Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File:                     ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier:          QtCvQgLeB591W2oXYkTf7AlkdnYOKK3tvVpHJnhrmNM=
Subject key identifier:   E0:F8:F0:DD:70:9E:A5:BD:25:A1:58:92:3D:31:D0:1B:FC:8A:AE:5E
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer:       /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial:       0C9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number:          0C93
Signing time:             Tue 12 May 2026 18:35:47 +0000
Manifest this update:     Tue 12 May 2026 18:35:47 +0000
Manifest next update:     Tue 19 May 2026 18:35:47 +0000
Files and hashes:         1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: QbEMJBnPGcdlxrhKXCpl6Xiym36ZBythAZTi1ErlD8s=)
                          2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
                          rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3228 (0xc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
        Validity
            Not Before: May 12 18:35:47 2026 GMT
            Not After : May 19 18:35:47 2026 GMT
        Subject: CN=6a037303-51bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:6b:4e:88:a4:88:0a:57:11:7b:83:76:01:
                    01:1f:29:c3:be:4f:f1:9f:c9:7c:19:42:ca:e4:a7:
                    0d:46:ae:f5:34:c4:71:13:b1:5e:c7:8d:d5:51:af:
                    5c:05:b9:d6:59:6b:3b:78:01:c9:52:5d:4f:cb:1f:
                    1a:21:d6:48:90:71:9e:20:10:22:52:dd:5c:c3:1c:
                    5c:98:d9:7b:25:84:8d:92:5c:b2:d7:07:bd:34:f6:
                    d8:ec:59:07:ab:e5:0b:4c:ef:07:84:b7:f7:9b:70:
                    7f:17:41:a3:ac:e0:c0:b9:1d:db:0f:c0:17:82:98:
                    bb:e5:c8:6a:9e:2f:93:3a:23:25:ec:94:9f:7c:e7:
                    cc:1a:d5:fd:f7:fb:ad:95:4d:0e:9e:5b:c1:cc:5f:
                    ef:42:61:9a:86:42:d9:f5:11:26:89:2e:56:42:2d:
                    31:d5:56:22:e3:45:4d:73:87:f9:f4:1d:1c:8f:64:
                    75:eb:df:94:bc:12:c5:35:38:80:c7:40:62:11:a9:
                    62:61:3f:ee:23:c9:0a:c5:e5:c6:9b:ee:aa:ca:4f:
                    6b:f4:ea:22:77:ed:c5:52:7c:93:8b:95:f9:37:ce:
                    21:63:28:3f:2b:4c:a2:6c:fb:ff:91:2b:38:59:b2:
                    dd:91:ba:75:99:3b:15:ee:65:04:60:25:da:fb:e0:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F8:F0:DD:70:9E:A5:BD:25:A1:58:92:3D:31:D0:1B:FC:8A:AE:5E
            X509v3 Authority Key Identifier:
                keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6d:4e:2b:f5:a9:7a:61:51:2d:49:a1:33:1c:de:15:e3:c1:
         9f:c6:09:4b:87:7b:d4:e5:92:05:4c:9c:12:3c:d0:bf:52:b2:
         e2:ea:09:5f:41:60:90:3e:7d:55:45:06:39:90:63:6e:f4:e3:
         f1:73:04:13:42:aa:a8:94:bc:c9:0e:6f:1b:68:ed:b6:a9:9d:
         bc:ce:4c:85:15:ac:3a:18:fc:d2:4a:fb:74:2e:85:e1:33:bc:
         0c:02:30:7a:74:47:59:12:e7:84:0d:d0:b6:97:4e:90:96:37:
         4f:c9:ed:c9:73:6a:51:4c:46:a8:8d:7d:23:39:7d:fe:01:51:
         2d:a5:31:32:b3:65:64:ab:47:d2:36:09:49:a6:58:06:90:05:
         5e:01:d1:d2:07:b8:92:db:84:6d:bf:a5:2d:7d:cd:29:88:39:
         17:4c:b3:5e:f7:49:8a:85:88:fe:28:0d:6d:7a:7f:f4:95:f5:
         7c:13:19:d7:05:36:18:a1:ec:21:d1:10:61:d4:b6:70:4a:4f:
         14:8e:b3:88:29:49:1f:2d:a6:ea:f6:e1:c4:97:77:c0:76:09:
         9b:73:02:13:b6:b8:b1:64:b7:5c:9e:7b:ff:41:08:32:12:9e:
         9e:58:46:13:5c:48:7a:c7:26:da:3e:d3:20:76:e5:00:61:d4:
         4a:b2:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:09 2026 by rpki-client