Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
File:                     iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json)
Hash identifier:          kPKF9y16It7lfvHIPzzb/d8YmfVPSUjb2dLwnQkuvlI=
Subject key identifier:   0D:C1:FC:94:F4:9C:DB:20:25:D4:C1:63:58:EC:86:50:E7:9F:76:F1
Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
Certificate issuer:       /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
Manifest number:          8C
Signing time:             Mon 11 May 2026 07:40:59 +0000
Manifest this update:     Mon 11 May 2026 07:40:58 +0000
Manifest next update:     Mon 18 May 2026 07:40:58 +0000
Files and hashes:         1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: O6/cpnyu9kluiWQBZevij6AS/HEm1YemU9v6zV1wt3Y=)
                          2: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: 16ronhpfPjZ1J9jMJniqcKd5ZSFxc1jnc1AmD+Jt630=)
                          3: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: iP831x/fULSZ/fmDwuHrWqBHoTP+BYRChB7pWllsa7M=)
                          4: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: Y8LpukABBo/pP9eZZ75cumiepSudrb+yKJGkwACmG7Q=)
                          5: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: g58X+cu42Kh2zFwQ2h9g38vEcazE0TvlqkeIHRWL2eA=)
                          6: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: DLNHUZHuS4L6pQW1+bd0pYlrjjNIUCRkspT0sawq79s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
                          rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
        Validity
            Not Before: May 11 07:40:58 2026 GMT
            Not After : May 18 07:40:58 2026 GMT
        Subject: CN=6a01880a-a681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:c7:ff:cd:23:b8:fb:eb:c2:ac:ae:c3:05:
                    50:bf:51:81:3d:f0:96:3e:f1:54:03:a0:67:b6:7e:
                    de:9f:f2:41:31:20:de:3d:25:1e:d7:60:1d:88:b9:
                    42:42:92:e3:b3:bc:8e:c7:dd:19:2a:51:35:bc:92:
                    c1:4e:75:7e:c3:ee:c2:97:9e:bd:3c:fe:97:33:9b:
                    af:5c:b2:70:e3:37:61:70:39:3b:91:5c:37:c4:cb:
                    66:b5:76:19:19:c5:7d:6b:51:dc:8f:c2:02:81:52:
                    02:d1:be:6d:b7:ec:43:f9:b2:d1:23:c5:e1:8f:c8:
                    52:1c:ac:d1:d3:f1:89:3c:83:d9:cc:53:8b:03:23:
                    86:b7:dc:c9:12:1e:f5:f0:ff:e8:11:4a:18:cc:0c:
                    8b:5f:0d:6b:52:dc:ad:29:02:ba:c2:f4:52:33:9a:
                    2f:c4:6b:77:fc:b1:5c:04:13:f2:28:c5:a9:47:cf:
                    83:0a:ae:71:98:25:7b:98:14:b5:24:9d:bb:a2:55:
                    89:a6:f1:6d:a7:66:94:c4:f9:db:b6:7a:78:0d:67:
                    a4:e9:35:35:4a:c4:55:4d:e5:b0:39:bc:34:a6:4f:
                    d3:16:a9:01:5c:8f:1a:21:ff:ad:c8:d1:72:e5:b5:
                    50:83:2b:fd:6f:a7:66:5e:db:ec:b2:db:0d:46:c1:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:FC:94:F4:9C:DB:20:25:D4:C1:63:58:EC:86:50:E7:9F:76:F1
            X509v3 Authority Key Identifier:
                keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:56:66:fc:df:1c:8f:9b:c5:a8:88:04:5d:67:19:d3:79:36:
         9c:78:2e:a7:30:22:fd:18:e8:23:5b:af:35:e3:d6:81:d5:71:
         24:8a:7c:7d:bb:b6:8e:e0:b0:7a:2a:5e:51:23:54:96:e1:37:
         d4:db:67:ca:4b:c9:f0:62:01:13:82:bf:ef:e6:59:ae:45:f0:
         f5:3f:bd:9e:3b:14:7b:ee:66:4c:c9:c3:14:1c:b0:c5:5f:26:
         48:a1:50:66:26:f0:7e:f6:6b:39:0c:3a:de:e2:c6:3a:51:f0:
         c9:43:34:28:f2:0d:f2:47:bf:12:5b:ad:7d:81:52:66:5e:70:
         c7:87:85:3d:3d:40:05:ff:2b:fa:ea:f2:83:92:55:55:2c:6d:
         3c:46:f0:8b:03:19:b5:28:70:b3:d5:4b:71:9b:5d:fe:57:19:
         c3:2a:65:a5:8b:8d:d1:81:86:4b:b9:22:17:f3:c7:c2:94:8f:
         57:2f:1d:62:5f:8f:82:89:65:82:15:b1:c6:57:5d:d7:1e:3c:
         47:01:63:d6:2a:5c:db:95:32:07:e8:1e:2d:65:06:1c:b7:ec:
         fb:38:d3:9a:12:53:2b:78:34:21:85:c0:9b:7e:e4:07:08:a1:
         6d:26:d9:e6:3a:9b:7b:9e:3f:ca:69:c9:4d:58:57:97:42:b6:
         e2:d1:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:27 2026 by rpki-client