Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
File:                     iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json)
Hash identifier:          cU8fjppmrxPqK84YMPFVm0PQukXA5AW3Urc7gMJBzWg=
Subject key identifier:   79:C2:C1:83:94:07:57:1B:6E:E2:83:D8:51:B5:1A:D8:BD:98:A5:90
Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
Certificate issuer:       /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Certificate serial:       049F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
Manifest number:          0483
Signing time:             Sat 13 Jun 2026 00:06:36 +0000
Manifest this update:     Sat 13 Jun 2026 00:06:36 +0000
Manifest next update:     Sat 20 Jun 2026 00:06:36 +0000
Files and hashes:         1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: rFOLkFyy7XU8meANsjp2W2IvioooJp08suPQ9quOHsk=)
                          2: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=)
                          3: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=)
                          4: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
                          rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
        Validity
            Not Before: Jun 13 00:06:36 2026 GMT
            Not After : Jun 20 00:06:36 2026 GMT
        Subject: CN=6a2c9f0c-b7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:83:f3:72:00:5b:97:fd:a9:a6:02:7a:f6:
                    6e:8a:16:30:34:e4:86:91:84:0f:51:9c:a8:93:c5:
                    8e:9b:0e:bc:47:62:6d:2c:7b:4f:86:b3:e1:99:85:
                    a8:1a:3c:5c:5c:fc:2e:96:eb:8a:f7:60:59:1f:dc:
                    ac:d9:30:dc:e0:34:92:ac:c2:f5:e4:f4:d7:6c:60:
                    ff:66:d6:b9:30:72:5b:76:ba:57:8f:bc:8c:55:87:
                    4f:dc:9f:f4:5b:b1:f0:2f:c8:1d:2a:69:82:92:45:
                    42:65:e1:dd:22:1d:8e:6d:20:fb:d2:bc:d0:7c:14:
                    56:93:ee:32:20:6e:40:ee:da:94:0d:35:2b:d4:9c:
                    30:0d:d3:33:d3:47:89:cb:93:65:c0:d6:67:29:5b:
                    40:97:7a:cc:01:4e:06:3f:28:52:7b:54:f2:0e:d6:
                    3b:dc:1d:f4:de:d9:5b:2c:8e:07:c0:5a:21:0f:21:
                    8f:3e:d0:31:7d:cc:21:c5:96:91:49:89:cd:5e:0c:
                    6c:af:22:46:c1:9a:37:9a:eb:92:5e:32:4b:c0:a3:
                    7e:06:c4:5c:95:1e:be:d4:6b:52:6b:bf:97:69:7b:
                    30:6a:e9:aa:80:43:de:c4:9e:09:63:75:0a:ab:bb:
                    4b:95:d2:cd:05:b7:8f:5f:8b:cd:35:e6:6c:25:d6:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:C1:83:94:07:57:1B:6E:E2:83:D8:51:B5:1A:D8:BD:98:A5:90
            X509v3 Authority Key Identifier:
                keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:89:c0:dd:63:dd:59:61:41:85:b8:8f:14:52:d1:76:3d:
         81:c1:4d:8a:24:44:d5:be:4a:f2:82:24:55:b4:39:12:b3:66:
         ee:9d:e7:1f:8c:f3:cf:1f:37:a2:9a:54:99:59:90:06:a0:01:
         2d:ce:c5:4b:1b:bb:2f:18:27:5a:35:e3:1f:90:5b:e6:ce:10:
         e4:fd:7c:90:dc:10:2c:3e:c7:7c:f6:61:5b:26:4c:c8:b6:c5:
         e2:a8:eb:7d:c8:93:84:75:fd:96:d4:61:44:b2:9a:fa:b6:07:
         87:a9:e7:ac:9b:34:59:87:75:20:5a:30:08:ff:92:0d:cf:eb:
         63:36:cb:ac:30:1c:51:68:03:85:3c:3c:32:48:d8:f4:c2:7f:
         d3:a2:3e:16:ed:b2:70:72:2e:f9:b0:06:85:43:a3:17:26:fd:
         f3:97:f7:d2:db:6a:ee:f3:7b:41:77:44:d9:99:db:9b:e6:e2:
         78:20:b5:1f:b8:94:0f:ba:2b:09:34:97:57:f2:70:23:16:08:
         a9:ea:d3:52:c0:df:42:61:61:e2:86:dd:1e:aa:5a:f0:8d:cd:
         9c:a5:2c:09:97:97:ca:3c:6c:c0:15:08:0f:50:eb:d7:4d:5f:
         5d:dd:0a:d0:df:88:46:99:25:f4:aa:98:b2:65:69:01:3b:1d:
         00:8a:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:21 2026 by rpki-client