Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
File:                     IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft (raw, json)
Hash identifier:          ObknhiHKliQ9qCShdOqnbKHfXoNVzflSGSnHi/i1irQ=
Subject key identifier:   14:E9:5E:49:7F:20:B5:1D:9E:1C:40:EB:FE:05:D4:51:74:59:07:E1
Authority key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
Certificate issuer:       /CN=A9195BA9/serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62
Certificate serial:       0A82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
Manifest number:          0A70
Signing time:             Tue 12 May 2026 19:40:00 +0000
Manifest this update:     Tue 12 May 2026 19:40:00 +0000
Manifest next update:     Tue 19 May 2026 19:40:00 +0000
Files and hashes:         1: IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl (hash: fP1Gp4tN9r3f+L8WbgUPD8kduwmtZUIISr3G6ixQdKQ=)
                          2: 54DD69FA839011EAB5B82263C4F9AE02.roa (hash: KvrhkQvnKnpFTYVGWnMJN98DGB3DYDNMGELyZhZWRGk=)
                          3: 543CDDF0839011EAB5B82263C4F9AE02.roa (hash: LPpHOK81C3pNsWyGa2Q2W3gfstRuGd26hh2KRKuaOPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62
        Validity
            Not Before: May 12 19:40:00 2026 GMT
            Not After : May 19 19:40:00 2026 GMT
        Subject: CN=6a038210-3631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:32:1a:9c:d5:a9:39:1c:ec:28:d8:c0:e6:
                    de:36:86:34:d9:ea:40:f9:bc:c2:df:4f:14:3a:16:
                    cd:f6:c6:f5:2e:0b:0b:7b:79:72:a9:d7:08:57:b7:
                    ed:1d:78:a2:54:42:e6:38:f6:4a:50:e5:79:46:c0:
                    93:20:db:ce:73:4f:4d:1f:b0:c1:82:2a:98:62:c5:
                    65:73:78:8c:16:ee:3d:b8:e2:35:ad:85:87:53:c0:
                    56:83:89:9e:d5:39:41:30:25:6c:9e:1e:9c:bc:4d:
                    77:d1:1b:68:db:e5:61:1e:8b:57:f9:6c:46:9a:49:
                    37:ae:e4:b3:91:6c:19:a9:13:56:bf:8a:1e:d5:17:
                    06:c0:41:28:31:4a:26:30:b8:bd:8d:5b:1c:3c:c8:
                    63:70:ee:80:af:bf:bd:38:b9:ec:e0:c2:73:51:38:
                    cf:e4:ba:c2:65:43:13:07:fb:39:6a:ac:01:4f:c8:
                    cc:a2:31:a6:48:32:18:32:94:30:0b:1e:58:4e:dd:
                    66:99:ce:78:7d:42:35:37:f8:b4:64:af:92:4f:02:
                    6b:9e:e1:1c:14:3f:dd:a3:f4:65:1b:a0:e0:93:c6:
                    2a:78:61:3e:08:8e:a9:11:24:d5:cb:2c:1c:4f:c5:
                    28:62:92:da:38:f0:b3:68:31:52:d7:26:d0:c8:76:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:5E:49:7F:20:B5:1D:9E:1C:40:EB:FE:05:D4:51:74:59:07:E1
            X509v3 Authority Key Identifier:
                keyid:22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:df:cb:1f:13:aa:28:4f:1d:bd:ee:13:8f:51:8f:e5:4d:
         07:34:02:d2:b2:d9:b3:55:85:3a:f7:2c:6d:e6:24:cb:32:86:
         b7:d3:7a:86:e3:8a:44:fd:3f:0c:0f:bb:78:39:df:0c:cc:aa:
         76:3d:6b:d4:bb:83:74:95:ca:29:60:94:55:c3:1c:69:f2:02:
         c3:cd:01:54:8b:ee:cf:3c:97:1f:29:a5:4e:1d:ac:8f:9d:ce:
         01:00:dd:63:d9:50:71:2f:4b:e3:57:67:50:1f:97:70:ac:ae:
         10:d3:de:06:af:66:a2:f1:cd:d4:0b:6d:92:80:88:42:85:4b:
         ac:1e:50:9c:fc:5d:0e:5d:70:91:e3:ec:71:6d:3b:7b:fe:68:
         f4:61:80:19:47:cf:1e:43:0f:b3:37:02:79:08:91:42:80:b7:
         e4:af:32:71:b7:a9:4e:4c:0d:76:cf:3d:af:3c:64:49:23:e7:
         de:4c:a5:f9:d4:51:e7:67:10:b9:ff:1f:8a:a5:3d:fb:50:01:
         ee:41:76:36:1d:26:2e:08:cc:77:b7:46:d0:76:9d:56:61:fa:
         c1:e3:56:62:17:d1:ff:2e:8b:c2:0c:ec:e4:4d:73:95:97:bc:
         db:e1:1b:4e:21:3b:f8:e6:8a:7a:e3:ca:b5:7a:26:96:a2:b7:
         73:09:d5:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVCQTkxMTAvBgNVBAUTKDIyNDVBRDkxNTQzQUREQUQ3ODEyM0RENDE1RDY1OUJC
NTJENUZCNjIwHhcNMjYwNTEyMTk0MDAwWhcNMjYwNTE5MTk0MDAwWjAYMRYwFAYD
VQQDEw02YTAzODIxMC0zNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpUyGpzVqTkc7CjYwObeNoY02epA+bzC308UOhbN9sb1LgsLe3lyqdcIV7ft
HXiiVELmOPZKUOV5RsCTINvOc09NH7DBgiqYYsVlc3iMFu49uOI1rYWHU8BWg4me
1TlBMCVsnh6cvE130Rto2+VhHotX+WxGmkk3ruSzkWwZqRNWv4oe1RcGwEEoMUom
MLi9jVscPMhjcO6Ar7+9OLns4MJzUTjP5LrCZUMTB/s5aqwBT8jMojGmSDIYMpQw
Cx5YTt1mmc54fUI1N/i0ZK+STwJrnuEcFD/do/RlG6Dgk8YqeGE+CI6pESTVyywc
T8UoYpLaOPCzaDFS1ybQyHZLAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTpXkl/
ILUdnhxA6/4F1FF0WQfhMB8GA1UdIwQYMBaAFCJFrZFUOt2teBI91BXWWbtS1fti
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9EODkxNDc4Qzgz
OEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNhMTRFajNVRmRaWnUxTFYt
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lrV3RrVlE2M2ExNEVqM1VGZFpadTFMVi0ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUJBOS9EODkxNDc4QzgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNh
MTRFajNVRmRaWnUxTFYtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATx7fyx8TqihPHb3uE49Rj+VNBzQC0rLZs1WFOvcsbeYkyzKGt9N6huOKRP0/
DA+7eDnfDMyqdj1r1LuDdJXKKWCUVcMcafICw80BVIvuzzyXHymlTh2sj53OAQDd
Y9lQcS9L41dnUB+XcKyuENPeBq9movHN1AttkoCIQoVLrB5QnPxdDl1wkePscW07
e/5o9GGAGUfPHkMPszcCeQiRQoC35K8ycbepTkwNds89rzxkSSPn3kyl+dRR52cQ
uf8fiqU9+1AB7kF2Nh0mLgjMd7dG0HadVmH6weNWYhfR/y6Lwgzs5E1zlZe82+Eb
TiE7+OaKeuPKtXomlqK3cwnVgg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:22:01 2026 by rpki-client