Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
File:                     IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json)
Hash identifier:          rrmCZ5QoKM276dpMKhw2jxlY/YL+zl+a4IodEXxsJnA=
Subject key identifier:   43:03:2A:45:C6:D9:37:12:10:45:BF:31:EA:08:44:75:1A:12:5C:D8
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Certificate issuer:       /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
Manifest number:          0A06
Signing time:             Sat 18 Apr 2026 20:34:14 +0000
Manifest this update:     Sat 18 Apr 2026 20:34:14 +0000
Manifest next update:     Sat 25 Apr 2026 20:34:14 +0000
Files and hashes:         1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: /mE5GZZaCM1UCJJ7qPm/iPP3AmqvP8yXLaX8CR6cOpY=)
                          2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: QIU3lIyA+5VKaavxpFKOY/kby8goMr79mIMT44fjsag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 20:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
        Validity
            Not Before: Apr 18 20:34:14 2026 GMT
            Not After : Apr 25 20:34:14 2026 GMT
        Subject: CN=69e3eac6-53f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:f2:af:21:d0:e6:78:fe:d9:13:1b:82:46:
                    2b:3e:fc:76:ef:40:68:20:3f:68:0c:87:36:34:ef:
                    65:53:b1:cb:ad:2f:aa:74:f4:a3:d2:7b:fa:6b:71:
                    f6:a7:c6:c7:85:88:98:65:92:b4:7d:fa:36:4b:b4:
                    88:88:a6:54:26:a3:42:3a:00:70:bd:6f:4c:2f:7e:
                    77:d6:3c:2d:b8:09:fb:99:57:95:c9:6a:64:f7:50:
                    0d:2e:52:13:f8:7d:2c:e6:b8:70:91:2c:35:f7:57:
                    74:31:ab:9e:08:11:60:9e:2d:f6:f2:25:02:0d:a3:
                    a6:2d:b2:8a:c8:e4:56:ca:6b:b3:82:50:da:ad:ed:
                    82:19:0f:74:d9:47:b5:e3:f0:c5:6a:04:b4:b3:ad:
                    ce:d8:d4:8a:3f:40:57:4b:b8:73:e6:9e:47:da:06:
                    99:06:65:66:1b:d6:24:05:9c:da:d1:bb:02:a3:3a:
                    cb:ae:c1:ff:08:d6:27:23:2f:c2:03:f2:b3:09:8b:
                    ee:31:23:56:a7:24:06:f6:34:95:55:6e:67:5a:99:
                    27:d0:27:87:98:c7:12:f0:3e:9e:03:8a:f9:02:a5:
                    6e:8e:60:1c:41:10:9b:09:a4:ac:05:d5:37:94:bc:
                    a1:d3:a6:2d:44:62:47:a1:cd:43:30:16:df:42:88:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:2A:45:C6:D9:37:12:10:45:BF:31:EA:08:44:75:1A:12:5C:D8
            X509v3 Authority Key Identifier:
                keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:cd:aa:b0:ad:da:30:9e:80:8f:f3:75:59:b6:c7:b3:4f:
         2b:43:26:85:fc:68:c4:02:d0:93:1e:8a:79:fd:82:a6:3d:21:
         7f:9e:0c:6c:c3:c3:02:2f:20:47:0c:d6:20:42:b9:74:bc:00:
         30:ba:d5:b8:74:09:28:07:e0:d8:e4:a3:f6:67:90:1e:fe:9e:
         95:8c:44:9f:20:fe:91:30:6b:b5:af:94:c3:7e:94:51:a4:6e:
         89:44:ab:35:5a:88:f9:a3:52:c4:81:d5:81:df:76:81:8d:ba:
         4b:8d:0c:aa:1f:7d:a9:70:60:a4:ab:47:82:9d:b0:ca:c4:3a:
         94:7b:c3:f9:69:88:b1:dd:79:ed:3d:ab:b6:7b:15:3c:8c:7f:
         0d:de:b8:92:80:91:a1:c4:a5:50:3c:58:9b:91:5b:09:8a:10:
         96:1e:7a:9b:0e:45:0a:32:63:31:db:bc:e6:8e:43:96:7f:17:
         87:ac:3a:40:9c:63:c0:1e:3a:f0:52:5e:fb:94:1e:58:a0:81:
         df:41:f9:29:8b:88:d4:fb:43:81:cf:a6:1a:e9:7e:87:6b:c5:
         24:f2:05:91:54:9f:3f:2d:a3:18:a2:0d:aa:05:07:37:f9:9b:
         b2:c7:61:1f:f8:b0:3b:31:18:d8:1f:4f:68:bd:f7:da:04:26:
         1f:69:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:58 2026 by rpki-client