Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
File:                     iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json)
Hash identifier:          5xwyIKlOJEXhsG74PcpqEDtGMEdOAjFjEbA+Qlc7ezo=
Subject key identifier:   33:37:91:42:A2:AC:13:E2:2D:6B:92:F3:EA:D0:C2:42:78:D7:6F:B8
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Certificate issuer:       /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial:       0B7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
Manifest number:          0B68
Signing time:             Tue 12 May 2026 19:14:31 +0000
Manifest this update:     Tue 12 May 2026 19:14:30 +0000
Manifest next update:     Tue 19 May 2026 19:14:30 +0000
Files and hashes:         1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: RiXnGh7d9Y5QV4ZCNP4hj+ut7cyu1OA5UxMYZZfMyQA=)
                          2: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=)
                          3: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
                          rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2942 (0xb7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
        Validity
            Not Before: May 12 19:14:30 2026 GMT
            Not After : May 19 19:14:30 2026 GMT
        Subject: CN=6a037c17-fe89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:d8:3d:5a:3c:f9:72:0a:db:ef:b5:16:b2:
                    cb:ba:7e:c0:f7:8b:30:2d:7e:4d:1e:d7:6a:92:e0:
                    91:53:15:42:f4:20:74:e6:65:54:ba:a4:9a:bd:e8:
                    ba:a3:18:9f:e9:25:b4:68:57:67:b0:25:a2:9b:67:
                    e9:1c:b1:ef:fb:1b:5d:f4:e9:7d:48:31:66:5f:59:
                    56:17:70:f5:97:27:84:74:97:d2:7e:53:cf:b8:27:
                    11:61:be:82:ca:fa:1f:e4:16:4d:84:f1:86:84:79:
                    74:2d:8b:dc:90:7b:e6:a1:de:bc:4b:7b:ab:1d:e0:
                    ff:4e:ee:95:d8:05:de:b7:fe:61:eb:e8:0e:65:44:
                    9c:4c:ea:25:08:fb:cf:ed:4e:ee:7f:f0:99:5d:53:
                    c7:28:a4:66:31:a6:4c:16:f6:7c:e7:4d:85:2f:87:
                    91:b5:62:58:3f:11:18:7b:a8:8a:d5:3b:f9:1f:53:
                    99:76:4e:64:6c:5a:18:c7:c2:34:ab:06:d3:93:23:
                    e3:01:57:30:a0:0e:7d:31:19:30:5a:2e:83:b7:e2:
                    88:f8:3a:5b:5f:f8:f0:c5:e3:4e:e5:63:1e:12:72:
                    c2:64:53:e4:80:23:22:ae:0c:da:cc:a1:7d:4d:db:
                    c7:46:dd:5f:8c:2f:bd:82:54:24:95:72:c3:82:9d:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:91:42:A2:AC:13:E2:2D:6B:92:F3:EA:D0:C2:42:78:D7:6F:B8
            X509v3 Authority Key Identifier:
                keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:10:c8:9e:2a:f3:f0:e2:71:9f:f8:1d:0e:f7:6c:9c:23:03:
         9a:a6:82:3e:76:10:8f:37:2c:2d:b7:73:9c:23:52:87:c6:51:
         e1:58:19:62:48:bb:e8:89:81:bb:27:22:1e:55:9b:91:15:ab:
         fa:d2:27:dd:99:31:e1:a3:70:95:d1:07:69:21:36:18:e7:e7:
         bc:66:31:e2:62:93:d1:39:03:5f:29:08:fa:99:56:b2:04:ef:
         a1:27:11:16:fc:96:95:b0:63:9c:09:fa:7b:74:a9:42:b5:5c:
         e1:02:59:e8:5d:a8:1a:80:3e:7b:c2:5d:9f:d6:fc:73:5d:a0:
         a6:b7:45:05:38:38:6e:35:9d:79:32:84:0b:5a:5b:d5:6e:47:
         f7:94:d7:8d:ef:10:28:98:9d:3b:7d:a9:ff:64:59:2f:62:d1:
         1b:50:f5:13:32:9a:16:36:3f:d3:e4:2b:56:7e:04:84:50:c9:
         92:ae:47:17:9a:fe:ab:d1:7f:21:da:30:6e:57:95:08:f2:86:
         54:b7:77:db:be:20:9f:a6:85:8f:e6:08:8c:e3:b6:c7:9b:c2:
         04:f1:09:b9:8a:f8:a1:f8:bc:71:19:c2:a8:0e:c7:f8:7a:61:
         5b:ea:ea:01:6e:79:0e:4d:76:2a:cf:05:d0:93:45:67:25:70:
         a4:e2:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:32 2026 by rpki-client