Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
File:                     iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json)
Hash identifier:          /4xK8GkYyGLvj57bkXZAJSPD4kIF58KGE1VANq0rJsU=
Subject key identifier:   6E:FE:C1:2A:31:23:CE:40:B2:4B:72:D8:A2:F8:8F:C2:D6:6B:12:EA
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Certificate issuer:       /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
Manifest number:          2E
Signing time:             Mon 11 May 2026 08:57:28 +0000
Manifest this update:     Mon 11 May 2026 08:57:27 +0000
Manifest next update:     Mon 18 May 2026 08:57:27 +0000
Files and hashes:         1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: kB32weM6qJPD2nMfA7S3YdfcMu7egvigJ8luEjInEwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
                          rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
        Validity
            Not Before: May 11 08:57:27 2026 GMT
            Not After : May 18 08:57:27 2026 GMT
        Subject: CN=6a0199f7-5589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:05:fd:b6:45:84:30:76:f1:54:b6:4e:36:
                    74:3c:1c:8e:4a:ee:ef:1f:b9:6b:81:ef:b5:8e:4f:
                    1e:1d:5e:1f:5a:35:65:50:81:2b:1c:9b:41:b9:11:
                    5d:6d:b9:62:50:b7:f1:40:89:b3:ea:67:46:31:5f:
                    e1:29:76:00:c2:0a:11:79:93:48:96:1d:52:ee:bc:
                    2b:11:53:be:f6:c6:ae:64:be:de:aa:00:d2:d3:91:
                    50:ea:3e:d3:aa:9e:11:0a:7e:b8:aa:a2:df:5b:68:
                    fc:2e:7c:4e:ca:22:f8:03:06:58:75:0b:30:fc:56:
                    0e:44:95:bf:b5:d1:63:6f:20:3a:47:56:8c:3b:a7:
                    9e:ba:77:f6:93:24:36:9c:01:ad:ea:1b:72:70:82:
                    99:ee:6c:c9:9b:c9:db:04:97:d6:48:79:cb:45:5b:
                    07:81:d2:8c:7b:14:f6:04:80:96:da:2e:cb:d2:40:
                    1b:c1:bf:1e:84:fb:15:51:4a:24:2e:41:32:55:33:
                    64:38:1d:86:df:f4:2e:72:94:00:4f:7b:db:1c:be:
                    d6:7d:f9:74:12:91:63:49:f9:24:16:4b:78:07:09:
                    92:8b:f2:0a:18:e6:9b:e1:9f:c8:c3:20:7e:7b:ed:
                    a5:fd:5e:83:ae:09:df:38:e9:f8:41:18:a5:bd:30:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:C1:2A:31:23:CE:40:B2:4B:72:D8:A2:F8:8F:C2:D6:6B:12:EA
            X509v3 Authority Key Identifier:
                keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cc:c7:ab:c5:67:95:3f:2b:4f:d2:6c:bd:60:86:5b:08:a7:
         d8:28:d6:a6:02:48:2e:40:46:ef:5e:b7:84:11:68:2b:53:b5:
         38:a6:70:99:c9:21:2a:99:ae:88:a0:03:b9:34:a4:0c:d5:ef:
         c3:04:8a:f5:2d:4a:d4:25:85:ee:56:cd:d8:2e:7a:8e:5c:28:
         17:7a:4c:3a:44:31:46:93:c4:47:3a:6c:7c:4a:cf:82:91:bb:
         6a:d3:82:21:95:6d:4e:42:9d:63:4d:19:a9:0e:8b:e5:fb:4b:
         30:1a:0a:b0:e3:0d:f1:08:73:49:26:fb:d6:9e:50:1b:a5:9d:
         6b:26:b7:9c:aa:12:1e:c9:4e:d6:3d:ae:aa:a7:e2:b4:58:08:
         89:ff:02:97:85:ae:6d:49:31:08:63:cb:31:04:1b:83:1a:2a:
         af:61:6b:b6:59:2a:24:f2:59:44:d5:5d:2e:3d:f9:5e:95:7b:
         97:54:ba:15:0f:af:38:d3:9d:14:ce:66:4a:a0:d6:94:9f:10:
         62:e9:b5:14:a7:a1:82:4b:2a:dc:77:d5:c4:b5:08:cd:2e:c7:
         f1:f6:7a:3c:56:1a:36:cd:e9:d3:e9:87:b5:97:28:b9:96:fa:
         19:a8:8e:3a:29:20:49:5a:b2:e6:0f:ac:a9:ea:9d:52:6c:c4:
         d4:30:80:3e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDFBQzExMC8GA1UEBRMoODkwQ0FFNzBFRTA1MjczNzI5NTEwMEJGMENGMDExRUIz
MjA0NjJCNzAeFw0yNjA1MTEwODU3MjdaFw0yNjA1MTgwODU3MjdaMBgxFjAUBgNV
BAMTDTZhMDE5OWY3LTU1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfhQX9tkWEMHbxVLZONnQ8HI5K7u8fuWuB77WOTx4dXh9aNWVQgSscm0G5EV1t
uWJQt/FAibPqZ0YxX+EpdgDCChF5k0iWHVLuvCsRU772xq5kvt6qANLTkVDqPtOq
nhEKfriqot9baPwufE7KIvgDBlh1CzD8Vg5Elb+10WNvIDpHVow7p566d/aTJDac
Aa3qG3JwgpnubMmbydsEl9ZIectFWweB0ox7FPYEgJbaLsvSQBvBvx6E+xVRSiQu
QTJVM2Q4HYbf9C5ylABPe9scvtZ9+XQSkWNJ+SQWS3gHCZKL8goY5pvhn8jDIH57
7aX9XoOuCd846fhBGKW9MBWxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbv7BKjEj
zkCyS3LYoviPwtZrEuowHwYDVR0jBBgwFoAUiQyucO4FJzcpUQC/DPAR6zIEYrcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwMUFDL0IwNzUwMjhBMTJD
QTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpjcFVRQ19EUEFSNnpJRVly
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaVF5dWNPNEZKemNwVVFDX0RQQVI2eklFWXJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
MUFDL0IwNzUwMjhBMTJDQTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpj
cFVRQ19EUEFSNnpJRVlyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB/zMerxWeVPytP0my9YIZbCKfYKNamAkguQEbvXreEEWgrU7U4pnCZySEqma6I
oAO5NKQM1e/DBIr1LUrUJYXuVs3YLnqOXCgXekw6RDFGk8RHOmx8Ss+Ckbtq04Ih
lW1OQp1jTRmpDovl+0swGgqw4w3xCHNJJvvWnlAbpZ1rJrecqhIeyU7WPa6qp+K0
WAiJ/wKXha5tSTEIY8sxBBuDGiqvYWu2WSok8llE1V0uPflelXuXVLoVD684050U
zmZKoNaUnxBi6bUUp6GCSyrcd9XEtQjNLsfx9no8Vho2zenT6Ye1lyi5lvoZqI46
KSBJWrLmD6yp6p1SbMTUMIA+
-----END CERTIFICATE-----
Generated at Wed May 13 08:05:47 2026 by rpki-client