Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File:                     iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier:          LyOox5Zh67/jpIbBYPgXTLoEiC/94o2JebbfjPnKNvM=
Subject key identifier:   25:C3:DC:11:A3:89:FB:22:51:73:15:61:4A:C7:F4:FC:98:29:A5:24
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer:       /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial:       0761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number:          0747
Signing time:             Fri 12 Jun 2026 21:48:37 +0000
Manifest this update:     Fri 12 Jun 2026 21:48:36 +0000
Manifest next update:     Fri 19 Jun 2026 21:48:36 +0000
Files and hashes:         1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: dCM65K5mJYYROkdHlhR3LjFqGFWczTIgpToOtx1+Sa0=)
                          2: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
                          3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
                          4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
        Validity
            Not Before: Jun 12 21:48:36 2026 GMT
            Not After : Jun 19 21:48:36 2026 GMT
        Subject: CN=6a2c7eb5-a8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:d2:f4:cf:eb:b1:e6:2a:16:2b:e8:90:a3:
                    c0:4e:ec:5f:99:c3:87:7a:23:7b:e9:f4:55:75:7d:
                    e6:84:7d:5b:d2:c2:a7:ee:27:48:a5:7f:17:81:c1:
                    69:2a:b0:78:e0:f5:f5:01:35:5d:f9:cb:04:9b:77:
                    f4:f6:6f:6b:02:46:38:a5:01:07:14:9e:cb:f3:4e:
                    e9:db:5a:59:70:b2:82:ee:92:21:51:69:ff:ff:e8:
                    c6:1b:2c:a4:ad:86:f1:af:48:1b:7a:5c:da:e7:c5:
                    fe:0d:a1:52:f5:58:63:7c:9a:0b:55:d7:cd:49:f8:
                    65:c8:1a:05:78:13:cc:50:b2:91:5f:bd:74:17:d6:
                    70:ec:56:d6:31:76:26:9a:a5:ed:09:e7:fd:77:34:
                    f1:be:e4:a8:4c:19:71:e5:e5:db:4b:94:f0:3a:21:
                    ff:03:89:a1:16:ac:3b:a9:d1:6b:dd:b2:1b:6e:93:
                    ff:5e:90:dc:d3:2d:33:ea:86:90:a7:10:8c:76:ed:
                    d6:1f:5a:8d:a5:e6:e0:ce:7b:92:19:b2:d2:a9:0e:
                    ba:63:e1:7a:85:29:6c:b6:41:81:ff:bd:29:2f:6a:
                    2d:d5:dc:5f:78:14:f3:c8:d9:ed:8d:51:d1:28:2d:
                    6c:bb:5e:58:be:3a:e4:96:39:6e:67:fa:35:82:27:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:DC:11:A3:89:FB:22:51:73:15:61:4A:C7:F4:FC:98:29:A5:24
            X509v3 Authority Key Identifier:
                keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:2a:7e:7d:af:fe:3b:df:e6:fb:72:6e:4f:da:a5:cc:c6:
         38:d4:57:91:ec:78:8b:e8:6e:8b:fa:89:a5:f6:ef:75:bb:44:
         01:eb:57:c1:48:84:3e:e3:4f:86:45:e4:ac:34:b5:2d:3f:33:
         f5:10:75:f4:ba:c5:ba:36:a2:5c:28:53:57:89:7d:35:57:1f:
         58:50:14:1f:46:50:fa:f1:36:d9:f0:95:18:f1:6d:5f:3b:8e:
         0c:a9:70:d3:aa:37:22:98:fb:06:58:2b:10:a1:11:fb:17:70:
         a0:d5:2a:8e:42:51:63:7a:7d:2f:8f:1a:b6:c1:a6:8f:b7:a8:
         8f:96:e2:f0:08:3b:98:63:1a:33:95:32:1a:f4:0a:09:77:28:
         53:e8:79:ba:8d:2a:30:15:e7:d6:ee:45:53:d1:18:f5:db:87:
         3c:5f:a6:86:70:61:18:67:7a:45:bb:87:bd:30:b7:6c:a9:36:
         3b:e7:15:14:37:62:dc:fe:3d:3e:72:23:10:44:11:76:f8:0b:
         eb:13:d7:1b:53:fd:65:b0:38:2a:4b:de:10:bf:21:dd:81:ea:
         01:1d:6d:54:2d:23:0d:59:ac:6b:6c:27:6c:69:4a:ea:36:34:
         e1:15:39:8e:1c:51:ba:e2:4c:2a:00:02:64:1a:98:36:ae:9e:
         ce:a9:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:16 2026 by rpki-client