Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File:                     IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier:          3zcM+L9v9ip7Drb/uT0sdlbe4Sc+xE+m/nFpQS3jvvM=
Subject key identifier:   DB:F8:DA:65:22:17:31:09:9C:C6:2D:1B:2A:F8:62:1B:36:F7:29:BA
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer:       /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number:          085F
Signing time:             Tue 12 May 2026 20:52:34 +0000
Manifest this update:     Tue 12 May 2026 20:52:33 +0000
Manifest next update:     Tue 19 May 2026 20:52:33 +0000
Files and hashes:         1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: 27daMIaEBygMafYTuFRunCNz1n3+c1yc0yHHgxsfSEk=)
                          2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
                          rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
        Validity
            Not Before: May 12 20:52:33 2026 GMT
            Not After : May 19 20:52:33 2026 GMT
        Subject: CN=6a039311-b070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:29:5d:11:e2:b7:44:91:66:cb:0c:99:57:
                    5c:4b:8e:8b:bc:45:82:db:0d:d7:33:9d:24:90:cd:
                    16:e7:60:5b:9c:df:40:9a:d4:0c:80:38:b7:a6:ed:
                    88:20:9d:34:a3:d9:25:25:d5:cc:2f:7d:f7:d2:92:
                    c8:0f:b3:e2:f9:e9:80:b7:45:dd:e2:82:57:1c:4d:
                    d9:4c:c8:bb:de:86:0d:0a:37:4b:a6:97:4c:a4:b2:
                    7f:10:87:20:a0:89:6b:d3:9f:84:60:51:a6:ab:8c:
                    a6:f7:3b:75:2c:8c:9e:c4:ec:93:61:8e:ab:91:a7:
                    2e:69:e2:52:b5:45:a5:35:bb:82:17:96:cc:3a:ad:
                    69:08:9e:12:1e:ec:11:45:52:27:05:0f:51:a3:af:
                    df:42:5b:4e:3c:78:51:b1:34:e9:cc:46:15:ca:45:
                    88:ba:4f:fd:5d:18:ae:8b:fc:74:fb:b1:d4:0e:df:
                    eb:3e:e2:93:9f:79:4b:31:4a:75:4b:bf:f9:be:9e:
                    08:95:bd:37:b4:46:17:df:fd:b4:e9:9a:bb:c2:72:
                    23:1e:8f:bb:88:68:e0:31:60:44:32:8b:27:ae:6c:
                    3b:d5:94:ed:f9:f7:ee:42:a5:6a:30:54:40:bc:c0:
                    ad:56:5c:d5:dd:74:31:f8:64:82:06:16:54:79:30:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:DA:65:22:17:31:09:9C:C6:2D:1B:2A:F8:62:1B:36:F7:29:BA
            X509v3 Authority Key Identifier:
                keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:9d:a1:2c:4e:f8:74:96:33:98:6e:9e:2c:c4:1d:0d:c2:
         b7:40:2c:03:de:f3:89:8a:1b:c1:82:46:6a:1e:e8:67:64:3a:
         c2:8b:ad:44:61:53:38:d3:4b:9f:c0:2c:e4:be:9d:ca:97:43:
         d9:27:b0:5a:3a:f9:54:cf:6b:17:bb:f8:e0:f3:d4:6d:72:78:
         04:51:b5:17:52:3a:00:b7:20:91:5f:cf:45:03:04:36:97:68:
         be:28:d0:61:7f:dd:a1:22:2f:d8:50:4d:78:5f:3a:63:92:9e:
         f4:52:ef:f5:b4:96:c3:ba:25:62:43:9e:cd:5d:a1:c1:68:56:
         76:68:e0:20:c5:85:2e:a1:e2:15:7b:0b:f7:f9:e6:a6:af:40:
         e5:40:bb:fc:87:43:93:63:fc:d7:49:5f:38:cd:1c:65:e2:16:
         be:ee:d0:94:72:4e:14:9a:1e:7a:5c:27:b5:87:09:cc:6e:63:
         8f:bc:8b:ac:92:02:5a:a7:4a:a5:e0:72:5e:74:10:54:f4:fa:
         56:c9:b9:ea:6e:91:94:8f:2e:b3:97:f8:b7:2a:c2:c0:11:83:
         c8:a5:7a:c7:9c:c6:7f:d1:d7:5d:b9:3b:c2:bb:ca:d1:f4:11:
         d5:90:d2:b7:bf:f8:82:5f:38:2c:38:06:8e:2a:8f:97:12:89:
         79:7e:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:39 2026 by rpki-client