:74:74:e0:b7:23:95:52:45:bf:ba:02:
         53:51:f1:6c:1f:81:f6:b8:d3:f6:34:ee:db:c6:fe:de:e7:11:
         b2:d5:a8:fc:7d:cb:f7:25:ce:3d:9a:5a:08:99:40:ff:c6:bc:
         bf:a5:7b:69:d9:d4:e9:09:f4:d8:13:14:c6:0e:32:13:5e:fc:
         7f:2d:84:28:bb:4a:3b:10:0a:d6:b2:6a:42:1d:c5:e5:8c:d8:
         da:dd:26:ec:f6:6a:69:30:4e:59:9d:c6:25:dc:41:94:ca:c7:
         c3:ed:7f:d3:ca:09:be:18:05:06:5b:ef:6e:62:57:c4:c2:2d:
         f9:ac:b1:28:2c:6d:53:11:f2:b4:9e:5b:8d:ad:50:75:84:3f:
         65:cd:fa:b7:31:cc:d7:09:30:0a:d6:ce:b3:a6:66:13:1c:9b:
         44:ac:ab:f3:15:0c:de:ae:22:0d:ed:2d:2f:65:7c:f7:7e:8d:
         22:ae:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:14 2026 by rpki-client