Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          pMxnUjU8h0OEvOGJMqJTix9AVbSHlHGuMGrXFfXSmxc=
Subject key identifier:   48:21:99:86:3A:66:1F:75:B7:52:76:73:85:44:3C:D2:41:DA:EB:6A
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          07CB
Signing time:             Tue 12 May 2026 21:28:38 +0000
Manifest this update:     Tue 12 May 2026 21:28:38 +0000
Manifest next update:     Tue 19 May 2026 21:28:38 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: cZeuylvQPR6iUg2zXPkiXS18p0KvTJKwgYPgW7kU55A=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: May 12 21:28:38 2026 GMT
            Not After : May 19 21:28:38 2026 GMT
        Subject: CN=6a039b86-fd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:7b:42:b3:60:56:9b:ac:8d:6b:11:ce:9b:
                    2a:f9:4c:fc:3e:34:87:b8:e1:af:77:94:60:29:35:
                    37:0e:21:27:1b:78:88:60:f5:3f:4e:77:ee:65:78:
                    65:40:72:3b:d0:52:00:a0:4b:d4:84:15:ee:38:82:
                    13:56:4b:2f:3d:2b:eb:91:a7:65:ce:cc:bd:1c:5c:
                    99:c4:10:00:7e:38:7b:13:f8:83:02:1d:93:7d:17:
                    af:0d:74:32:00:cc:44:8e:da:e0:9d:61:0b:42:0d:
                    a8:d4:fa:5f:11:29:1a:04:73:13:73:73:3b:78:1f:
                    f2:b8:31:b2:19:ac:99:e8:6d:5e:73:be:5f:f4:34:
                    3a:78:6b:03:db:0d:c7:22:de:67:f1:ab:17:99:b2:
                    51:0e:07:23:4b:0c:fe:ec:c5:4e:2c:0e:6b:f8:90:
                    92:38:a5:ee:94:41:f5:7e:bf:0d:a0:6b:56:60:b7:
                    0d:c3:32:d4:bb:db:44:3c:1c:81:49:39:6e:ec:25:
                    26:5c:4b:64:f7:09:29:47:ba:46:d1:af:d1:2c:69:
                    91:9d:8f:1b:a2:40:ad:1f:6c:05:ba:d9:ab:10:65:
                    f7:37:cd:b0:0d:fe:88:08:f9:d4:85:6a:a3:b0:dc:
                    83:56:a6:df:70:46:c9:d2:16:b7:be:d9:15:55:d1:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:99:86:3A:66:1F:75:B7:52:76:73:85:44:3C:D2:41:DA:EB:6A
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:93:58:01:13:68:14:9d:5e:59:77:d9:2e:fb:44:62:c2:c8:
         1b:18:e0:1f:df:39:00:57:31:4e:ab:09:22:75:39:e1:f2:a7:
         d5:12:90:97:24:09:61:3f:0e:38:67:f8:ed:15:d0:df:b5:4b:
         ae:5d:c7:f6:e1:df:07:ba:fb:d1:54:cd:74:10:14:87:b6:34:
         c7:8a:bf:8a:87:7d:c1:b6:35:12:01:d5:e1:db:1e:b9:41:ff:
         57:96:20:d4:f2:0e:3c:8c:14:03:dd:f3:1a:fc:93:5d:91:ab:
         fc:0c:55:d9:95:71:66:3a:c3:e3:22:cf:ee:26:58:0e:ad:ea:
         a4:91:16:9a:54:64:29:75:87:55:5b:7c:78:0a:02:e6:90:c8:
         7f:09:f2:74:78:5d:d9:a1:d0:fc:62:7b:a4:cf:95:5e:c3:ff:
         3a:56:f4:fb:1e:ae:25:36:bc:62:46:0f:2f:7b:5b:1c:4f:09:
         3b:78:bd:ee:fd:84:78:41:de:28:aa:68:c8:c7:ac:0a:3d:19:
         5f:ff:89:71:aa:17:01:bc:0b:ae:a3:8e:6f:97:f6:75:5d:a6:
         de:a7:3b:1b:29:94:bc:bf:ed:f8:5b:40:84:89:23:8a:af:ce:
         25:90:8c:af:4c:7b:25:77:91:fd:a6:58:c6:54:58:70:c1:10:
         a3:e4:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:41 2026 by rpki-client