Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File:                     IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier:          FE6dnHhoUt9Ofg7iMYRJVYQ59A+BQnYkjtc6q02OOnU=
Subject key identifier:   6A:11:0F:A3:0B:EB:92:FC:85:D4:91:23:6B:E0:9C:DE:17:BD:9C:26
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number:          51
Signing time:             Fri 17 Apr 2026 07:58:46 +0000
Manifest this update:     Fri 17 Apr 2026 07:58:46 +0000
Manifest next update:     Fri 24 Apr 2026 07:58:46 +0000
Files and hashes:         1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: gH3PiCDjZ2Yg7QKE/+oC/UVggtwQLLn4YWzpU5v+4Rw=)
                          2: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
                          3: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
                          4: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Apr 17 07:58:46 2026 GMT
            Not After : Apr 24 07:58:46 2026 GMT
        Subject: CN=69e1e836-1b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:aa:66:b2:9d:7c:2f:05:d8:69:11:4f:ad:
                    aa:2a:8e:da:be:03:79:4b:09:33:26:29:85:14:01:
                    f7:90:9f:20:da:64:62:44:f4:90:89:4e:74:ce:2e:
                    a5:2c:1b:35:d0:de:6a:a4:75:1c:de:32:10:30:fe:
                    2a:e8:ce:2f:df:04:4b:9c:bc:c2:70:1f:77:18:86:
                    ac:da:e7:6b:68:16:54:e5:1d:3f:97:37:6c:7b:15:
                    bf:35:79:6c:bc:93:1d:e9:b4:8c:3a:63:ea:b4:36:
                    6e:ec:11:5f:46:ed:8c:84:1f:fa:6e:7d:6b:25:7f:
                    2c:c0:c3:c8:24:37:fb:08:8f:c4:b4:98:3a:ac:b0:
                    8f:2b:b1:19:f4:fc:34:51:88:c3:ce:c7:0f:16:70:
                    bc:76:34:80:99:16:3e:cf:2f:f9:ae:ec:65:5a:34:
                    99:4d:0d:c5:1e:ea:96:e4:1b:e3:43:a9:65:65:ab:
                    1c:00:8b:89:4f:e8:21:fb:37:b8:aa:53:6d:6f:1e:
                    af:b7:41:7d:c9:d4:f6:19:65:06:61:d2:95:37:26:
                    f3:7a:08:71:5e:d3:dd:c5:0c:a8:e6:fd:6d:5b:4c:
                    84:e7:b6:63:2d:8f:d4:52:66:0a:21:4b:d3:09:03:
                    cc:ec:53:9e:c6:72:96:ef:13:d7:42:aa:1c:d1:ae:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:11:0F:A3:0B:EB:92:FC:85:D4:91:23:6B:E0:9C:DE:17:BD:9C:26
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a5:4a:97:f5:b5:0a:cd:cb:1d:b2:fd:cd:1c:b7:05:9d:ff:
         7a:a3:76:13:08:4c:6e:14:ef:b7:ff:c1:d3:9d:32:dc:aa:d7:
         00:18:aa:4d:fd:fb:b2:fc:2a:fd:97:02:06:9b:fc:42:2b:35:
         11:e8:44:99:83:da:cd:d2:8f:ff:2f:8c:d7:82:e1:31:8f:91:
         0d:a9:fe:ee:b0:d9:93:e4:8a:7f:92:ed:80:b0:42:ab:aa:be:
         9e:dd:d0:89:ad:91:fe:6e:84:4f:05:ee:2a:d7:eb:88:db:91:
         2e:eb:83:a5:0d:50:f7:28:b9:14:a3:70:dd:49:1a:0f:cb:5e:
         56:90:07:be:33:ce:5b:43:d7:4d:56:ba:e8:59:bd:83:0d:27:
         49:87:17:ce:f5:a3:55:dc:1f:8a:8c:ee:bd:db:49:e8:72:41:
         46:f8:b7:67:90:ed:e5:0c:ec:e7:fb:ac:e7:5f:a8:c5:6e:e6:
         f5:f0:2c:18:73:a6:3f:8c:b9:bd:e8:95:a1:ca:39:17:48:e9:
         12:24:45:2f:7a:26:13:c6:ea:73:c2:2c:a1:ca:36:42:c1:ac:
         76:d0:5d:9f:95:dd:a3:8b:de:cc:4a:c1:90:5a:8b:33:74:4e:
         87:2c:62:d1:15:c1:e7:2d:9e:ae:69:b1:e6:a3:99:44:b4:14:
         c9:37:7e:0e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoMjIyNjYyN0I3M0U1MTU0NkIzQkQ1MTBFMEUyQTBERUFB
ODI1MjA3ODAeFw0yNjA0MTcwNzU4NDZaFw0yNjA0MjQwNzU4NDZaMBgxFjAUBgNV
BAMTDTY5ZTFlODM2LTFiNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHp6pmsp18LwXYaRFPraoqjtq+A3lLCTMmKYUUAfeQnyDaZGJE9JCJTnTOLqUs
GzXQ3mqkdRzeMhAw/irozi/fBEucvMJwH3cYhqza52toFlTlHT+XN2x7Fb81eWy8
kx3ptIw6Y+q0Nm7sEV9G7YyEH/pufWslfyzAw8gkN/sIj8S0mDqssI8rsRn0/DRR
iMPOxw8WcLx2NICZFj7PL/mu7GVaNJlNDcUe6pbkG+NDqWVlqxwAi4lP6CH7N7iq
U21vHq+3QX3J1PYZZQZh0pU3JvN6CHFe093FDKjm/W1bTITntmMtj9RSZgohS9MJ
A8zsU57GcpbvE9dCqhzRrlSpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUahEPowvr
kvyF1JEja+Cc3he9nCYwHwYDVR0jBBgwFoAUIiZie3PlFUazvVEODioN6qglIHgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzVBNzk3MTQwQzhG
MTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVhenZWRU9EaW9ONnFnbElI
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSWlaaWUzUGxGVWF6dlZFT0Rpb042cWdsSUhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
OTVBLzVBNzk3MTQwQzhGMTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVh
enZWRU9EaW9ONnFnbElIZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCUpUqX9bUKzcsdsv3NHLcFnf96o3YTCExuFO+3/8HTnTLcqtcAGKpN/fuy/Cr9
lwIGm/xCKzUR6ESZg9rN0o//L4zXguExj5ENqf7usNmT5Ip/ku2AsEKrqr6e3dCJ
rZH+boRPBe4q1+uI25Eu64OlDVD3KLkUo3DdSRoPy15WkAe+M85bQ9dNVrroWb2D
DSdJhxfO9aNV3B+KjO6920nockFG+LdnkO3lDOzn+6znX6jFbub18CwYc6Y/jLm9
6JWhyjkXSOkSJEUveiYTxupzwiyhyjZCwax20F2fld2ji97MSsGQWoszdE6HLGLR
FcHnLZ6uabHmo5lEtBTJN34O
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:23 2026 by rpki-client