Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
File:                     iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json)
Hash identifier:          ygoRhdOibCLGxXqjnxDbm2BtrRozWQFCwvIrqTccE4g=
Subject key identifier:   FC:34:E7:16:4A:25:85:74:C4:D6:78:04:FD:E4:13:F2:D9:37:C8:C2
Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08
Certificate issuer:       /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
Manifest number:          6B
Signing time:             Sat 13 Jun 2026 08:01:38 +0000
Manifest this update:     Sat 13 Jun 2026 08:01:38 +0000
Manifest next update:     Sat 20 Jun 2026 08:01:38 +0000
Files and hashes:         1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: 9chY4qz8EsYz3QbrksfbhexBC82PHYw41qgU9KrhvYc=)
                          2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
        Validity
            Not Before: Jun 13 08:01:38 2026 GMT
            Not After : Jun 20 08:01:38 2026 GMT
        Subject: CN=6a2d0e62-3eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:e8:7e:29:7a:cc:d5:5c:21:11:0d:12:96:
                    e9:cb:11:81:ae:85:79:26:91:cc:80:8c:11:42:70:
                    d8:5b:81:fd:99:8b:1c:f2:ad:14:90:c7:d4:3c:2c:
                    5c:cf:d1:f5:e9:3c:db:c5:fd:12:02:4f:20:a5:2e:
                    c3:3f:f5:8d:0c:56:67:d5:31:e4:42:4f:ad:99:8c:
                    4a:44:b4:e0:10:27:48:52:77:0d:8d:23:36:6b:76:
                    0c:ee:aa:13:fe:a5:09:eb:6f:ef:9b:2c:2f:f2:6a:
                    66:6b:07:2b:aa:2e:cd:9d:e4:ac:c1:c4:b8:c8:a4:
                    fb:85:88:16:0c:1e:51:5a:44:74:6e:da:5d:19:2c:
                    b6:be:f4:83:fd:5c:fb:df:41:2a:a2:3f:a6:52:fa:
                    0d:46:dc:57:fe:c1:1e:14:54:79:74:cc:87:e2:68:
                    dc:fd:17:91:89:b6:e9:ce:e2:b7:3d:6d:57:0b:91:
                    25:08:5c:26:2a:bb:6e:76:b1:63:a9:1d:50:74:6a:
                    e5:a1:b4:91:cd:90:5d:4e:a8:0f:04:8b:9a:f0:a4:
                    85:3e:e0:7f:bd:51:2a:84:ca:16:bc:c1:e2:39:a8:
                    87:73:36:f3:35:ff:73:38:27:ad:e3:10:3a:32:8f:
                    ca:7f:b3:75:9a:07:94:02:04:c2:7c:11:c4:e6:45:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:E7:16:4A:25:85:74:C4:D6:78:04:FD:E4:13:F2:D9:37:C8:C2
            X509v3 Authority Key Identifier:
                keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:21:aa:94:ff:e5:80:56:99:d7:72:71:f1:a8:f9:a5:01:
         a2:aa:4c:09:7b:a6:ec:70:0a:5c:fd:8b:89:87:65:35:dd:c2:
         85:27:52:45:73:09:3a:17:73:8c:95:c2:71:90:5d:7a:7b:54:
         05:22:05:0d:c0:79:05:74:a2:9b:78:b4:f3:a2:aa:44:05:bf:
         5b:21:51:ed:5e:06:49:b2:15:c6:e1:4e:a5:3d:9e:03:0e:f5:
         0a:7f:47:9e:16:81:b6:41:58:0b:a8:c1:2d:b0:40:e1:66:6a:
         cf:45:70:71:68:d4:21:01:ec:88:80:8e:52:4b:c3:72:d3:53:
         eb:b8:65:35:cc:50:3d:93:4a:e2:96:d8:79:f0:62:33:40:33:
         50:fe:2a:e2:62:3d:66:3c:88:58:b6:d7:fe:06:a3:4b:b8:1c:
         8d:3a:f6:1b:fe:97:50:a4:b0:d3:b6:b2:c7:13:0a:01:2f:2b:
         d2:3e:19:60:1b:4a:da:2b:74:18:29:79:e6:06:d3:d9:6e:e1:
         fe:39:8e:3b:36:46:93:33:1a:c3:54:a9:95:9d:2c:5c:04:45:
         fb:c9:9d:74:97:12:d7:9e:fc:db:24:4e:b4:07:d8:cb:af:11:
         18:c9:5c:c3:2a:2d:52:21:9d:c6:0d:9c:04:6c:d0:81:72:90:
         02:a2:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:45 2026 by rpki-client