Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File:                     IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier:          ihWtmOAFYfLlWK2Dt0oyWdftkKv9kWzw6IqncyMG8hw=
Subject key identifier:   13:13:2F:68:23:15:6C:3A:76:5D:4C:61:86:E0:A1:99:23:77:65:50
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer:       /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial:       0BC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number:          0BB3
Signing time:             Fri 12 Jun 2026 19:05:48 +0000
Manifest this update:     Fri 12 Jun 2026 19:05:48 +0000
Manifest next update:     Fri 19 Jun 2026 19:05:48 +0000
Files and hashes:         1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: IrVNVJHmfbD4a/OP8t74hRItlSO3hOHvPtEwsnXOCpg=)
                          2: A558194E801F11EFB86B2647C4F9AE02.roa (hash: t9NapK/6qJjRf58S65SJlIEwaZxa09mw/H0Mw5wLnc0=)
                          3: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3015 (0xbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
        Validity
            Not Before: Jun 12 19:05:48 2026 GMT
            Not After : Jun 19 19:05:48 2026 GMT
        Subject: CN=6a2c588c-6866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:68:ff:3e:7d:6c:a1:46:34:25:74:2a:31:
                    27:f1:e9:2b:f1:50:a0:7d:e1:d8:ea:2e:8c:46:c3:
                    da:8a:60:04:e4:46:4e:10:d9:b1:a8:34:53:b8:cb:
                    8e:e9:6a:58:30:1c:b8:ba:b4:3b:7e:c8:e0:35:b5:
                    d4:6d:f6:85:11:ea:14:d2:5a:03:26:e5:0d:8c:86:
                    4f:6d:92:73:d6:bd:fa:c3:34:b3:4a:f4:b9:ce:13:
                    7e:4b:51:f2:b2:60:bf:81:a3:6c:01:06:d4:c9:60:
                    ae:27:58:08:2b:55:fd:2c:ff:91:86:cd:c6:7c:e5:
                    28:f3:0b:f6:bc:a1:c5:19:c9:b5:9a:20:f4:33:1f:
                    b5:cb:c4:ff:08:3d:53:21:ef:81:cb:ec:ca:08:6a:
                    d4:1a:4d:2d:ea:a4:35:f4:7a:fd:fa:16:ad:26:c1:
                    68:2e:9e:9a:00:72:c7:1c:4f:ee:e9:b5:0a:01:6a:
                    ff:d0:b4:06:3a:63:94:19:34:88:f6:ab:b8:7c:75:
                    2d:ae:27:1f:51:d9:31:8e:f2:2d:7c:4f:a1:9c:85:
                    d3:79:be:17:7c:98:c0:62:93:c5:c5:ad:56:dd:af:
                    56:08:7a:8d:a3:86:1e:3c:c9:2a:63:43:06:f8:f5:
                    17:0d:1e:8b:8c:17:09:b2:58:db:20:63:f1:14:c2:
                    e5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:13:2F:68:23:15:6C:3A:76:5D:4C:61:86:E0:A1:99:23:77:65:50
            X509v3 Authority Key Identifier:
                keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:b2:aa:66:24:a3:11:7c:dc:4e:6e:65:9e:00:86:c7:84:
         03:8e:08:00:d4:7d:03:fe:13:5b:13:d9:f4:fc:5c:e8:b2:66:
         f8:20:e4:54:53:e6:6a:d3:20:10:e0:c7:bf:6c:e9:a4:e7:bd:
         b1:2c:a9:68:42:5e:8a:ee:30:40:c6:86:5b:54:60:43:8f:39:
         5e:72:20:03:3c:b8:06:06:30:1e:e1:a9:a6:13:f1:30:de:1d:
         53:f1:bc:72:68:90:12:5e:d6:9d:2e:2f:23:d8:2a:b7:80:9b:
         4b:b2:a5:2b:09:92:ce:06:e5:8f:1f:bd:b2:ad:36:b0:9a:67:
         76:c6:f4:58:22:8b:c0:8d:c5:be:fb:98:d6:0c:84:f7:6c:cf:
         a3:ed:d4:65:96:25:f9:56:e7:4f:3f:f2:fe:1a:51:e3:24:0f:
         98:9d:34:a3:7e:d4:4b:fb:88:fa:8f:09:f3:ea:f1:ed:d0:37:
         ec:3c:ee:0a:81:d2:99:bc:e8:06:18:ef:71:f0:28:18:f5:a2:
         d9:93:ca:27:67:77:2b:39:b2:4f:17:6e:58:55:3d:8e:f8:2f:
         08:24:26:e7:10:0e:f0:6c:10:5e:12:67:a3:23:dd:5a:a1:3c:
         fe:bf:da:da:d4:31:54:74:a7:4e:68:7d:dd:ed:77:de:55:0c:
         ff:84:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:21 2026 by rpki-client