Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
File:                     IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json)
Hash identifier:          RbrwVPmARy9B+IIflp2Wa6FEvmReWvKvuk+jH26IThY=
Subject key identifier:   BC:06:B5:AF:B2:EC:31:EF:30:6A:EA:2E:96:FD:FF:62:9F:A7:2A:31
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Certificate issuer:       /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial:       10B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
Manifest number:          10AB
Signing time:             Thu 26 Mar 2026 17:17:41 +0000
Manifest this update:     Thu 26 Mar 2026 17:17:41 +0000
Manifest next update:     Thu 02 Apr 2026 17:17:41 +0000
Files and hashes:         1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: Yy64U+9MqVW3SqfbG29kMSLU7KaUP3K1OQHgt9E7XFQ=)
                          2: 608836D046B111E98B793856C4F9AE02.roa (hash: j/7cfI/0+SrAI6zJ8aTltm4c8iKanonzyycpVr5NLNQ=)
                          3: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: geAH95kNtBUqAghRAhDpu6+bO8JNHhHtwzkMrvfTHUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4281 (0x10b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
        Validity
            Not Before: Mar 26 17:17:41 2026 GMT
            Not After : Apr  2 17:17:41 2026 GMT
        Subject: CN=69c56a35-8c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:6d:f6:70:95:59:01:5c:c1:c5:8a:85:a3:
                    f6:7e:c6:a4:eb:c7:76:af:c0:a6:59:12:6b:9e:57:
                    69:1a:ea:23:3f:37:ea:6e:b3:f6:4e:be:ea:6e:db:
                    0d:91:26:a5:1e:56:1c:bc:4d:5f:83:37:52:20:9f:
                    4c:cf:02:b1:ca:0e:dd:a5:21:59:cf:17:69:f8:18:
                    68:5b:c5:0b:f2:87:73:05:e3:d7:f3:c6:d5:fa:7a:
                    6a:ab:1b:d0:94:36:6b:2f:a7:59:ee:9b:3d:7c:76:
                    d3:88:93:16:92:74:43:1b:26:49:79:32:8d:89:f4:
                    00:88:10:2f:1c:a2:65:0b:d1:be:3d:3d:4c:06:dd:
                    76:bb:ee:e6:6e:dc:84:b8:11:a8:a4:08:35:75:73:
                    34:ab:17:93:cc:63:a6:49:27:49:00:10:8c:6e:c5:
                    03:36:20:d0:7e:5d:54:2d:96:92:1b:bb:55:7e:26:
                    cf:d6:a1:c0:fe:95:35:c6:cd:64:f9:80:b7:07:7d:
                    25:f0:73:f0:da:e2:22:d4:93:8c:60:92:00:5c:5a:
                    5e:20:f4:6d:2b:b9:e5:b6:24:65:15:92:0e:e9:90:
                    25:00:d1:ef:77:90:12:dc:19:54:6c:97:06:a0:87:
                    3b:bd:86:fa:64:f5:0c:cc:89:be:ea:0c:8b:63:2e:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:06:B5:AF:B2:EC:31:EF:30:6A:EA:2E:96:FD:FF:62:9F:A7:2A:31
            X509v3 Authority Key Identifier:
                keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:83:a8:16:f5:97:a3:7d:71:51:78:23:e4:76:af:46:32:
         39:56:7b:a6:99:88:26:4f:5b:68:e6:75:88:af:13:e9:9f:96:
         c3:64:fa:67:e6:18:18:b5:3d:bf:ec:41:32:d5:5b:f1:a7:a1:
         d7:73:25:3c:a4:22:fc:72:78:24:b2:f8:ea:32:ab:6e:83:10:
         b8:a6:08:12:b2:85:35:f5:63:54:63:dd:26:1e:59:67:92:f4:
         73:06:b1:1d:f0:3c:86:ed:5c:4a:0f:69:cb:b7:42:2c:99:d5:
         c6:2f:9f:e4:5e:e2:3c:1e:1e:6e:33:95:2b:a9:84:0b:90:69:
         87:a1:d4:cb:39:e1:9b:f2:f9:6c:06:1d:84:0b:ff:60:a9:17:
         25:91:a0:c6:4a:a0:47:fc:04:f2:d2:1b:61:4e:d1:e2:af:94:
         1b:13:56:2d:c6:9c:ce:c8:49:8b:3a:20:ec:b3:66:44:a7:65:
         fa:ee:04:ae:2a:41:ae:c7:37:07:3c:f8:ee:d3:bf:9c:14:38:
         17:3f:85:d6:35:40:8c:63:a1:77:77:eb:b9:da:c2:68:1b:c1:
         4d:4b:70:30:88:d6:48:66:85:7b:d9:9c:f5:a7:19:d8:2f:84:
         65:99:98:c1:4c:11:af:69:84:44:3b:f7:11:2d:eb:20:71:f8:
         7e:eb:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:38:10 2026 by rpki-client