Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
File:                     IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json)
Hash identifier:          wK+0Lfg3VKsJDF5Bvn/utalKIS4enS7FqMAqML4ZcO8=
Subject key identifier:   85:02:F8:34:C5:78:23:BF:C8:E2:75:95:69:02:72:AC:6A:ED:37:88
Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
Certificate issuer:       /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
Manifest number:          2E
Signing time:             Mon 11 May 2026 08:54:35 +0000
Manifest this update:     Mon 11 May 2026 08:54:34 +0000
Manifest next update:     Mon 18 May 2026 08:54:34 +0000
Files and hashes:         1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: fU0M5qtWAtFmwuk1OyP8HmUvB9mWUO4Biqic8DlM36A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
                          rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
        Validity
            Not Before: May 11 08:54:34 2026 GMT
            Not After : May 18 08:54:34 2026 GMT
        Subject: CN=6a01994a-8635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:2c:e7:a9:de:66:c8:45:32:af:b3:c2:dc:
                    93:6f:07:e3:36:17:2e:80:ab:17:86:12:3e:16:22:
                    da:0a:53:99:15:14:27:d6:84:82:64:73:67:65:a1:
                    f7:da:bd:3d:ec:38:73:d6:8f:74:e7:ab:bc:2f:97:
                    1c:38:fe:e3:0e:db:0f:d9:6f:c4:24:ee:7f:60:92:
                    99:3f:d7:4a:67:3a:b9:77:61:43:c0:2a:a3:9c:68:
                    f5:f2:c2:6c:93:ac:6a:89:3e:31:6b:6a:ec:72:9e:
                    4b:5d:c2:5a:f7:4f:f3:61:1d:b0:ec:52:bd:17:be:
                    b8:13:fb:d4:b6:ed:03:a9:b5:9f:2e:be:a8:bf:71:
                    47:47:c4:b7:08:9a:8f:18:f2:02:d2:80:0a:98:9a:
                    4a:72:dc:57:70:29:1a:9a:21:8c:da:89:94:25:8a:
                    25:37:34:33:60:6e:ea:d4:90:df:95:61:e3:41:63:
                    09:7e:5c:b1:68:39:fc:2e:a0:02:2e:c4:60:f6:26:
                    97:1b:46:fc:e5:32:76:7c:f6:ca:e1:44:dd:40:26:
                    15:d2:29:d3:4d:99:55:d9:53:b5:15:9f:de:f9:6f:
                    ee:4b:d6:2e:77:8e:fb:ee:40:93:be:d9:4b:5e:65:
                    e6:7d:c4:d1:18:fb:ef:24:e7:37:a8:09:d0:6a:25:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:F8:34:C5:78:23:BF:C8:E2:75:95:69:02:72:AC:6A:ED:37:88
            X509v3 Authority Key Identifier:
                keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:dd:61:bc:db:db:23:ee:58:6c:05:92:5f:fd:6a:0e:53:
         3d:70:76:06:80:bf:24:1f:23:a2:03:8c:5f:f1:7a:8e:34:16:
         99:2b:da:36:93:be:09:bb:ec:1c:56:97:3a:85:0d:14:09:e3:
         fa:0b:78:ed:73:6d:85:65:26:26:f5:b9:31:a6:24:79:f8:d9:
         11:74:a0:e4:ce:84:aa:9d:ae:78:1c:01:57:ff:0e:4a:68:64:
         d7:2a:00:5e:b4:2d:9b:50:8e:50:16:88:b2:31:c2:60:94:d2:
         e6:d4:89:6f:69:a3:95:71:51:90:47:3b:15:0f:1d:ce:84:d6:
         dc:e8:47:cf:59:1a:e4:54:27:9e:cc:f7:8c:22:cb:9d:79:53:
         71:8f:95:1e:d7:da:24:c0:b0:98:92:10:71:e8:1b:3f:c6:51:
         0e:5e:4e:d8:7b:ff:3b:49:d8:19:79:93:46:67:3c:ba:d1:7a:
         57:74:6e:dd:60:8d:65:35:07:67:34:42:fa:65:0c:1c:2f:70:
         32:d9:7f:cf:e4:7f:60:6a:fc:6e:35:65:bc:f5:26:27:8a:4b:
         91:2d:bf:72:fa:08:c3:5f:7a:ea:9f:71:c0:0f:81:fc:2a:e6:
         f3:23:b9:df:fa:67:3d:a2:e2:8e:34:25:0e:94:85:43:15:b1:
         b4:e1:b7:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG
QzQ1MjI2MzAeFw0yNjA1MTEwODU0MzRaFw0yNjA1MTgwODU0MzRaMBgxFjAUBgNV
BAMTDTZhMDE5OTRhLTg2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbqiznqd5myEUyr7PC3JNvB+M2Fy6AqxeGEj4WItoKU5kVFCfWhIJkc2dloffa
vT3sOHPWj3Tnq7wvlxw4/uMO2w/Zb8Qk7n9gkpk/10pnOrl3YUPAKqOcaPXywmyT
rGqJPjFrauxynktdwlr3T/NhHbDsUr0XvrgT+9S27QOptZ8uvqi/cUdHxLcImo8Y
8gLSgAqYmkpy3FdwKRqaIYzaiZQliiU3NDNgburUkN+VYeNBYwl+XLFoOfwuoAIu
xGD2JpcbRvzlMnZ89srhRN1AJhXSKdNNmVXZU7UVn975b+5L1i53jvvuQJO+2Ute
ZeZ9xNEY++8k5zeoCdBqJbBpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhQL4NMV4
I7/I4nWVaQJyrGrtN4gwHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy
MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2
QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta
V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAetN1hvNvbI+5YbAWSX/1qDlM9cHYGgL8kHyOiA4xf8XqONBaZK9o2k74Ju+wc
Vpc6hQ0UCeP6C3jtc22FZSYm9bkxpiR5+NkRdKDkzoSqna54HAFX/w5KaGTXKgBe
tC2bUI5QFoiyMcJglNLm1IlvaaOVcVGQRzsVDx3OhNbc6EfPWRrkVCeezPeMIsud
eVNxj5Ue19okwLCYkhBx6Bs/xlEOXk7Ye/87SdgZeZNGZzy60XpXdG7dYI1lNQdn
NEL6ZQwcL3Ay2X/P5H9gavxuNWW89SYnikuRLb9y+gjDX3rqn3HAD4H8KubzI7nf
+mc9ouKONCUOlIVDFbG04beg
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:40 2026 by rpki-client