Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File:                     IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier:          xIRKew+YQMa/mRW1WtsCtJoEIQ6DAJfXglIGGmkG8qM=
Subject key identifier:   4F:BC:1A:BE:FE:24:C9:14:AF:1F:18:05:C1:A8:62:4F:8E:95:56:83
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       093A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number:          08DD
Signing time:             Tue 12 May 2026 20:34:24 +0000
Manifest this update:     Tue 12 May 2026 20:34:23 +0000
Manifest next update:     Tue 19 May 2026 20:34:23 +0000
Files and hashes:         1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: SjQ4vjuWCFJ82XkIEAAv+XMin39wfD9/QyXYqdmU5vs=)
                          2: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
                          3: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
                          4: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
                          5: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
                          6: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
                          7: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
                          8: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: May 12 20:34:23 2026 GMT
            Not After : May 19 20:34:23 2026 GMT
        Subject: CN=6a038ed0-9d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:6f:3a:ab:1c:4b:da:25:da:6c:1c:20:77:
                    ce:8d:93:8d:79:ef:24:c6:ef:c3:27:8d:45:1f:25:
                    c3:9a:3d:ce:ab:b6:ff:71:52:e2:48:34:0c:52:b1:
                    7c:59:1b:40:f5:56:5b:5f:87:68:57:c8:7d:08:c2:
                    c2:06:bb:3d:d2:25:66:97:65:e5:dd:da:42:92:c8:
                    e7:c2:81:64:f1:ac:a6:4c:2b:2c:c2:fc:01:d7:b1:
                    57:40:db:1c:6f:7f:65:95:00:4a:80:15:9b:b7:ba:
                    9e:aa:d3:6c:c6:d9:7f:1b:0a:a8:37:90:30:f5:dd:
                    fc:2b:f9:61:e6:06:4f:4e:94:ed:09:aa:5b:3d:42:
                    73:bb:de:75:32:ff:0b:fc:07:d6:c3:a7:88:31:9d:
                    45:89:8b:7a:33:f9:d0:fb:1e:ff:25:6d:93:82:16:
                    f0:91:36:7a:bd:00:f5:75:13:e8:db:01:ff:92:ff:
                    55:24:60:66:dd:b0:0c:b6:ca:34:7e:55:c0:31:7e:
                    e1:2b:b1:f2:4a:6b:12:2d:bb:f7:6d:dc:ce:9e:3f:
                    0e:47:02:ba:dd:b9:b3:6a:fb:22:f0:7f:bb:37:b1:
                    ac:35:5e:25:29:b9:61:97:3e:6d:be:8c:0d:c6:bf:
                    88:b6:04:39:c8:af:19:7e:52:9c:cb:5a:c4:fc:ad:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:1A:BE:FE:24:C9:14:AF:1F:18:05:C1:A8:62:4F:8E:95:56:83
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:cc:ea:0e:f9:9a:2b:d1:57:24:60:3a:84:fd:36:70:0a:
         16:6c:11:4c:2d:f3:f6:16:33:a3:01:23:d6:bc:22:3d:3c:f3:
         26:28:bd:05:23:b0:07:58:c7:f3:d6:22:83:04:85:82:76:17:
         87:f6:bf:4a:01:48:2e:dd:93:a3:15:e6:65:77:13:d9:7a:d3:
         c0:ad:23:97:3b:26:90:ea:7d:57:14:dc:0a:32:73:d6:1d:e3:
         3f:c1:72:c7:27:84:fb:89:96:26:da:73:f6:0c:8f:e1:89:3f:
         19:9c:89:c0:93:dc:04:ce:ed:27:34:e7:d7:82:c0:d3:95:14:
         ee:e8:68:76:90:25:7f:00:00:70:1f:9d:7c:d9:35:d2:f6:a5:
         1e:f4:d7:90:65:91:b7:06:fd:aa:9c:f3:c2:e0:b8:8f:40:fb:
         01:f6:1d:e2:b7:c0:76:bb:d1:92:c2:ff:a3:40:ae:56:85:df:
         ca:78:91:84:4c:63:73:8a:94:1a:92:e4:d0:c7:e0:fd:4f:ce:
         b5:bb:eb:5f:23:14:85:36:a5:5e:5f:a1:4d:50:e5:33:73:cc:
         19:be:95:4e:26:07:c8:7b:57:9e:97:29:fb:de:8b:e3:df:82:
         f3:c5:49:e7:4a:da:76:b1:80:f8:8f:7c:30:7d:43:98:f7:ab:
         9d:66:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:05 2026 by rpki-client