Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
File:                     hCMykdLcashg9UvuzoHVSwNEA78.mft (raw, json)
Hash identifier:          Asx3hVJuvpJQPho9cAUMXiCgr1JxWzw8mkbDybgY3Jc=
Subject key identifier:   C8:49:F7:AD:5B:96:5D:DC:F3:9E:5C:7C:AD:95:F8:B8:3C:5E:62:02
Authority key identifier: 84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
Certificate issuer:       /CN=A91CAA8A/serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
Manifest number:          66
Signing time:             Mon 27 Jul 2026 10:19:32 +0000
Manifest this update:     Mon 27 Jul 2026 10:19:32 +0000
Manifest next update:     Mon 03 Aug 2026 10:19:32 +0000
Files and hashes:         1: hCMykdLcashg9UvuzoHVSwNEA78.crl (hash: VbeiFu+n+S/3DiHH7DrpnWpprzhgo26/f1gRmHMhyxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA8A, serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
        Validity
            Not Before: Jul 27 10:19:32 2026 GMT
            Not After : Aug  3 10:19:32 2026 GMT
        Subject: CN=6a6730b4-dc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:3a:7e:7f:89:9a:07:91:85:c7:2c:ef:f1:
                    26:fa:dd:87:d1:8e:9e:da:94:67:47:0e:eb:20:42:
                    cd:ad:7c:2c:22:05:ab:82:ca:f1:1f:81:64:15:13:
                    6c:37:25:e9:57:92:35:cc:45:51:87:b4:8a:10:f4:
                    0c:32:a5:86:93:c9:68:e8:f3:5d:3d:45:4a:bf:75:
                    76:be:18:d2:18:19:8f:4b:cb:75:02:5d:f8:6f:e6:
                    26:ea:90:ea:53:d9:3d:99:cd:66:e6:c5:b7:1d:93:
                    0a:24:ad:16:65:b1:a4:7a:ff:fe:12:e9:0f:cb:de:
                    c1:cb:42:cc:75:4e:4f:eb:0d:e7:5e:c9:80:78:be:
                    8e:bf:0e:37:78:fb:f0:0b:a7:56:e3:11:8d:ca:55:
                    bb:b2:a6:20:18:4d:74:45:ed:cb:81:71:5d:66:4b:
                    c8:ff:f4:55:65:c5:5a:f7:1d:7e:e6:e2:6d:8c:e2:
                    30:fe:c5:49:cd:d6:21:54:f7:10:57:f1:f3:59:27:
                    b7:7f:34:a8:a6:3a:9a:11:fe:cc:14:50:93:11:ee:
                    9e:41:f1:86:1e:7c:0f:48:c8:19:fb:20:8e:9a:df:
                    e6:e5:e3:a1:2e:04:d4:a3:d1:9e:d5:8a:b3:46:62:
                    2f:9f:ec:4d:22:d7:1e:39:b4:ff:74:20:70:1f:4d:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:F7:AD:5B:96:5D:DC:F3:9E:5C:7C:AD:95:F8:B8:3C:5E:62:02
            X509v3 Authority Key Identifier:
                keyid:84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:b6:e9:dc:bf:f9:18:97:a2:91:bb:81:38:23:37:a9:e1:
         66:54:fd:4e:1f:8e:09:42:56:bc:db:3d:77:df:d9:80:a1:ca:
         3b:0e:1f:38:b6:02:85:47:c3:71:3e:ce:c1:a6:a7:b5:95:a7:
         24:d7:dc:d5:86:19:6e:14:f9:77:f4:97:49:91:41:1f:fe:2e:
         bc:7b:96:78:7d:fb:f6:d7:ac:af:13:10:95:e2:dc:5b:09:d5:
         a8:1d:f8:c9:da:3f:ad:7a:a2:27:23:de:41:e7:a4:ad:d3:4b:
         74:0d:66:11:a4:46:f4:09:da:57:d7:f7:0b:14:12:57:b5:92:
         1f:03:e4:b6:b1:54:fe:d7:58:90:58:be:d9:f7:8f:05:bd:0e:
         34:91:cb:58:d5:09:53:a6:12:3e:c0:fc:58:57:02:3b:4a:4e:
         c9:4e:cd:e3:04:e4:fd:21:f5:42:0d:01:86:fc:6c:04:8a:f2:
         78:6c:e3:71:89:20:06:37:8b:71:c6:e9:5a:a2:ee:62:95:69:
         e6:c6:6b:e2:85:db:65:2d:25:bf:81:ce:6b:1f:be:be:6f:d8:
         04:b5:e0:81:81:6c:76:73:2b:61:9d:3c:90:e3:4d:e7:09:75:
         14:88:87:e9:6f:86:f3:06:76:7d:be:c2:59:d3:50:3e:28:fd:
         f7:e1:06:b9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QUE4QTExMC8GA1UEBRMoODQyMzMyOTFEMkRDNkFDODYwRjU0QkVFQ0U4MUQ1NEIw
MzQ0MDNCRjAeFw0yNjA3MjcxMDE5MzJaFw0yNjA4MDMxMDE5MzJaMBgxFjAUBgNV
BAMTDTZhNjczMGI0LWRjMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDivzp+f4maB5GFxyzv8Sb63YfRjp7alGdHDusgQs2tfCwiBauCyvEfgWQVE2w3
JelXkjXMRVGHtIoQ9AwypYaTyWjo8109RUq/dXa+GNIYGY9Ly3UCXfhv5ibqkOpT
2T2ZzWbmxbcdkwokrRZlsaR6//4S6Q/L3sHLQsx1Tk/rDedeyYB4vo6/Djd4+/AL
p1bjEY3KVbuypiAYTXRF7cuBcV1mS8j/9FVlxVr3HX7m4m2M4jD+xUnN1iFU9xBX
8fNZJ7d/NKimOpoR/swUUJMR7p5B8YYefA9IyBn7II6a3+bl46EuBNSj0Z7VirNG
Yi+f7E0i1x45tP90IHAfTeozAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyEn3rVuW
Xdzznlx8rZX4uDxeYgIwHwYDVR0jBBgwFoAUhCMykdLcashg9UvuzoHVSwNEA78w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBQThBLzlGM0U1NTE2RjJE
MTExRjA5ODlBRDhDRTNDNkY1NkJDL2hDTXlrZExjYXNoZzlVdnV6b0hWU3dORUE3
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaENNeWtkTGNhc2hnOVV2dXpvSFZTd05FQTc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB
QThBLzlGM0U1NTE2RjJEMTExRjA5ODlBRDhDRTNDNkY1NkJDL2hDTXlrZExjYXNo
ZzlVdnV6b0hWU3dORUE3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBupLbp3L/5GJeikbuBOCM3qeFmVP1OH44JQla82z1339mAoco7Dh84tgKFR8Nx
Ps7Bpqe1lack19zVhhluFPl39JdJkUEf/i68e5Z4ffv216yvExCV4txbCdWoHfjJ
2j+teqInI95B56St00t0DWYRpEb0CdpX1/cLFBJXtZIfA+S2sVT+11iQWL7Z948F
vQ40kctY1QlTphI+wPxYVwI7Sk7JTs3jBOT9IfVCDQGG/GwEivJ4bONxiSAGN4tx
xulaou5ilWnmxmvihdtlLSW/gc5rH76+b9gEteCBgWx2cythnTyQ403nCXUUiIfp
b4bzBnZ9vsJZ01A+KP334Qa5
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:13 2026 by rpki-client