Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File:                     idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier:          KrKTArXzpfqgf2fZKeJgMh0olFPyxGv+LvorAdm1HHM=
Subject key identifier:   C6:70:65:42:5E:D5:A9:01:61:EA:FB:08:1A:EA:C3:E7:55:5F:E3:92
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer:       /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number:          48
Signing time:             Sat 13 Jun 2026 08:29:06 +0000
Manifest this update:     Sat 13 Jun 2026 08:29:05 +0000
Manifest next update:     Sat 20 Jun 2026 08:29:05 +0000
Files and hashes:         1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: tMx0vHafMzdK+d3qyk5oLIpvFuM8LtTB91F09xf07sg=)
                          2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
                          rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
        Validity
            Not Before: Jun 13 08:29:05 2026 GMT
            Not After : Jun 20 08:29:05 2026 GMT
        Subject: CN=6a2d14d2-70d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:85:e2:6b:5e:d6:f3:7d:73:94:48:66:da:
                    7a:ff:9e:b9:ec:4b:22:28:f7:f6:5d:fa:4a:99:1e:
                    e8:40:8e:c8:31:7a:60:ea:59:64:ab:a5:c1:d7:11:
                    9c:fd:ce:56:b0:96:2f:a4:e2:87:95:d7:8f:ca:f0:
                    1d:a7:61:a1:60:8d:83:44:fa:ee:fc:d8:75:de:59:
                    ec:77:00:0c:12:a2:23:33:f7:87:d9:f2:16:f6:fe:
                    d0:24:be:a3:05:bb:dd:5d:dd:5a:21:be:b2:9e:d5:
                    bc:de:d8:9e:b1:de:0b:ef:6e:38:ed:55:d3:58:5c:
                    46:ca:65:24:cd:46:79:cb:6e:5b:19:42:8f:94:e6:
                    9b:b1:37:92:14:d8:0c:43:89:f2:1a:9d:05:bf:c8:
                    65:54:9b:08:51:9d:3a:2e:5d:ca:fa:54:26:14:a1:
                    51:fb:f3:1e:dc:19:04:52:84:b3:f8:08:cf:81:8b:
                    5e:f1:02:02:e6:38:d7:a8:61:68:4d:f7:61:79:f5:
                    23:50:c8:fa:0c:7e:28:a1:a6:d4:53:6f:f3:67:4a:
                    8e:36:cd:8f:7d:6f:81:2f:75:1f:fb:96:6d:e1:ba:
                    0a:e4:15:24:b7:d9:f6:2a:46:ef:79:a8:16:a9:4e:
                    d7:ed:fc:7d:83:73:6d:40:90:a0:0e:73:32:64:f3:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:70:65:42:5E:D5:A9:01:61:EA:FB:08:1A:EA:C3:E7:55:5F:E3:92
            X509v3 Authority Key Identifier:
                keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:59:ca:59:d1:6b:94:d5:d2:0e:60:83:14:6f:d4:51:37:
         69:c5:12:8f:9c:d1:06:b5:69:76:7b:2f:7d:4a:43:62:fd:2d:
         05:62:c1:04:03:ac:0c:96:1d:d7:83:2e:54:fb:bb:56:45:7d:
         03:e7:9a:c7:e0:07:39:89:f7:79:7b:75:de:bd:0d:ab:32:b1:
         c1:15:c2:b5:eb:e0:1a:81:07:65:6d:75:62:7a:b3:9b:6b:08:
         f3:ea:5d:27:75:d7:e9:4b:26:88:40:e6:58:40:84:79:4d:4d:
         78:53:53:3f:97:cb:d9:15:1f:b9:9d:0a:9e:93:8b:af:71:d1:
         16:43:dd:19:fd:e2:28:55:56:c0:7b:71:93:91:31:52:bf:82:
         c6:ac:37:f4:06:47:f6:dd:44:17:52:1d:5c:31:09:23:2d:71:
         27:76:9a:f0:07:ee:ea:20:37:88:4e:24:a2:e3:01:23:8b:3e:
         a3:bf:4e:e1:39:91:ee:8b:b7:ee:99:73:6d:cc:1e:dc:c3:09:
         49:b0:f0:95:b1:3f:00:a4:19:8f:e9:0e:1e:9e:47:c1:49:86:
         54:42:0d:38:16:6d:1c:6d:ff:54:0e:d8:1a:a0:e7:4a:5d:81:
         e0:75:04:7b:f9:65:8d:80:23:4e:22:0b:c1:ef:fd:2b:03:8f:
         2a:cc:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:51 2026 by rpki-client