Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          b37uIfwAASUEu4JnxSvCBzxALOKsZw5RjIFy+N9XtYw=
Subject key identifier:   A2:34:80:3E:A4:E1:8E:C1:A0:1F:1C:A3:D3:EE:08:33:91:B0:24:F4
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          01E4
Signing time:             Sat 13 Jun 2026 03:26:52 +0000
Manifest this update:     Sat 13 Jun 2026 03:26:51 +0000
Manifest next update:     Sat 20 Jun 2026 03:26:51 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: hE2enO45YTHQ+N67KyqpG05LKPfhqf/dA5Q8GO9ds6w=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: Jun 13 03:26:51 2026 GMT
            Not After : Jun 20 03:26:51 2026 GMT
        Subject: CN=6a2ccdfc-a947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:18:4a:0d:12:2f:7e:c4:2b:68:32:7a:17:
                    f6:1b:ea:41:85:4a:36:ab:f9:b7:e8:c3:bc:fc:cf:
                    f8:a5:30:a5:7b:7c:53:41:e7:64:63:eb:ac:85:aa:
                    f4:aa:0f:16:6d:03:62:ab:43:a9:af:c8:a2:e3:b0:
                    47:f4:a8:2f:b5:f2:32:72:9e:f5:ff:46:a5:ae:84:
                    8f:7b:12:95:64:2b:9a:f0:64:6a:6f:4f:ba:2b:f7:
                    be:04:95:b9:49:6e:0e:8e:34:e9:cc:b9:99:01:ab:
                    eb:68:b8:7d:27:6d:53:d3:1a:3f:91:62:69:a0:0b:
                    04:25:b1:db:d1:21:15:9f:42:58:6b:37:af:4f:e2:
                    58:48:d1:b1:62:75:85:f3:95:a0:e4:c6:d1:d1:0d:
                    5c:e6:7f:2d:86:43:94:3d:a1:e9:f9:07:03:7e:66:
                    30:f6:0d:2d:88:c9:e4:23:75:fa:d4:3a:f5:38:9d:
                    dd:11:05:a8:56:f5:c3:74:51:dd:57:a6:a0:51:67:
                    aa:d1:82:7b:40:ca:4f:71:93:b3:59:27:f6:fe:4c:
                    9d:db:93:25:35:85:1f:39:bd:0c:54:e3:cf:54:7a:
                    75:3b:5b:86:8f:d0:e3:9d:73:5a:01:f6:2b:19:3d:
                    d1:46:11:ad:64:31:3b:f8:d8:50:09:a4:29:61:1d:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:80:3E:A4:E1:8E:C1:A0:1F:1C:A3:D3:EE:08:33:91:B0:24:F4
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:1a:fa:9f:f6:90:dd:5c:59:14:8c:c8:f6:d5:71:de:f0:
         a5:41:ca:d7:5c:09:92:02:2b:8e:1e:b2:17:ea:5a:94:8c:67:
         e0:a5:bf:49:3c:31:85:ec:73:e6:32:cd:04:23:04:ef:b2:88:
         2e:62:b6:85:ce:54:db:e9:7e:69:96:62:94:67:22:a3:71:4e:
         d4:a5:ad:a1:39:b1:e4:3e:c5:61:c8:79:55:0d:84:39:9f:d2:
         b8:17:cd:42:0f:14:94:4a:e1:dd:6f:f8:75:ae:aa:34:fb:84:
         97:06:7c:de:72:c8:1e:6a:ca:45:f9:48:d1:58:ce:17:fc:74:
         77:34:34:7a:d7:69:7e:74:d0:f2:e9:98:fa:f1:63:ea:83:a2:
         4c:7e:15:81:b1:d5:02:aa:82:a5:af:79:7a:3b:b2:d4:bf:72:
         21:d4:88:e1:f5:83:25:56:18:bd:88:05:50:7f:43:e4:2d:84:
         0a:fb:3b:24:a6:17:18:44:25:15:8e:9a:d6:96:85:d1:f9:03:
         b1:0e:3c:df:e7:4d:04:d9:13:d8:97:54:4e:5d:7e:e1:ea:37:
         6e:bc:c7:00:3d:f9:11:9a:df:f6:ba:f3:f1:3f:77:1c:56:a7:
         64:05:74:1f:5d:8a:97:01:0a:a3:a4:c5:6a:c1:55:8d:d7:e2:
         df:73:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:33 2026 by rpki-client