Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
File:                     Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json)
Hash identifier:          wpDih9y+wygZp8cC+9dgr9dZCick5oD16JBGZpcDrxY=
Subject key identifier:   93:1C:AD:5B:13:74:17:A8:CA:7B:F5:2F:71:CD:20:B8:9F:4A:18:CE
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Certificate issuer:       /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
Manifest number:          78
Signing time:             Mon 11 May 2026 07:52:47 +0000
Manifest this update:     Mon 11 May 2026 07:52:46 +0000
Manifest next update:     Mon 18 May 2026 07:52:46 +0000
Files and hashes:         1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: aqqU8JCiqy5HVRWKmPfnsZg0eUBdmYAYh22363iDi5g=)
                          2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: SOUc2IXOvl/L1pMPWSJBgclEArQVhHSL8F26Jssjy60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
        Validity
            Not Before: May 11 07:52:46 2026 GMT
            Not After : May 18 07:52:46 2026 GMT
        Subject: CN=6a018ace-234a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:d6:c3:b1:b6:a3:58:fa:d9:e5:d1:9a:1d:
                    2a:dc:de:94:b2:a3:1d:eb:0f:de:ee:58:fc:a5:2e:
                    b7:1c:cf:70:b2:75:49:7d:ab:cc:85:86:04:c3:65:
                    34:99:12:b5:a1:32:06:24:85:44:77:cc:b0:59:4d:
                    83:52:6d:2e:06:e2:3e:96:ad:29:37:a8:8b:ed:64:
                    77:52:1f:e5:d8:95:49:60:52:56:f2:e4:06:19:be:
                    21:1a:59:5a:3c:b4:ed:a1:33:f3:5d:61:97:87:4b:
                    1f:66:0e:c3:71:ac:a4:44:17:25:9f:4f:fc:0c:b9:
                    dd:f2:bf:78:30:a3:f0:7d:fb:5f:6b:cc:f9:f9:1e:
                    9f:3e:27:47:15:30:d1:84:e8:bc:21:fb:44:e3:92:
                    9e:d8:42:96:e3:d3:ba:97:fa:3b:38:db:cc:a4:1a:
                    4c:59:8b:c2:1f:70:cb:d3:54:da:47:e3:0a:80:04:
                    00:21:6f:42:d3:b2:7b:c7:c9:91:27:96:06:95:ba:
                    80:01:44:9a:fa:ad:79:5d:f4:4e:a4:8c:e4:34:ba:
                    86:6d:91:68:92:a8:af:81:e0:26:14:86:d3:5b:64:
                    55:9a:81:6a:32:bf:ce:b1:b7:96:6a:9d:37:88:d3:
                    92:52:61:f7:98:16:d6:d5:7d:0a:85:e6:24:06:9b:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:AD:5B:13:74:17:A8:CA:7B:F5:2F:71:CD:20:B8:9F:4A:18:CE
            X509v3 Authority Key Identifier:
                keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:4a:04:2c:ed:f0:7d:9b:90:03:e5:ee:b1:b5:90:ea:e9:
         3b:50:d3:e8:a9:f5:3f:d6:05:fb:ba:10:25:ce:c5:01:19:0d:
         1e:f0:3a:3c:86:6c:65:2f:f8:8e:ec:a0:27:bf:34:91:a7:61:
         be:84:c5:31:61:04:29:3f:fb:57:ec:c6:8f:0a:46:57:61:2a:
         2c:e4:c0:8f:d0:ab:8d:17:b3:4e:97:87:f4:36:34:56:d4:9d:
         1e:78:5a:2b:84:62:e4:2b:e6:9d:51:02:ca:a1:f2:03:08:a4:
         35:d6:f3:ae:0c:90:94:0c:73:a4:00:a4:31:16:64:a5:0c:08:
         bf:2e:1a:e8:53:0b:a7:67:ad:0e:20:a3:0b:94:57:15:60:7f:
         79:0f:b4:bc:a2:f9:c6:2c:aa:2c:05:66:07:b1:89:0e:2b:1b:
         8a:ad:49:8e:1b:2b:21:14:36:dd:c9:db:86:51:b7:00:00:80:
         11:62:aa:f8:4e:f3:b1:3d:e5:1c:c4:36:d5:32:22:0c:59:16:
         e7:12:95:ae:44:aa:07:dc:93:67:40:4e:5f:7b:aa:c1:7d:f6:
         49:ac:99:f3:c0:ee:40:7d:f8:52:4c:5e:d5:ef:db:01:4f:42:
         61:be:69:77:30:f7:d4:95:f3:90:b9:ed:0e:0e:f7:6b:39:a7:
         49:14:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:19 2026 by rpki-client