Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          jRAv8nSEtUUeElUTXXV/TzWlq1cEp0Ll0C5DIMqzftY=
Subject key identifier:   FF:6B:E0:8C:2E:75:F9:17:95:84:78:06:3A:5D:FC:C9:AB:F5:4F:2E
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       03EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          03E2
Signing time:             Wed 13 May 2026 00:38:49 +0000
Manifest this update:     Wed 13 May 2026 00:38:48 +0000
Manifest next update:     Wed 20 May 2026 00:38:48 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: LWgCkzq2fNgY1jIA646lm2QHMbIOAEFjmlB38wPINxU=)
                          2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
                          3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: May 13 00:38:48 2026 GMT
            Not After : May 20 00:38:48 2026 GMT
        Subject: CN=6a03c818-93c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:56:4e:70:fd:6f:ad:56:2a:a8:ca:b0:2f:
                    fe:52:e5:69:96:9e:c4:ac:49:13:2d:c9:1c:d2:0b:
                    d0:bc:af:80:da:38:2b:77:e7:65:a4:89:6f:cb:6e:
                    0e:72:64:f6:d7:28:43:1a:65:fd:4a:d3:7c:90:da:
                    46:ad:04:2f:33:6d:cb:43:30:3f:e8:f0:e7:df:72:
                    e6:bc:3a:ef:e0:f4:dc:aa:36:80:a6:39:df:18:dd:
                    1c:d1:50:b5:cf:fb:2d:8c:8f:d8:49:34:15:27:c4:
                    5c:90:f9:e3:b4:5a:b4:f5:e2:6a:8b:b8:2b:8b:6c:
                    38:6c:e4:80:77:31:f7:fc:1e:01:f2:e1:b1:28:e4:
                    ff:32:da:10:fb:81:c8:d2:11:bb:7c:58:80:a5:aa:
                    01:3a:04:1e:80:37:66:9b:c2:df:4e:83:53:bb:d9:
                    a1:8f:ef:35:ce:49:76:d0:3a:85:b1:d7:21:c9:e8:
                    15:5d:cf:04:b3:c4:2d:57:f9:9a:f6:94:82:ee:7b:
                    00:9d:2b:11:8e:de:48:5c:97:86:f8:16:78:a6:df:
                    9b:22:c8:0b:e6:0b:59:ea:ce:44:20:90:4a:5f:b1:
                    08:b3:2e:a1:fc:0a:6e:de:64:9b:2c:1a:18:33:08:
                    e6:fe:d2:5d:40:ea:72:f4:83:24:6d:88:83:e7:bb:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6B:E0:8C:2E:75:F9:17:95:84:78:06:3A:5D:FC:C9:AB:F5:4F:2E
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:a8:03:ac:ae:bf:6e:a3:e6:bf:3a:2a:5a:55:ef:3d:9f:
         d9:fc:27:52:4b:08:17:d3:ba:c4:48:7e:98:f8:01:b0:22:37:
         22:20:e9:99:63:a0:29:dd:5a:31:60:db:e5:06:e9:7c:09:4b:
         0b:18:c0:b8:53:ee:3e:55:bf:34:9c:7d:6b:c2:60:0e:96:8b:
         99:86:7b:5d:c5:60:c2:1e:c4:67:b5:4c:8f:20:97:52:0c:9e:
         db:21:e6:06:4d:92:ec:16:8a:eb:28:40:31:54:b4:17:ce:29:
         9c:f2:ea:cd:fb:bd:3c:21:34:16:e4:ec:94:f4:7a:11:89:4d:
         0c:16:27:40:30:f2:77:52:33:b4:e9:85:20:1d:6d:5e:4d:64:
         14:cf:59:2b:c5:89:4f:71:e1:a8:61:04:14:d6:74:3a:12:46:
         9a:f4:b6:34:0c:4c:dc:11:33:3a:38:f6:4d:82:61:5a:4a:82:
         9c:63:3f:7d:31:a9:4f:34:52:aa:35:28:81:4e:2d:4c:af:52:
         f6:f0:45:87:05:96:22:ed:cd:8c:1d:a5:61:0d:a4:13:bf:04:
         89:46:08:92:0c:83:b9:ee:11:e6:c9:b2:5d:22:94:a5:64:8d:
         e6:78:b9:16:7d:ab:37:ad:01:f1:c0:6e:7f:53:08:32:85:79:
         cc:03:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:12 2026 by rpki-client