Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File:                     IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier:          LDfvZwjbF8HxoEJy7nH/aXUxoTszs7HCG6+kC7ZXwe8=
Subject key identifier:   85:76:33:76:F0:FC:D1:3B:D1:4F:26:BF:57:F4:AA:CB:BA:CD:3D:71
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number:          3556
Signing time:             Tue 12 May 2026 14:19:54 +0000
Manifest this update:     Tue 12 May 2026 14:19:53 +0000
Manifest next update:     Tue 19 May 2026 14:19:53 +0000
Files and hashes:         1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: ulOMM64wQP7Ltc1izHx8quxA4o2JZWyEfyL71IIdnL4=)
                          2: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=)
                          3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=)
                          4: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: May 12 14:19:53 2026 GMT
            Not After : May 19 14:19:53 2026 GMT
        Subject: CN=6a03370a-cf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:f3:10:0e:6d:31:54:b0:76:88:8d:5d:37:
                    0b:4b:49:c4:60:d0:35:79:2b:9c:cb:d0:64:1b:f6:
                    6a:b8:bb:bd:3b:0c:3f:b5:10:a3:26:46:13:d7:c3:
                    fc:88:07:c8:54:2f:1d:fe:af:b6:f4:5a:2a:3a:ec:
                    bf:f6:72:f6:81:eb:e2:29:b8:d1:13:49:31:70:cf:
                    20:5c:2d:70:ee:ef:d5:e3:18:ef:2d:e7:0b:f3:e9:
                    b8:3e:9b:3b:54:5a:ca:db:0f:ff:fc:55:90:e9:e8:
                    5e:49:21:ab:f2:3b:4b:01:d0:99:44:6e:48:79:48:
                    e4:eb:a3:b4:fe:82:ad:9b:f6:b9:e8:a8:84:56:5c:
                    53:22:78:db:34:50:00:92:7e:d2:54:d8:87:f7:46:
                    48:1a:cc:51:eb:d2:75:12:70:5a:99:d2:f2:14:28:
                    27:a4:af:9f:1b:a1:63:6d:f2:fe:e9:21:18:76:46:
                    08:b2:38:7b:fd:eb:40:db:5e:3f:f0:6a:b6:30:1d:
                    73:21:62:41:5e:6b:0b:bd:d5:a8:ef:28:e7:fd:f0:
                    40:3b:6d:29:3f:74:59:c2:80:2c:78:d4:25:b8:58:
                    45:cb:7b:98:0d:22:37:1b:1d:65:d4:b4:ca:8c:33:
                    db:94:43:93:66:ec:64:57:86:05:24:c5:89:ee:1b:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:76:33:76:F0:FC:D1:3B:D1:4F:26:BF:57:F4:AA:CB:BA:CD:3D:71
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:34:4b:a6:5e:d7:7d:18:69:73:a2:88:45:ad:ed:bf:fc:
         42:33:8b:60:79:df:bf:a4:9d:55:7a:32:07:c8:0c:8d:f7:42:
         99:8d:05:99:1f:a5:18:cf:d3:e8:c3:b1:fa:86:df:b5:8a:a0:
         f8:e8:48:99:9e:fc:c1:77:f0:e5:c6:90:f1:c8:86:73:7d:c2:
         e4:c1:3d:e9:f3:31:13:1c:d0:e1:51:a9:12:37:d2:6e:26:66:
         88:9c:a1:ce:cb:74:ec:c6:6a:95:88:97:39:aa:dc:39:74:f3:
         55:1b:8a:39:1b:7c:e2:9e:ab:22:f4:87:36:1c:1d:73:c5:98:
         df:c2:b9:60:9c:60:dd:1d:b2:13:96:3e:a6:2b:7b:1b:92:a5:
         96:a9:e4:9e:36:bd:06:9c:09:ce:e3:69:72:e6:d4:c5:39:e6:
         c6:2c:e7:ca:55:49:3d:72:38:fd:b7:e6:03:7f:4a:90:49:eb:
         c8:a8:34:de:d0:a6:9f:77:2e:ae:94:03:dd:76:dd:8b:40:4a:
         4b:f9:8c:db:a3:59:11:20:7d:44:d5:9f:e5:e4:23:c1:aa:17:
         45:5e:52:1e:3d:05:75:13:a1:cf:6e:f6:3a:01:73:5c:50:d4:
         b0:e6:cb:25:a7:cb:dd:2b:01:3d:9f:6b:72:00:2e:5d:84:b7:
         5a:9b:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:28 2026 by rpki-client