Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File:                     iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier:          Tn7vKwXjUFbo+ZCu/TW/JUZP3Wo7YnZEtsb/kU7fbBw=
Subject key identifier:   4E:1E:5A:FB:A8:6E:10:91:57:E5:19:E1:D9:6B:F3:1F:17:35:07:5F
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer:       /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number:          02AC
Signing time:             Sat 13 Jun 2026 01:31:54 +0000
Manifest this update:     Sat 13 Jun 2026 01:31:53 +0000
Manifest next update:     Sat 20 Jun 2026 01:31:53 +0000
Files and hashes:         1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: Cz3yo2BG/nJKObo6T7W5ovh8zVQMTS5KJHl5CYydOmc=)
                          2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
        Validity
            Not Before: Jun 13 01:31:53 2026 GMT
            Not After : Jun 20 01:31:53 2026 GMT
        Subject: CN=6a2cb30a-af9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:21:88:1f:f9:88:0e:58:8d:7c:8e:a0:c2:
                    37:98:71:b8:ac:5f:e3:03:fb:99:43:0c:35:5e:7e:
                    c5:e1:d5:8f:69:8d:f2:34:ec:7c:88:a1:dd:ae:ea:
                    5a:fb:45:de:21:e3:cc:e1:92:9f:b0:86:ca:85:a4:
                    ff:5f:22:de:3b:a8:53:33:06:87:9d:91:19:15:e3:
                    72:57:b1:8f:1c:e4:78:b1:23:16:ea:f8:50:f1:f9:
                    3e:00:42:2f:0f:07:61:78:15:94:3b:cc:66:69:68:
                    59:47:13:fb:ba:c4:0d:7a:75:b6:8e:79:31:0b:f4:
                    61:5c:09:27:4f:e7:54:7c:d2:8f:cc:a3:b5:22:45:
                    f7:f7:e5:39:f0:ff:17:19:04:2a:e1:2b:59:84:ac:
                    cb:60:14:2e:15:fc:db:77:f3:20:cd:d9:6b:6e:61:
                    08:47:cf:f1:a0:96:ff:4e:56:55:0e:c0:dc:08:c5:
                    39:18:17:63:10:2b:8b:fe:c5:42:d1:5c:83:a9:4c:
                    3c:10:80:e9:fb:43:71:f0:a9:8b:63:35:1e:94:d4:
                    67:e7:b4:df:c5:3d:d7:42:90:94:d9:a4:6c:2b:9c:
                    d7:7b:3a:90:e2:ae:39:bc:48:b6:e2:88:ad:1a:b8:
                    e2:66:84:d1:20:ae:37:f7:40:54:bb:71:aa:e4:ba:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1E:5A:FB:A8:6E:10:91:57:E5:19:E1:D9:6B:F3:1F:17:35:07:5F
            X509v3 Authority Key Identifier:
                keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:ec:df:7a:62:17:72:d7:65:5e:97:33:a3:21:a9:17:da:
         7c:7a:cc:e3:f8:12:d2:d8:60:84:ea:4c:92:71:bd:f5:c4:15:
         ba:ad:42:ef:03:f8:0c:92:34:6d:89:b7:15:d7:55:5f:e2:13:
         f0:7e:52:20:4e:78:94:8e:4d:16:e8:16:5f:a1:e1:12:d5:5a:
         80:c4:a4:b9:f4:7d:2e:a7:36:f2:33:03:70:46:d7:e3:f8:a2:
         53:8f:cf:e8:0d:8e:b9:fd:21:ae:aa:92:37:f5:31:2a:10:80:
         76:64:20:f9:d4:4a:08:5a:16:5c:3f:f4:99:8a:08:7f:2e:66:
         21:5f:2c:d2:cd:6c:bd:13:2d:7f:37:b0:2c:8f:d4:be:cf:61:
         a5:7b:dc:4f:48:61:a0:d9:2b:e0:ae:fd:23:62:e5:cc:74:d5:
         3e:1d:6a:bf:1f:3c:23:8c:ba:c0:8d:33:9d:36:af:5a:ee:ce:
         f9:90:35:aa:f6:78:c0:5c:57:dc:d7:ea:73:09:84:5e:4e:f6:
         05:47:66:c2:e4:8b:22:77:ea:3a:d7:cb:e5:36:f1:bb:d8:45:
         60:69:56:26:eb:1c:ce:7a:4e:00:de:4b:3a:73:e1:62:74:03:
         ed:f0:72:5e:c1:4d:ef:63:09:b5:0e:ca:d8:72:75:71:ab:61:
         6c:12:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:54 2026 by rpki-client