Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
File:                     IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json)
Hash identifier:          zE2SsiB1nxFLhuwO9nqIxXzCW/a295++jv0NqbXpQCE=
Subject key identifier:   41:25:A9:8F:B4:E8:57:B0:AC:67:4D:DD:60:01:C2:60:88:A5:EA:61
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Certificate issuer:       /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
Manifest number:          045E
Signing time:             Wed 13 May 2026 00:17:40 +0000
Manifest this update:     Wed 13 May 2026 00:17:40 +0000
Manifest next update:     Wed 20 May 2026 00:17:40 +0000
Files and hashes:         1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: mkQ53kPIQkStXv2eCCWgKL32PFsobElZO7AkP9AqACI=)
                          2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: w+uFKuxo46pJbz+0z1J4ppzq0IlEaMPLvCuS0oM/T0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
                          rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
        Validity
            Not Before: May 13 00:17:40 2026 GMT
            Not After : May 20 00:17:40 2026 GMT
        Subject: CN=6a03c324-fca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:44:d3:eb:92:5d:00:da:66:f0:9d:20:f6:
                    e0:21:24:86:5a:ef:11:ad:23:17:a5:9b:f9:7e:43:
                    31:29:69:92:63:3a:78:8b:b7:3c:a4:d7:bb:a0:dc:
                    b2:db:71:b8:93:0b:b1:32:2d:fe:98:93:b4:08:cd:
                    9d:78:dc:88:4d:43:24:ae:bf:46:35:13:08:4e:97:
                    44:1e:e8:08:ae:c4:ed:b8:93:92:d5:55:a1:79:5d:
                    59:c5:88:9a:62:ca:fb:55:46:b8:89:89:2a:ad:f2:
                    71:c6:93:21:e4:fa:96:07:c7:2b:d4:a0:fa:5f:28:
                    17:9e:73:88:bc:86:28:51:7d:76:0d:d5:92:c5:18:
                    22:4c:0e:3a:fd:bd:8d:ad:36:27:7b:8d:a3:29:05:
                    ec:2a:22:1e:d3:b0:de:92:98:14:7d:84:ac:6a:2e:
                    29:78:b4:2e:84:52:c6:cd:0e:cf:12:69:21:9e:09:
                    13:c9:7a:93:35:dc:a8:b2:3d:ff:f3:59:70:2d:77:
                    f5:f2:ed:7f:6f:72:8d:4d:97:b0:74:18:e7:ea:a0:
                    52:e1:12:9d:e2:a5:c7:28:c5:07:91:15:49:30:2a:
                    fb:c1:91:a5:1d:b0:72:38:07:91:72:46:ac:17:2d:
                    e7:58:96:8b:89:0c:37:fb:7c:21:cf:31:5f:19:08:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:25:A9:8F:B4:E8:57:B0:AC:67:4D:DD:60:01:C2:60:88:A5:EA:61
            X509v3 Authority Key Identifier:
                keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ad:2f:78:71:e6:7e:d6:bf:da:26:e6:69:c0:fe:d8:61:32:
         b8:5d:2c:26:7a:bf:18:8e:a0:fc:77:f0:10:1b:5c:68:63:c0:
         96:46:90:d5:64:06:9c:ac:5f:40:50:37:7d:3b:32:2b:73:31:
         20:ad:b5:ac:db:0f:c8:ad:20:c1:80:86:0b:31:da:8a:20:fd:
         2a:64:24:c8:b3:ca:3f:3c:af:60:22:0e:d8:3d:7e:c0:04:e5:
         f8:e3:13:4d:ce:2b:93:97:1c:07:74:91:28:3c:9a:21:a3:c1:
         1b:a3:c3:8f:5a:04:dd:60:e6:1e:b9:9c:cd:ad:51:87:72:e3:
         4c:e2:fd:41:f2:8a:04:67:a9:1b:6a:fe:da:1b:d1:d6:d0:2b:
         90:8a:9b:a2:cd:27:2c:f8:fe:8b:b4:36:78:ef:2e:70:99:4b:
         e4:a9:ca:10:b2:71:a2:0d:03:6f:a4:c9:51:e0:23:ab:94:85:
         af:e9:26:ee:72:2b:d8:e2:21:a6:07:46:d4:8b:44:0f:c6:d3:
         6a:86:02:02:cb:c1:55:32:cc:50:64:ab:d7:0b:2a:a9:7e:20:
         fd:fe:17:bb:4b:26:43:0d:31:0b:9a:e4:c3:e9:eb:98:87:e3:
         a1:42:34:e4:31:e2:c5:7b:3c:99:54:d7:61:bf:44:d4:b9:c7:
         58:91:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:09 2026 by rpki-client