Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
File:                     IhKO6LQdoZG8pEiIxhUzENZmp78.mft (raw, json)
Hash identifier:          OaTNNhjVtC11HvjWbZ91KHnEiAx930qNC/xI3cDY2jo=
Subject key identifier:   17:5A:76:F0:49:FD:A4:C5:61:95:8A:A7:E4:75:BD:83:9B:81:79:63
Authority key identifier: 22:12:8E:E8:B4:1D:A1:91:BC:A4:48:88:C6:15:33:10:D6:66:A7:BF
Certificate issuer:       /CN=A9135F03/serialNumber=22128EE8B41DA191BCA44888C6153310D666A7BF
Certificate serial:       07BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
Manifest number:          07BB
Signing time:             Tue 12 May 2026 21:29:48 +0000
Manifest this update:     Tue 12 May 2026 21:29:48 +0000
Manifest next update:     Tue 19 May 2026 21:29:48 +0000
Files and hashes:         1: IhKO6LQdoZG8pEiIxhUzENZmp78.crl (hash: 3ctgoZai4cRXmQ1kZIM9aoL+6K7wnOyQmxRCL6ktMWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.crl
                          rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F03, serialNumber=22128EE8B41DA191BCA44888C6153310D666A7BF
        Validity
            Not Before: May 12 21:29:48 2026 GMT
            Not After : May 19 21:29:48 2026 GMT
        Subject: CN=6a039bcc-342f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:24:8b:5d:d6:b6:d0:70:b4:eb:f6:7b:50:
                    78:e5:8c:ea:b6:87:d0:db:de:a3:ee:c9:a4:0d:85:
                    1f:8d:8a:13:bf:99:aa:1a:d7:1f:2b:80:10:a2:ea:
                    fc:2b:40:0e:22:df:42:a4:40:3c:8c:41:f8:d8:ad:
                    e4:04:08:cc:2d:0a:14:60:a1:f1:a0:4e:3e:62:48:
                    b2:e4:06:ff:22:54:bc:cb:99:40:fb:86:ec:59:60:
                    86:c5:a4:ec:95:b5:48:5b:be:d5:c6:12:a4:97:23:
                    4b:b4:53:31:bf:d2:a5:e5:ec:b1:4e:4b:73:79:51:
                    66:8a:72:1e:b4:53:9c:0e:dc:13:31:b0:38:b3:dd:
                    af:a8:11:76:5f:c6:b1:19:c6:68:5b:df:d5:a6:6e:
                    84:05:5e:ea:38:2a:8c:9a:1e:99:c5:b1:aa:ea:5b:
                    ff:30:a8:5d:bd:b0:6e:34:7e:22:46:b8:12:54:56:
                    40:af:81:40:8f:3e:bb:25:b3:42:87:4d:dc:6c:9f:
                    f8:f1:c9:84:5d:65:ab:27:fe:f3:da:2c:ba:40:c9:
                    c2:e1:d6:fb:ff:66:af:f1:4f:6c:88:00:e4:ff:f9:
                    d7:bf:7a:42:53:27:c0:c8:76:f7:41:63:7a:71:4e:
                    ca:e4:65:a1:66:b6:15:a8:a5:b1:5c:dc:62:73:df:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:76:F0:49:FD:A4:C5:61:95:8A:A7:E4:75:BD:83:9B:81:79:63
            X509v3 Authority Key Identifier:
                keyid:22:12:8E:E8:B4:1D:A1:91:BC:A4:48:88:C6:15:33:10:D6:66:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:da:41:0a:ed:b8:25:48:ab:b2:5e:33:ad:37:6c:3a:dd:d7:
         7b:9d:14:c5:99:c1:80:65:96:6e:91:85:bd:74:6c:00:1e:96:
         33:b1:ea:fb:32:49:65:f6:7e:7a:12:e4:fa:bb:7b:8b:f6:06:
         7d:af:e2:f0:1e:81:e4:a0:16:49:af:af:3b:3b:f2:bf:24:3d:
         c9:83:4a:b9:22:3d:2b:65:3d:a1:56:00:7b:1b:ac:f5:05:12:
         f7:4b:b7:df:50:e6:27:81:e8:25:ba:cb:fa:73:48:da:57:af:
         63:87:1f:d8:f6:ae:14:00:05:07:ad:c3:07:06:60:b3:64:bc:
         0c:6d:d9:0f:2c:e2:fd:22:aa:ff:ec:c0:6e:33:ef:9f:f1:4f:
         18:44:7e:82:ab:59:a6:bf:2f:1d:d2:9f:60:9d:4f:4b:10:80:
         2f:3e:d2:64:3c:64:b6:ae:31:e5:a6:25:f7:c6:cf:f6:c3:8e:
         e1:1a:cc:37:ea:c7:2f:f5:16:35:2b:45:3e:65:f0:f8:fc:46:
         9e:81:8e:63:4a:ab:06:fc:a8:c4:56:83:ee:f5:30:46:64:ef:
         d9:9e:32:8c:ba:e5:74:36:b3:13:df:ea:e4:9f:a3:2c:28:b8:
         44:f0:d8:13:e8:d1:f5:94:52:15:cd:61:8c:49:3b:dd:cf:e0:
         49:5a:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:28 2026 by rpki-client