Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File:                     iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier:          7E8pkUFt9ZeUWO80KzyUOg7Tu26qtVifrVQ2z+pFF4w=
Subject key identifier:   9D:4F:94:F3:A2:2C:EE:C7:69:47:1B:13:1F:AA:FF:9B:4B:E7:F3:9B
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer:       /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number:          0187
Signing time:             Wed 13 May 2026 04:34:48 +0000
Manifest this update:     Wed 13 May 2026 04:34:47 +0000
Manifest next update:     Wed 20 May 2026 04:34:47 +0000
Files and hashes:         1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: V0ukRNyD6+awIGNK8AV+1xP1KJCkc4p6ePEkaUNmUq0=)
                          2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
                          rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
        Validity
            Not Before: May 13 04:34:47 2026 GMT
            Not After : May 20 04:34:47 2026 GMT
        Subject: CN=6a03ff68-d088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:40:2d:69:f4:dc:9d:ef:55:2c:12:95:ad:
                    bf:9f:85:55:66:1b:b7:ee:c1:c3:ed:3b:78:69:c2:
                    33:cc:82:2d:6d:b6:02:c6:aa:1a:b8:88:f7:06:12:
                    10:aa:7b:e4:f3:fd:48:4c:12:68:b1:54:59:81:a3:
                    f0:ae:94:e8:09:4d:34:9e:12:4f:44:36:55:81:e8:
                    07:21:09:4e:42:b3:01:b3:61:69:dc:f8:8e:f3:4a:
                    23:e4:2f:3c:36:3e:5a:62:58:7e:44:c5:ac:2c:49:
                    b4:88:b3:2b:2f:fa:b4:ba:59:f3:ce:27:11:de:5e:
                    7d:6e:98:c4:f0:81:ad:1e:57:73:10:fe:aa:d8:42:
                    7f:db:71:e0:dd:db:73:f0:ef:6d:4a:d8:a9:f1:ea:
                    20:33:d6:64:62:f7:d0:e9:7d:05:14:91:65:ef:4f:
                    cb:83:e4:49:f1:04:1c:70:4d:ae:5d:cd:c1:ba:bc:
                    10:e5:80:f1:96:5c:b8:da:dd:54:4a:35:42:77:a6:
                    dd:26:14:ff:8d:a4:f5:52:de:75:a0:64:7a:76:8d:
                    16:96:0e:4e:1e:07:81:f3:e9:cc:48:56:9d:a8:fe:
                    b8:d0:1d:a4:1f:d1:c4:fb:20:92:8f:a3:c6:fc:71:
                    77:e6:7e:d7:cf:b2:e4:67:fc:bc:33:38:0d:78:72:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4F:94:F3:A2:2C:EE:C7:69:47:1B:13:1F:AA:FF:9B:4B:E7:F3:9B
            X509v3 Authority Key Identifier:
                keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:81:77:27:43:f0:18:6b:d1:45:c2:10:61:22:d5:22:1d:c7:
         a2:a7:d5:0b:36:79:cd:6a:8d:3d:14:36:e0:69:c0:8a:be:8a:
         29:8e:c3:30:82:7c:4b:96:71:64:bf:f7:ff:8c:7e:82:ce:bb:
         d9:9e:13:79:76:8a:f5:fa:f5:9d:bb:05:f6:18:fb:88:c4:00:
         92:a3:cb:d1:ae:6d:a8:2e:03:23:8d:20:66:41:f3:7f:55:12:
         3e:03:66:a8:51:80:6a:84:05:1a:30:fd:ce:20:18:f2:32:59:
         1f:1c:66:03:98:84:27:2a:a2:c2:fd:cc:15:3c:20:3b:c2:58:
         a6:87:b7:91:85:a0:33:10:7c:67:f4:22:11:6c:cc:be:00:d0:
         10:a0:2d:cc:70:79:8b:73:b4:40:ec:4d:ce:cc:8e:7f:77:6d:
         0c:b2:33:fa:58:5b:97:69:49:8b:47:a6:48:e3:6f:0f:aa:db:
         13:23:9d:0d:60:c5:10:01:c1:3b:69:05:20:3a:ac:25:75:32:
         be:97:7d:25:4c:1a:42:cd:46:af:28:f9:fc:9a:04:73:2e:60:
         69:14:2b:92:30:53:87:22:65:a4:b8:e3:04:b6:e9:65:a0:c6:
         f0:9e:d3:4a:8a:fc:53:94:55:82:54:90:13:44:0f:c9:94:ff:
         a4:0e:09:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy
MUMyNTMxOUMwHhcNMjYwNTEzMDQzNDQ3WhcNMjYwNTIwMDQzNDQ3WjAYMRYwFAYD
VQQDEw02YTAzZmY2OC1kMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2XJALWn03J3vVSwSla2/n4VVZhu37sHD7Tt4acIzzIItbbYCxqoauIj3BhIQ
qnvk8/1ITBJosVRZgaPwrpToCU00nhJPRDZVgegHIQlOQrMBs2Fp3PiO80oj5C88
Nj5aYlh+RMWsLEm0iLMrL/q0ulnzzicR3l59bpjE8IGtHldzEP6q2EJ/23Hg3dtz
8O9tStip8eogM9ZkYvfQ6X0FFJFl70/Lg+RJ8QQccE2uXc3BurwQ5YDxlly42t1U
SjVCd6bdJhT/jaT1Ut51oGR6do0Wlg5OHgeB8+nMSFadqP640B2kH9HE+yCSj6PG
/HF35n7Xz7LkZ/y8MzgNeHK04QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1PlPOi
LO7HaUcbEx+q/5tL5/ObMB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE
MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3
MWxubTJNQzV2a0lod2xNWncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMoF3J0PwGGvRRcIQYSLVIh3HoqfVCzZ5zWqNPRQ24GnAir6KKY7DMIJ8S5Zx
ZL/3/4x+gs672Z4TeXaK9fr1nbsF9hj7iMQAkqPL0a5tqC4DI40gZkHzf1USPgNm
qFGAaoQFGjD9ziAY8jJZHxxmA5iEJyqiwv3MFTwgO8JYpoe3kYWgMxB8Z/QiEWzM
vgDQEKAtzHB5i3O0QOxNzsyOf3dtDLIz+lhbl2lJi0emSONvD6rbEyOdDWDFEAHB
O2kFIDqsJXUyvpd9JUwaQs1Gryj5/JoEcy5gaRQrkjBThyJlpLjjBLbpZaDG8J7T
Sor8U5RVglSQE0QPyZT/pA4JMA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:13:53 2026 by rpki-client