Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
File:                     iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json)
Hash identifier:          262NYIVSF/ejlYznN9FEItRHUhamF0oqrnidQhrWmEo=
Subject key identifier:   7C:0B:85:1D:B5:79:BA:2B:B8:4E:72:EE:C5:B8:09:1F:9C:06:3B:FA
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Certificate issuer:       /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
Manifest number:          015F
Signing time:             Sat 13 Jun 2026 05:00:06 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:05 +0000
Manifest next update:     Sat 20 Jun 2026 05:00:05 +0000
Files and hashes:         1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: Gtqo+DK2RXZ0uzO1SXM3tEHRv/yrRO76o5Sf5p5VdcU=)
                          2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: oQRja5kNE1xgzFCqir1541pX0ir8ZOqbUXiW5IO5uBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
        Validity
            Not Before: Jun 13 05:00:05 2026 GMT
            Not After : Jun 20 05:00:05 2026 GMT
        Subject: CN=6a2ce3d5-6914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:ed:c9:1b:63:12:50:9b:9f:9e:be:69:68:
                    c3:55:27:c0:b1:64:0e:6e:85:21:72:75:86:79:fe:
                    69:ba:97:da:19:a6:b1:a4:76:ff:22:3e:89:58:56:
                    62:07:e7:96:ed:48:4a:d4:16:32:b7:06:72:db:4e:
                    a6:f5:3d:1d:22:9a:68:b4:8f:90:53:90:ee:07:e2:
                    20:1d:03:1c:12:5e:a6:b3:7f:14:d5:32:f6:9e:29:
                    89:a0:e2:ca:74:82:4f:62:23:bf:68:ef:e2:23:25:
                    b8:0b:21:00:52:a4:4c:2a:54:2c:5f:4e:a1:04:d6:
                    14:1a:c5:e6:38:f4:61:d8:c1:f5:e2:5b:55:ff:6f:
                    10:31:f6:9f:00:c3:ce:be:71:11:0d:a6:b6:a9:6f:
                    41:38:bc:e6:00:0b:00:0a:9c:e2:1b:82:63:74:68:
                    67:33:fa:0c:30:52:b8:01:fb:c6:20:f2:04:b5:27:
                    a2:37:24:5e:1f:05:99:62:cd:16:1d:e6:c6:4e:69:
                    25:0b:72:50:78:70:e9:85:78:c7:72:71:b3:32:1f:
                    e8:17:cc:a0:3d:0b:2d:8b:8c:b9:1b:de:0e:39:41:
                    9d:43:79:b0:8b:5f:a2:a2:89:70:8f:47:35:c0:8a:
                    97:62:27:ae:bd:26:2a:24:b9:07:6e:9a:a9:c3:17:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0B:85:1D:B5:79:BA:2B:B8:4E:72:EE:C5:B8:09:1F:9C:06:3B:FA
            X509v3 Authority Key Identifier:
                keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:9a:09:13:54:1c:e9:08:48:3f:25:c4:3f:5f:3d:5b:c6:
         6a:79:e1:28:fd:53:3c:c6:18:04:f4:5f:f4:e4:26:65:45:10:
         b4:44:1b:97:bb:fd:c4:06:41:59:88:9c:f4:82:fd:9c:a6:9b:
         07:28:56:50:a7:93:05:80:ea:f2:33:2c:96:ef:ec:4d:45:33:
         b2:4c:77:62:58:66:4b:a4:80:e2:4f:0d:65:08:37:5b:93:c0:
         0e:5e:76:2b:c4:32:95:e7:94:a2:05:91:bd:76:22:af:7d:b7:
         69:a2:f1:70:20:3a:4c:3a:28:d1:78:6b:a7:5c:12:f5:a4:b2:
         4d:60:fb:2c:76:9e:79:91:c5:ad:27:bf:85:41:d7:31:3f:d6:
         e1:71:e0:62:94:17:99:aa:17:a4:c5:3c:c5:9c:0c:81:f7:26:
         7a:61:dc:11:07:bc:51:34:b7:56:bc:4e:dc:01:a9:d3:ad:cd:
         11:4f:5b:ba:53:55:7f:e1:55:76:18:1b:de:1b:a3:3e:20:ce:
         d2:de:7c:97:83:7a:aa:5f:0a:57:d0:ae:7e:19:9c:bf:ba:a4:
         53:da:b5:f2:95:28:43:8b:f0:f5:2f:1b:bb:e5:5c:59:d9:eb:
         0d:55:a7:d1:90:d6:fe:d6:27:ed:31:cd:68:d9:5f:ca:8f:87:
         6a:ed:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:26 2026 by rpki-client