Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
File:                     iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json)
Hash identifier:          jBKidX0ubgNxsYGentQCEbHKf1oQnzoaHoKaWYZ25i0=
Subject key identifier:   AA:9B:E8:F1:8B:C3:19:DC:85:67:CA:38:13:3B:FE:15:54:58:E7:70
Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98
Certificate issuer:       /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
Manifest number:          20
Signing time:             Mon 11 May 2026 09:06:51 +0000
Manifest this update:     Mon 11 May 2026 09:06:51 +0000
Manifest next update:     Mon 18 May 2026 09:06:51 +0000
Files and hashes:         1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: MdWVmVcsiNB/xcXQv6OMwFk955EOkpi/a5nITAh10qc=)
                          2: F5FB1528251811F19BF603D3C0833773.roa (hash: 8JF1Xwm4ghBxpQhLmUBlUSU0yke5/SmVI3FtoYK94Ho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl
                          rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98
        Validity
            Not Before: May 11 09:06:51 2026 GMT
            Not After : May 18 09:06:51 2026 GMT
        Subject: CN=6a019c2b-eef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:4f:e7:55:b1:6d:c3:24:a6:57:cd:70:cb:
                    9e:6c:8a:78:62:1a:8d:74:72:40:0e:1e:37:a0:5e:
                    4a:04:f4:01:e0:db:7d:cd:ba:7a:b3:ce:f7:1e:67:
                    91:57:83:6c:ab:38:53:5d:82:bc:48:bc:ec:2a:ac:
                    15:53:92:06:1c:aa:c3:a6:45:cf:80:e1:6f:1e:ba:
                    88:86:7a:30:fd:b0:72:7d:78:dd:c8:cf:47:06:02:
                    eb:aa:28:f7:a1:75:4d:59:e5:21:8b:3f:57:e4:66:
                    37:75:d4:b4:ab:c0:f2:88:a4:5d:de:07:72:94:79:
                    e0:ad:97:58:7c:21:a8:20:9b:3d:ac:99:60:f9:f8:
                    e2:ae:2e:cc:4a:9a:cd:3f:4e:d8:68:a1:5e:fd:1a:
                    e6:05:8b:b9:75:6a:59:1e:58:e1:4e:8c:31:ab:d8:
                    2c:24:ae:48:8d:06:13:6d:c0:8c:97:0f:96:68:d9:
                    45:2c:1e:e8:dc:41:72:54:6d:dc:2e:53:ff:05:00:
                    13:a0:c6:21:c0:a0:ae:ba:f7:de:5a:76:c0:0c:c7:
                    b6:a7:c6:98:62:11:84:a5:e0:1a:53:87:c0:93:78:
                    36:59:99:d4:53:0d:b3:fd:10:04:92:05:4e:74:13:
                    17:18:77:51:52:60:b3:32:9b:4f:8c:03:ee:d3:5f:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9B:E8:F1:8B:C3:19:DC:85:67:CA:38:13:3B:FE:15:54:58:E7:70
            X509v3 Authority Key Identifier:
                keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:73:c6:c4:ba:2b:f3:00:78:13:1d:c7:8a:a2:4a:bd:e5:
         6e:2c:24:76:d3:b3:18:8a:74:f6:d7:49:c3:40:e7:e6:c7:73:
         5f:05:4a:dc:07:e8:9d:d9:47:23:bc:02:a2:6f:70:61:ae:7a:
         77:07:21:80:dc:12:50:8f:96:29:29:a5:be:08:d3:ab:8c:53:
         e0:6e:fd:14:73:cd:be:6b:34:64:b3:df:6c:f3:64:7b:02:20:
         27:8f:1e:9e:b1:73:7c:fd:cd:93:96:65:22:a0:2b:fb:b9:fc:
         37:ba:d2:5a:91:72:97:48:79:b5:50:25:ec:3e:11:1b:a3:c6:
         f6:19:35:f4:74:d8:29:3f:8d:8b:68:78:ed:a5:d0:83:70:76:
         6a:cf:f3:e7:72:de:4b:33:fe:3b:6a:3d:2a:e2:10:46:ca:36:
         f7:3a:e7:23:34:ff:b4:cf:6b:57:a1:d5:71:f1:97:92:de:93:
         05:49:15:25:34:90:cc:d1:e9:b4:e7:49:7c:fb:c4:11:f4:25:
         fd:5d:75:a2:54:eb:9a:05:52:20:64:be:c9:4b:de:fe:77:4f:
         f2:c8:d8:68:dc:31:31:60:71:0a:db:b9:a9:fc:4c:c1:0d:9d:
         8d:44:b9:b5:f3:03:e6:db:0e:40:b1:b4:63:2c:f2:23:b8:37:
         33:51:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:31 2026 by rpki-client