Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
File:                     IqsnKH1FJndu9FfIiq4NTcomll8.mft (raw, json)
Hash identifier:          xSiemt2bv5KZ7iTfZ/WP2AEJPYTV/sq5vlpkc6Y1uMI=
Subject key identifier:   7D:69:07:BB:CE:B6:0A:A6:AE:56:73:5A:F7:9C:90:16:85:A6:7F:96
Authority key identifier: 22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
Certificate issuer:       /CN=A919BF94/serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
Manifest number:          05
Signing time:             Sat 13 Jun 2026 09:17:17 +0000
Manifest this update:     Sat 13 Jun 2026 09:17:17 +0000
Manifest next update:     Sat 20 Jun 2026 09:17:17 +0000
Files and hashes:         1: IqsnKH1FJndu9FfIiq4NTcomll8.crl (hash: 3TAx63rQvGVTl0rkstzngCazJ8HA6vXd2mNLMPcYngE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
                          rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BF94, serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
        Validity
            Not Before: Jun 13 09:17:17 2026 GMT
            Not After : Jun 20 09:17:17 2026 GMT
        Subject: CN=6a2d201d-52e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:f9:6e:c1:c6:a5:37:99:54:2e:e0:90:8b:
                    61:43:c5:b3:ae:4b:e0:c2:ae:91:e5:46:27:8c:6d:
                    7e:40:a7:af:3d:85:1f:4b:48:2b:2a:78:c9:df:89:
                    9f:35:21:61:ae:7a:33:cf:91:05:15:bb:14:1b:7f:
                    ef:27:4d:a5:33:9f:da:20:eb:47:33:dc:73:4f:01:
                    a5:53:05:84:ca:9e:d8:ec:8a:72:21:0a:27:ea:9f:
                    79:7e:4f:5c:cf:17:9e:bc:84:ef:7e:89:31:aa:28:
                    c2:7f:e8:eb:89:1d:fa:bb:4d:8a:8e:2d:46:b6:3d:
                    6e:d4:02:c4:d1:a5:d1:c5:68:40:9b:73:80:6a:18:
                    d7:83:17:4d:df:6d:29:3d:8e:b4:57:de:55:7f:08:
                    1d:01:da:01:28:6c:d9:87:af:46:f1:0c:c7:ba:77:
                    83:50:fc:a1:cd:5c:16:ff:e9:b2:f0:c6:6e:a5:6c:
                    41:cf:3f:45:d5:20:1a:2e:64:a2:2e:09:fe:a7:b6:
                    8c:05:69:c7:07:90:89:e3:11:25:6e:a5:48:82:84:
                    2a:40:9b:9f:f9:2a:68:d9:a4:b0:16:39:c9:40:40:
                    06:89:5c:c1:95:79:a3:02:f6:8e:9a:bc:0d:58:31:
                    33:32:9c:10:02:e1:39:da:5e:a1:ff:c1:7b:50:78:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:07:BB:CE:B6:0A:A6:AE:56:73:5A:F7:9C:90:16:85:A6:7F:96
            X509v3 Authority Key Identifier:
                keyid:22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:19:98:35:31:77:58:63:33:65:ef:06:82:b2:2b:93:72:
         5e:7c:4e:83:1b:62:c2:71:6c:23:56:ae:62:8d:bf:2b:59:eb:
         1f:95:a2:78:f8:14:32:87:f0:ed:e9:c0:b5:82:3b:4d:01:a7:
         17:f5:62:8d:4e:37:4f:9f:ad:9a:9f:77:40:76:45:36:fa:9a:
         34:56:3c:f0:8a:90:c7:71:91:0e:55:fa:8f:b1:a5:2d:12:0f:
         59:e7:c5:9f:aa:6e:26:a4:66:9e:85:54:61:34:18:0e:81:e4:
         75:30:89:d0:c3:11:3e:fb:ec:87:06:d2:5b:ea:c7:ae:75:9f:
         47:40:9d:71:41:1c:1b:aa:5a:3c:5f:36:3d:48:85:91:e7:86:
         04:ef:0a:03:dc:f5:30:fc:4b:b8:7d:d4:d8:30:da:c3:45:54:
         98:1f:a2:e5:01:4d:69:69:cf:18:32:54:dd:84:2b:40:b1:8a:
         b9:00:23:34:40:59:c3:b4:d3:4a:27:90:07:8a:63:04:c8:17:
         f4:b2:1c:0d:0a:fe:82:17:6a:be:90:67:9c:64:df:9f:d4:d7:
         22:a0:37:d3:00:58:fe:f6:a9:b8:cf:46:50:67:d7:76:e7:3b:
         2f:c6:9b:5c:f0:ba:fc:a1:31:6a:83:e6:f7:d8:71:b6:ec:ae:
         f1:59:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:49 2026 by rpki-client