Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
File:                     iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json)
Hash identifier:          CchIQodk76NEAExx3B1nthLrWQpmrl/kuk5jXcXtVgo=
Subject key identifier:   06:55:49:90:6B:32:BB:D4:23:5F:B3:F9:61:4C:A4:D7:FF:AB:4E:6E
Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08
Certificate issuer:       /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
Manifest number:          82
Signing time:             Wed 29 Jul 2026 09:10:10 +0000
Manifest this update:     Wed 29 Jul 2026 09:10:09 +0000
Manifest next update:     Wed 05 Aug 2026 09:10:09 +0000
Files and hashes:         1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: Nuy9DnY+V69+UU/Fa1JqOkJlzOWHEeJdq82GuR1jsAY=)
                          2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 09:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
        Validity
            Not Before: Jul 29 09:10:09 2026 GMT
            Not After : Aug  5 09:10:09 2026 GMT
        Subject: CN=6a69c372-5c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:2e:f3:b6:c9:a8:d6:8f:01:59:d9:b7:44:
                    bb:d0:2d:06:f6:d7:95:00:7e:0b:3d:77:37:f7:f6:
                    f8:4c:61:c9:98:56:07:8e:85:5d:6e:6b:7f:eb:3f:
                    f1:d8:d2:80:96:df:87:8c:b5:c3:19:2d:9b:57:6a:
                    60:80:32:c8:19:24:60:6b:b4:b8:7f:fc:2b:aa:1f:
                    b7:e6:42:e2:ad:21:94:7b:f7:3c:8c:49:a2:3b:98:
                    d9:40:0b:2d:0c:9e:98:f9:da:c1:7d:29:32:07:df:
                    16:91:04:39:42:d2:09:32:a2:0e:e5:e7:78:dd:e6:
                    26:8b:bf:3e:a6:36:0a:b2:18:f2:e3:c0:2e:36:b2:
                    92:c4:80:85:a3:b5:d4:2f:5e:a8:1b:7d:f7:e4:b9:
                    32:c0:33:95:eb:d8:23:ae:35:51:e2:24:56:7c:2c:
                    49:7d:74:3c:e2:30:5b:87:e4:ab:d9:d5:b0:22:87:
                    3c:9b:d1:2f:f1:a6:5d:8e:23:07:ff:4e:ab:c7:2d:
                    62:2f:4a:da:5e:da:78:c1:8c:28:e5:bd:2a:14:48:
                    e6:ea:ac:58:5b:0d:e1:93:83:63:22:28:32:e4:34:
                    c2:a7:72:26:81:cd:59:3a:dc:85:66:a3:0b:51:33:
                    69:ef:68:6c:30:cd:31:65:8b:90:7e:c1:6a:2b:14:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:49:90:6B:32:BB:D4:23:5F:B3:F9:61:4C:A4:D7:FF:AB:4E:6E
            X509v3 Authority Key Identifier:
                keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:33:1a:dc:c2:f4:f2:65:90:a4:9c:57:bb:09:70:4a:fe:
         91:4a:8f:16:8a:f3:87:d1:56:99:73:4e:ea:5d:fe:9b:48:6e:
         c3:4c:fe:b7:fe:96:69:75:6e:2d:38:f5:d4:96:01:21:48:98:
         b1:16:63:2d:44:a5:fa:b3:f7:dc:87:40:fe:27:0c:57:15:8a:
         71:63:e8:d6:07:8e:6a:1a:a2:90:bb:e4:22:12:e4:c8:8a:30:
         43:00:b6:4c:c9:38:37:81:6e:5c:f5:07:94:6e:6b:38:af:f5:
         1a:8d:0d:52:ba:a8:93:64:9a:15:60:a3:15:5e:8e:12:48:f7:
         5e:71:18:32:12:0b:00:f4:53:a8:7f:bc:55:07:3f:a6:c8:98:
         50:be:09:6e:0b:e7:7c:16:b3:2b:67:c6:b8:ce:6e:c0:c2:1b:
         21:44:45:3c:0a:a6:c4:7f:19:bf:08:81:9a:d0:ee:46:1b:27:
         b6:e5:e3:1e:e0:7f:b8:d9:14:f5:24:34:bb:bc:4c:49:c9:e1:
         d7:a8:c0:89:9c:ac:75:4a:68:08:e7:3e:9d:02:49:f2:bf:da:
         4f:19:41:19:66:6b:39:ce:c4:92:dd:bf:c3:75:ed:87:ba:86:
         4e:ba:fe:b6:f4:78:5d:28:0f:35:9e:c1:68:db:4a:14:6f:0b:
         7d:54:c5:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZBMDQxMTAvBgNVBAUTKDg4RkIxRDIxQ0I4ODNDOTdDMjlBQ0I3N0Q0RDY4ODg0
QjNBN0E2MDgwHhcNMjYwNzI5MDkxMDA5WhcNMjYwODA1MDkxMDA5WjAYMRYwFAYD
VQQDEw02YTY5YzM3Mi01YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqQu87bJqNaPAVnZt0S70C0G9teVAH4LPXc39/b4TGHJmFYHjoVdbmt/6z/x
2NKAlt+HjLXDGS2bV2pggDLIGSRga7S4f/wrqh+35kLirSGUe/c8jEmiO5jZQAst
DJ6Y+drBfSkyB98WkQQ5QtIJMqIO5ed43eYmi78+pjYKshjy48AuNrKSxICFo7XU
L16oG3335LkywDOV69gjrjVR4iRWfCxJfXQ84jBbh+Sr2dWwIoc8m9Ev8aZdjiMH
/06rxy1iL0raXtp4wYwo5b0qFEjm6qxYWw3hk4NjIigy5DTCp3Imgc1ZOtyFZqML
UTNp72hsMM0xZYuQfsFqKxSbfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZVSZBr
MrvUI1+z+WFMpNf/q05uMB8GA1UdIwQYMBaAFIj7HSHLiDyXwprLd9TWiISzp6YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkEwNC8yNUM1Mjc3RUM5
QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBKZkNtc3QzMU5hSWhMT25w
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkEwNC8yNUM1Mjc3RUM5QUUxMUYwOThFOTI3NDVDNEY5QUUwMi9pUHNkSWN1SVBK
ZkNtc3QzMU5hSWhMT25wZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdFozGtzC9PJlkKScV7sJcEr+kUqPForzh9FWmXNO6l3+m0huw0z+t/6WaXVu
LTj11JYBIUiYsRZjLUSl+rP33IdA/icMVxWKcWPo1geOahqikLvkIhLkyIowQwC2
TMk4N4FuXPUHlG5rOK/1Go0NUrqok2SaFWCjFV6OEkj3XnEYMhILAPRTqH+8VQc/
psiYUL4JbgvnfBazK2fGuM5uwMIbIURFPAqmxH8ZvwiBmtDuRhsntuXjHuB/uNkU
9SQ0u7xMScnh16jAiZysdUpoCOc+nQJJ8r/aTxlBGWZrOc7Ekt2/w3Xth7qGTrr+
tvR4XSgPNZ7BaNtKFG8LfVTF0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:44 2026 by rpki-client