Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
File:                     IhKO6LQdoZG8pEiIxhUzENZmp78.mft (raw, json)
Hash identifier:          NAIgCRtQjVeoP2833uBlJAvSpn4613Ns1x7+QE0O38U=
Subject key identifier:   D6:51:93:D8:F6:2F:28:9C:91:D8:94:72:58:57:04:5F:19:CE:3A:B2
Authority key identifier: 22:12:8E:E8:B4:1D:A1:91:BC:A4:48:88:C6:15:33:10:D6:66:A7:BF
Certificate issuer:       /CN=A9135F03/serialNumber=22128EE8B41DA191BCA44888C6153310D666A7BF
Certificate serial:       07AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
Manifest number:          07AE
Signing time:             Thu 16 Apr 2026 21:21:48 +0000
Manifest this update:     Thu 16 Apr 2026 21:21:48 +0000
Manifest next update:     Thu 23 Apr 2026 21:21:48 +0000
Files and hashes:         1: IhKO6LQdoZG8pEiIxhUzENZmp78.crl (hash: zPVYBy5CVa1eIvy5kjbpyRf6+07MLN65p/W1HTqasxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.crl
                          rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F03, serialNumber=22128EE8B41DA191BCA44888C6153310D666A7BF
        Validity
            Not Before: Apr 16 21:21:48 2026 GMT
            Not After : Apr 23 21:21:48 2026 GMT
        Subject: CN=69e152ec-7f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:df:69:20:50:bd:3f:8a:10:00:f8:cb:81:
                    bf:98:75:70:23:ac:f8:23:b9:9b:15:d6:eb:02:26:
                    b6:00:28:9d:23:8b:23:2a:7d:9e:f9:71:1a:fc:00:
                    5b:6b:0a:6a:4e:21:1c:a2:d1:15:6b:e1:27:86:e7:
                    d0:ed:f7:83:2a:5f:d5:cc:df:73:aa:25:06:cc:f2:
                    59:67:5f:9d:21:4e:84:a5:d5:9e:a1:1f:47:f5:32:
                    cc:ad:c8:ca:23:31:dd:3b:27:5e:9e:25:1e:90:69:
                    8e:9d:2d:86:01:6e:39:f3:8c:68:9d:42:97:85:91:
                    83:8b:6f:7a:5d:a7:a9:97:05:c3:ae:6d:2c:61:bd:
                    37:51:6a:c4:80:4f:d7:fc:92:fe:4a:6c:c5:9f:c3:
                    44:1c:f5:5f:8b:30:68:99:8a:0d:3e:1c:7a:f9:69:
                    bc:6a:57:69:7c:98:51:e4:e4:d6:01:10:d2:0f:9b:
                    32:0a:b9:d4:47:3c:12:2a:01:a9:cb:5d:f4:ab:3d:
                    6c:69:7e:85:c2:61:aa:54:65:65:cb:6f:e4:f9:fb:
                    43:9a:c7:53:6a:3f:36:1d:0a:49:34:b4:e4:3c:27:
                    74:98:d1:cb:1b:e2:4e:3f:98:8a:00:e6:1e:ff:ab:
                    a6:30:b2:24:d6:0c:8e:87:9c:e3:3c:eb:99:fc:eb:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:51:93:D8:F6:2F:28:9C:91:D8:94:72:58:57:04:5F:19:CE:3A:B2
            X509v3 Authority Key Identifier:
                keyid:22:12:8E:E8:B4:1D:A1:91:BC:A4:48:88:C6:15:33:10:D6:66:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:97:ff:d3:53:19:d9:3d:58:30:db:9b:99:87:e2:4b:0a:
         ba:d7:10:27:a3:b5:57:38:bc:da:1a:be:ea:3c:ef:2e:b8:42:
         d2:a0:4b:83:09:ba:d9:72:99:58:31:6b:35:3c:5c:05:74:87:
         27:d1:f1:d3:6c:9f:6d:6a:30:99:72:72:c6:b1:b7:db:87:51:
         e7:9a:09:b0:03:a9:ed:8d:02:2e:17:50:f1:73:ef:58:7c:77:
         2f:54:a4:64:7c:df:aa:fd:f8:b5:60:ed:d2:95:6f:ea:a9:a6:
         09:5d:ef:a0:ea:2f:4c:98:5e:4f:c8:e4:eb:ec:ab:db:db:4f:
         f3:51:8d:f6:d3:95:69:66:4a:a3:28:25:c4:42:b5:a3:c5:a8:
         05:9d:1c:fc:b7:c4:b9:73:9e:fb:3b:aa:c3:09:5b:60:db:52:
         05:93:7b:4d:b0:98:d2:23:d3:0c:5e:88:f9:fa:c4:20:1f:a3:
         55:4b:b6:60:51:2e:b7:c6:03:24:33:cf:d4:7c:d9:3f:3a:46:
         45:41:fe:98:b4:38:2b:bb:81:94:a6:7d:5a:88:4f:24:b2:88:
         27:86:a5:6d:af:ab:11:14:89:38:3e:0e:ff:8e:38:b6:cc:9a:
         2a:05:b8:41:89:04:ff:56:e2:d4:8c:46:14:18:29:a0:22:63:
         05:b7:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:40 2026 by rpki-client