Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
File:                     IIUPxwwl_bFV037LDsOWLGtH_K0.mft (raw, json)
Hash identifier:          wK4HyBAqMzHXNnKY4RFDGoFa6/JEF2XFmQVa1j5XPBk=
Subject key identifier:   35:B0:A3:9C:9A:9A:0B:D9:5F:11:B3:68:A7:4F:1C:F0:13:E4:4E:23
Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
Certificate issuer:       /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Certificate serial:       07F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
Manifest number:          07EC
Signing time:             Tue 12 May 2026 21:20:16 +0000
Manifest this update:     Tue 12 May 2026 21:20:16 +0000
Manifest next update:     Tue 19 May 2026 21:20:16 +0000
Files and hashes:         1: IIUPxwwl_bFV037LDsOWLGtH_K0.crl (hash: uI8Qc/n+mDPZqRrS8m+yNa2A2Sv/0HxARl745d0bXuA=)
                          2: 934C22582E1C11EBB3ADE232C4F9AE02.roa (hash: /d1oiYvRZiMCHQrnq/bB0/o38ZTfcwJhY9uDXJ1VBK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
                          rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D545, serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
        Validity
            Not Before: May 12 21:20:16 2026 GMT
            Not After : May 19 21:20:16 2026 GMT
        Subject: CN=6a039990-c696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:4f:4e:76:7c:fc:92:5d:a6:99:11:fd:8f:
                    f5:30:2f:4e:d8:6f:4c:88:c1:bf:f4:f5:f6:8f:25:
                    02:81:82:a6:62:85:d4:f9:e6:3e:18:2e:c5:1c:e2:
                    a2:c0:1d:04:0a:4c:b3:28:50:5d:43:fc:ac:06:26:
                    ae:9f:be:5b:af:81:82:2e:4f:eb:0f:df:5e:d2:2f:
                    c5:f2:52:8b:b1:68:2c:81:58:f3:14:36:3c:0d:90:
                    ea:28:e6:f8:99:2e:01:e3:6b:3a:ff:87:18:ff:56:
                    24:b9:86:4a:cf:67:a3:5f:8b:fa:77:65:f0:9f:a5:
                    fd:ea:e5:4d:48:93:14:2c:18:cb:fd:eb:fb:8a:d8:
                    f4:b6:93:47:b5:35:52:85:c6:b3:36:58:3d:6b:21:
                    53:99:5c:0a:75:5e:71:38:9b:73:63:08:7e:97:bb:
                    7a:95:57:16:a9:45:4f:8b:32:75:d4:e5:ce:c0:37:
                    ff:86:05:c1:1f:fb:05:d7:3d:1e:f3:92:a5:24:18:
                    49:d5:0c:99:ec:49:06:78:10:4c:af:3e:f0:ff:ec:
                    d2:87:9c:31:38:94:8d:84:1c:da:f8:90:d7:f8:2d:
                    62:5b:cd:9d:14:61:1d:d8:d3:90:a3:f7:86:ee:9c:
                    f1:3b:de:22:c6:90:bc:6b:c9:87:44:59:27:32:de:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B0:A3:9C:9A:9A:0B:D9:5F:11:B3:68:A7:4F:1C:F0:13:E4:4E:23
            X509v3 Authority Key Identifier:
                keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cf:8f:42:7a:f7:54:22:99:9f:58:7d:9a:11:5f:6d:a5:14:
         fd:8a:b9:c2:40:b6:b3:a4:d4:93:e9:38:a6:32:53:ec:00:9b:
         ee:ad:ca:e2:cb:05:f5:0d:2b:d6:e4:9f:f5:fc:22:45:c2:31:
         6f:78:a9:53:b2:de:ab:08:6b:02:07:62:08:54:52:1e:ff:a8:
         f2:e0:5e:60:49:5d:87:be:4c:59:88:1c:d2:b0:54:9d:a2:c4:
         bb:8d:ad:36:cf:79:58:31:eb:90:4f:3a:09:98:05:c3:1a:ef:
         4a:4f:32:dc:ed:52:5a:83:3d:f2:b9:8b:1e:9a:63:de:c0:f1:
         b9:2a:7b:53:8a:bf:e6:75:0f:53:41:65:7d:30:aa:c2:9b:24:
         1b:d4:73:e1:66:4f:34:24:0c:0c:37:93:e2:79:2a:8b:22:f5:
         c0:1b:d3:c2:88:03:e9:de:d5:60:22:2a:da:1d:2d:02:3c:80:
         39:91:41:03:47:9b:be:ef:e2:37:0a:eb:f7:7d:d1:80:ff:70:
         ab:ca:2f:1f:62:09:69:c1:7d:fa:7b:ff:1c:cd:3b:47:45:fe:
         ed:62:82:7e:17:84:ec:58:29:0b:88:c4:39:97:67:6a:4c:09:
         7c:bc:e5:87:f6:1c:e1:33:62:29:d1:01:13:30:21:0a:fd:9f:
         d6:d7:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:13 2026 by rpki-client