Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
File:                     iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json)
Hash identifier:          BkRS815Pekhlp9WyWGrKbA6TPhD2ReBXSy6R4az67BA=
Subject key identifier:   C1:A0:EA:1A:3E:31:9E:64:D6:82:08:B9:2D:C5:14:5D:E2:91:18:57
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Certificate issuer:       /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
Manifest number:          28
Signing time:             Thu 11 Jun 2026 11:11:55 +0000
Manifest this update:     Thu 11 Jun 2026 11:11:55 +0000
Manifest next update:     Thu 18 Jun 2026 11:11:55 +0000
Files and hashes:         1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: xnFQxIzSBeI9oOMvKXeIJjqzrurjlWW0SMLxcLxqYag=)
                          2: 30C6735E371C11F1AB220340C9833773.roa (hash: r1zttv5Tg4fvomOU2T9kTIcd0o8O/m74nqkwAFCr7V8=)
                          3: 52E7D8963D6711F19B0B1A66AE833773.roa (hash: D4eeMtM0vlvOieXn6mH3kJIRvN6LTz+MNbPoGWUcWyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
                          rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
        Validity
            Not Before: Jun 11 11:11:55 2026 GMT
            Not After : Jun 18 11:11:55 2026 GMT
        Subject: CN=6a2a97fb-17b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:3b:fe:62:7a:bd:f6:02:ed:9b:d3:b8:d5:
                    1a:b0:4c:1d:9b:c9:68:53:ee:89:54:dd:4e:f0:c6:
                    44:01:e7:c2:92:88:2c:2e:f6:41:4a:86:f6:61:81:
                    a9:3c:8c:80:1c:20:17:54:e3:f0:d9:a0:eb:6b:5b:
                    f8:c4:1d:38:a1:27:a4:a1:9a:01:50:d7:d8:34:39:
                    3e:5a:18:15:58:05:58:98:ba:f6:6a:1a:5b:8b:ba:
                    53:a2:cb:c6:14:cc:c9:0e:e0:46:9e:95:2e:05:0e:
                    7f:1f:b1:9d:a4:9c:ff:e9:ab:77:54:25:e0:aa:b3:
                    5a:bb:cb:42:0e:ca:4f:28:5a:90:fd:61:82:9f:85:
                    31:98:93:9e:50:c3:f1:bd:56:d8:c3:9c:12:2b:73:
                    e0:ca:36:13:9f:97:20:93:8d:1a:c7:60:bc:f3:65:
                    db:42:a1:aa:11:d1:e5:b7:c2:1f:a8:ec:c8:d3:2b:
                    6e:cd:d2:27:d7:66:17:f4:30:65:e3:74:43:23:bb:
                    b1:71:f6:27:7b:df:4d:9b:b1:65:b5:b4:29:24:80:
                    15:56:37:16:8c:49:ef:8d:f2:b6:23:ca:e0:18:56:
                    ef:2c:91:5a:be:2d:10:ae:cf:f7:a7:c0:ac:47:9e:
                    69:cd:22:d7:41:34:1e:ff:a3:8e:a9:0c:cc:2e:67:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:EA:1A:3E:31:9E:64:D6:82:08:B9:2D:C5:14:5D:E2:91:18:57
            X509v3 Authority Key Identifier:
                keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:cb:83:05:33:5b:54:29:5c:b5:1b:1c:9b:99:d1:3e:86:
         f0:99:4a:a6:3f:56:0b:da:e7:81:84:c6:7b:10:b3:3c:4f:96:
         36:af:69:ae:10:b3:97:58:ba:6c:4f:94:67:9a:da:b2:27:90:
         eb:f1:cb:cd:f7:76:71:37:e9:18:c3:99:ce:42:8c:95:fc:bf:
         b5:9e:48:2a:f5:ce:cf:77:74:66:04:30:a3:00:9d:68:a4:a8:
         57:44:28:a6:36:db:5b:50:28:ad:50:9d:13:6a:3c:1b:35:a6:
         70:1c:7b:ae:b4:3b:e0:30:fb:ec:74:12:d1:f8:86:78:f2:8c:
         ab:48:0a:f3:e0:b0:c2:a9:c2:31:a2:13:4d:12:54:44:27:ab:
         6e:f3:7f:5d:83:bb:51:af:7c:7b:34:3f:c9:84:af:57:b5:e7:
         e3:7e:eb:9f:4a:6b:e6:7e:8b:9d:1b:48:fc:e0:af:ef:0c:30:
         4c:f6:df:12:4e:e2:b9:c5:e3:6f:d0:8b:97:ec:21:49:fb:3e:
         9e:00:69:b9:d0:45:29:3d:5f:86:22:57:2d:d2:56:9f:ce:5a:
         31:4f:00:1b:f2:a2:5d:ad:f5:50:62:2c:38:e2:73:0a:df:27:
         90:80:43:63:45:d7:90:70:33:ea:82:aa:99:69:67:68:2e:d8:
         2a:76:2c:af
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MEExODExMC8GA1UEBRMoODg0OEVDMEVEQTM5NkZFMjE0RUVDMDMxN0YwRjUxQjkx
OEQ2RkNFRTAeFw0yNjA2MTExMTExNTVaFw0yNjA2MTgxMTExNTVaMBgxFjAUBgNV
BAMTDTZhMmE5N2ZiLTE3YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA5Dv+Ynq99gLtm9O41RqwTB2byWhT7olU3U7wxkQB58KSiCwu9kFKhvZhgak8
jIAcIBdU4/DZoOtrW/jEHTihJ6ShmgFQ19g0OT5aGBVYBViYuvZqGluLulOiy8YU
zMkO4EaelS4FDn8fsZ2knP/pq3dUJeCqs1q7y0IOyk8oWpD9YYKfhTGYk55Qw/G9
VtjDnBIrc+DKNhOflyCTjRrHYLzzZdtCoaoR0eW3wh+o7MjTK27N0ifXZhf0MGXj
dEMju7Fx9id7302bsWW1tCkkgBVWNxaMSe+N8rYjyuAYVu8skVq+LRCuz/enwKxH
nmnNItdBNB7/o46pDMwuZ/sHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwaDqGj4x
nmTWggi5LcUUXeKRGFcwHwYDVR0jBBgwFoAUiEjsDto5b+IU7sAxfw9RuRjW/O4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQTE4LzRGRUM3MUNDMzZE
OTExRjE4REQwRkUyN0IxODMzNzczL2lFanNEdG81Yi1JVTdzQXhmdzlSdVJqV19P
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaUVqc0R0bzViLUlVN3NBeGZ3OVJ1UmpXX080LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
QTE4LzRGRUM3MUNDMzZEOTExRjE4REQwRkUyN0IxODMzNzczL2lFanNEdG81Yi1J
VTdzQXhmdzlSdVJqV19PNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBvn8uDBTNbVClctRscm5nRPobwmUqmP1YL2ueBhMZ7ELM8T5Y2r2muELOXWLps
T5RnmtqyJ5Dr8cvN93ZxN+kYw5nOQoyV/L+1nkgq9c7Pd3RmBDCjAJ1opKhXRCim
NttbUCitUJ0TajwbNaZwHHuutDvgMPvsdBLR+IZ48oyrSArz4LDCqcIxohNNElRE
J6tu839dg7tRr3x7ND/JhK9XtefjfuufSmvmfoudG0j84K/vDDBM9t8STuK5xeNv
0IuX7CFJ+z6eAGm50EUpPV+GIlct0lafzloxTwAb8qJdrfVQYiw44nMK3yeQgENj
RdeQcDPqgqqZaWdoLtgqdiyv
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:48 2026 by rpki-client