Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
File:                     hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json)
Hash identifier:          NLUxKgfzfsfQ6xhf7J2tBM1U3q+LlK6YlG7chzOeQbU=
Subject key identifier:   C6:DA:BD:FD:CE:09:B8:F6:4F:ED:70:D7:A9:94:5A:FD:0E:8E:84:74
Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
Certificate issuer:       /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Certificate serial:       087E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
Manifest number:          087A
Signing time:             Sun 26 Jul 2026 21:21:44 +0000
Manifest this update:     Sun 26 Jul 2026 21:21:44 +0000
Manifest next update:     Sun 02 Aug 2026 21:21:44 +0000
Files and hashes:         1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: Xu0yV1Uo+AnfMdAF7Hl9q0rCxCd7/OeUucpSmJJ+SYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
        Validity
            Not Before: Jul 26 21:21:44 2026 GMT
            Not After : Aug  2 21:21:44 2026 GMT
        Subject: CN=6a667a68-3cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:f3:51:53:e3:3a:53:7b:7e:e1:e5:c5:8e:
                    fa:62:0d:b9:6a:d6:57:7f:28:31:f5:b1:a0:3f:97:
                    4b:87:21:06:f7:9d:3f:43:cf:73:ab:ea:a4:40:10:
                    d3:1c:54:12:d3:6b:82:8f:97:2b:bc:7e:04:f1:3c:
                    2c:ea:5e:85:1a:de:aa:5c:09:01:e1:58:eb:ce:d9:
                    d7:1b:32:6e:3a:e3:fe:40:54:67:ff:f9:8e:19:d8:
                    f5:74:3a:fc:b6:58:f5:12:2a:42:1e:50:55:8c:d7:
                    f1:e6:fd:52:95:ca:1c:f7:12:17:6b:5c:90:5d:eb:
                    f4:4f:a3:6a:37:4d:cf:e0:3e:93:bd:15:83:68:0d:
                    f8:67:34:2f:96:07:dc:19:5e:9f:6f:48:a3:f3:95:
                    d9:98:01:83:d9:40:74:2a:4f:b0:76:cf:63:1e:e7:
                    70:4a:ba:9f:99:1a:ac:4d:ef:54:83:36:07:88:b6:
                    1b:ae:13:d4:68:b3:a6:d7:56:a8:b0:53:2f:b0:79:
                    44:d3:17:66:87:bc:e2:26:80:ac:4e:57:72:1a:c2:
                    f8:e9:e7:80:f9:d6:9e:71:34:a2:86:7e:e2:85:11:
                    9b:6f:54:7f:2c:c8:57:68:a7:79:28:f3:eb:c5:7b:
                    78:66:21:0f:da:59:0c:de:73:12:d5:6d:ff:be:25:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:BD:FD:CE:09:B8:F6:4F:ED:70:D7:A9:94:5A:FD:0E:8E:84:74
            X509v3 Authority Key Identifier:
                keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:49:fc:03:56:2f:05:ef:04:2a:91:fb:07:6e:92:6b:be:33:
         0f:a0:02:75:52:ec:c1:50:5c:99:fa:c5:9d:71:29:b2:8b:83:
         4d:22:a3:0c:7b:93:b8:b8:52:78:ca:10:a9:62:f7:d0:5d:b3:
         7a:1a:a9:59:73:15:e6:c7:a5:b6:fb:54:80:43:45:7c:b1:8a:
         c8:6e:27:4d:ec:29:1f:51:25:d0:f0:22:fc:4b:34:91:da:8c:
         43:ef:ad:44:73:ff:8d:1a:0d:8a:48:e9:2b:a1:fc:3b:c4:94:
         6e:6a:a6:d7:e2:b0:f3:22:3b:6e:df:c9:2e:33:94:05:ea:bc:
         68:4e:c6:b7:c6:ea:37:9b:30:8b:d6:38:34:eb:ec:49:cd:dd:
         9f:c8:05:22:f7:43:ad:81:16:93:0c:7e:2f:26:c1:91:09:f6:
         6d:a3:fe:73:5f:c9:6a:00:60:99:75:5e:f1:da:53:14:d7:6f:
         3f:ef:06:3b:da:16:e7:2a:05:17:ee:fc:1c:81:2c:3f:ac:7d:
         bf:64:2d:18:cd:ef:66:a2:f0:eb:6d:24:93:8f:fd:22:d4:23:
         ad:91:3e:ed:e3:0c:ae:27:67:36:33:24:0d:be:e7:8f:2e:3f:
         57:35:6e:0c:67:09:e8:6e:79:82:89:a6:4b:e8:6b:e7:5d:e2:
         27:15:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:46 2026 by rpki-client