Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
File:                     iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json)
Hash identifier:          rMiimR8mwPTPw2WdwvGh7TtstK88rN1JxofTiL09ObA=
Subject key identifier:   14:65:CB:00:9D:71:02:43:47:31:CA:F8:8C:17:6D:83:1E:1B:53:ED
Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D
Certificate issuer:       /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
Manifest number:          01CF
Signing time:             Sat 13 Jun 2026 03:51:52 +0000
Manifest this update:     Sat 13 Jun 2026 03:51:52 +0000
Manifest next update:     Sat 20 Jun 2026 03:51:52 +0000
Files and hashes:         1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: hGvZCDMdCeokGhHTqBD0c3l3G6l7g6hvAE6vIeEvPnk=)
                          2: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=)
                          3: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=)
                          4: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: zRLwbdLjJcZ9xIvEJX9pjeEu223B0K+u9rS591OrK1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl
                          rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D
        Validity
            Not Before: Jun 13 03:51:52 2026 GMT
            Not After : Jun 20 03:51:52 2026 GMT
        Subject: CN=6a2cd3d8-a34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:44:ce:f0:4c:87:8a:f3:6f:e9:3d:47:9c:
                    5c:21:ae:44:07:f3:8c:3f:13:07:69:7a:22:c8:e1:
                    5f:c6:80:d2:01:48:92:ea:bd:51:72:6f:11:59:b7:
                    e5:69:f9:b3:4d:3a:c2:8d:d8:d3:13:3d:dc:d7:46:
                    7c:2f:01:e6:39:97:8b:57:3f:51:e0:17:22:7d:da:
                    b6:3d:fa:b6:cb:bf:45:9d:ba:28:0f:1c:4b:b2:e1:
                    15:32:b3:66:87:c4:2f:6e:7c:d2:a5:d0:bd:d9:ba:
                    5f:fb:af:44:c9:c8:de:52:ad:19:f7:5f:d4:b0:c0:
                    3b:6b:a4:be:f6:80:28:d2:ee:8b:cc:90:c1:f2:b8:
                    90:05:c0:8a:32:e2:a8:11:bd:88:bd:49:6f:40:15:
                    29:14:34:a7:38:1f:73:02:bf:29:16:e3:4f:6a:41:
                    df:c1:25:46:56:f3:e2:c2:19:ba:b2:8d:33:cc:78:
                    9f:2b:e4:e9:96:81:55:44:58:64:cd:67:da:54:8a:
                    c1:77:f0:ee:ac:86:7b:9e:98:78:33:5a:1d:06:cf:
                    30:d7:67:72:0b:2a:01:cd:55:1b:d2:61:a7:d8:dc:
                    0d:34:54:b8:b4:c3:71:23:65:d2:27:cf:95:33:e7:
                    90:19:03:95:36:ee:b7:62:ef:35:08:ad:2d:a7:f3:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:CB:00:9D:71:02:43:47:31:CA:F8:8C:17:6D:83:1E:1B:53:ED
            X509v3 Authority Key Identifier:
                keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:1b:db:af:d9:05:51:ff:15:d1:86:ea:09:45:de:ce:44:
         2e:74:2a:b5:f7:02:d5:80:27:61:54:e9:83:5b:01:98:bf:71:
         71:1d:6b:8f:02:1f:dc:82:60:2d:32:2c:c9:c8:e7:3d:c3:da:
         b3:31:f1:cf:3d:cc:31:b4:1c:99:c6:a3:f3:01:71:62:43:85:
         40:87:e4:6e:5e:c7:ae:61:ed:01:3e:ce:df:ab:33:95:97:0c:
         d4:47:5f:f3:43:22:b4:cd:b3:ab:f8:63:e3:7c:f1:78:ba:31:
         a7:c2:ab:5a:42:1d:d6:77:9c:84:16:8a:e2:20:f7:80:d1:3f:
         7b:0c:08:08:0d:a8:63:10:3c:64:a2:86:9a:4b:4b:a5:c7:b9:
         81:c5:b2:22:29:fa:87:af:c0:de:08:80:b2:45:83:c5:bb:4a:
         9a:0d:5b:c8:54:75:4f:d5:50:df:36:6f:db:35:75:07:da:84:
         e6:8e:5e:e1:33:94:c0:b6:95:56:11:5a:c9:cc:da:a4:de:79:
         a0:b6:c4:74:ab:41:e8:a9:75:56:43:3e:2d:93:12:f8:9d:2b:
         f8:4b:56:4e:96:d3:09:93:95:78:80:ad:db:7d:ef:62:8d:11:
         3a:2a:0f:f5:70:ec:8a:00:24:8e:74:b6:31:b4:a5:64:9c:df:
         4b:f9:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:28 2026 by rpki-client