Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
File:                     iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json)
Hash identifier:          SkxDEiQPXx9WoI8g1BGCcPcTRlxThdwyoP1uIOzQOhc=
Subject key identifier:   2C:8A:BD:18:07:E7:6E:69:D6:29:7D:62:9F:59:AC:C9:3B:9F:3F:DA
Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD
Certificate issuer:       /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
Manifest number:          54
Signing time:             Sat 13 Jun 2026 08:21:21 +0000
Manifest this update:     Sat 13 Jun 2026 08:21:20 +0000
Manifest next update:     Sat 20 Jun 2026 08:21:20 +0000
Files and hashes:         1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: GdoLadYe7wa+ZQhyUCKZxR9cuTBX4Eaxg5h7Wuds8pI=)
                          2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
        Validity
            Not Before: Jun 13 08:21:20 2026 GMT
            Not After : Jun 20 08:21:20 2026 GMT
        Subject: CN=6a2d1301-d305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:cd:f3:be:e0:61:32:01:5c:26:ef:70:0d:
                    6e:f2:cf:76:07:69:7b:19:34:8d:e0:38:d9:c2:4f:
                    b5:fb:0f:92:7b:b2:91:d9:b0:7c:a3:90:fb:ed:b4:
                    92:9a:be:50:cd:03:fd:b3:4f:b5:df:d4:59:e9:6a:
                    ad:31:05:05:9d:3b:98:6f:f9:5b:a8:8b:e8:a9:52:
                    fc:69:5e:25:96:a7:8f:24:d0:b1:98:de:d4:ad:be:
                    11:79:6d:4a:4b:13:aa:26:26:86:f1:e0:39:3d:96:
                    31:f0:74:a3:d6:e4:70:fb:a3:fa:8b:b4:ff:4b:16:
                    f0:f5:21:6d:92:fa:67:c2:d9:c8:4f:16:32:c6:f6:
                    00:82:74:38:83:6c:f3:55:a1:77:6c:b7:70:60:69:
                    d5:db:c3:41:c6:a2:7d:a2:c0:66:b0:51:5e:93:6a:
                    5a:85:2c:63:dc:f3:b4:ce:a9:57:4d:1b:99:9b:f1:
                    67:44:78:24:c3:be:dc:d0:48:50:a2:22:e6:ed:bc:
                    4b:df:dd:2b:52:f7:8e:36:1d:6e:ed:cf:48:1f:25:
                    3b:a9:e3:c6:d9:8e:c2:17:43:f4:88:c3:5b:44:c0:
                    ff:ce:40:54:b2:97:53:4b:83:40:89:72:6a:57:23:
                    cf:8b:bd:15:9d:50:97:e6:5b:4d:33:3c:3b:96:f3:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:BD:18:07:E7:6E:69:D6:29:7D:62:9F:59:AC:C9:3B:9F:3F:DA
            X509v3 Authority Key Identifier:
                keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:ff:be:48:ea:9a:78:e2:d7:df:da:04:33:9d:3f:65:fa:
         09:0d:01:36:71:2c:39:be:36:7c:27:56:43:b7:f3:f2:a9:d8:
         4d:f7:2d:3a:0e:25:43:f4:0d:3a:d8:c3:c1:9f:84:d5:0f:70:
         fc:8a:5e:72:1c:18:f9:c9:52:6f:da:16:82:86:f8:87:e7:ea:
         71:43:d7:f3:3d:bb:5a:e1:29:c9:e0:d1:7a:65:4b:09:e9:30:
         ee:2d:69:f7:9b:82:66:f3:b8:00:04:e8:ed:fb:07:69:4b:28:
         4b:9f:45:65:95:a9:06:a5:8b:ec:45:2f:70:9c:dc:0e:a1:3c:
         f6:df:fb:95:b5:be:f8:5a:e8:bf:4e:48:fe:1d:3d:32:18:1e:
         28:49:a4:9d:5b:a6:13:d1:db:a6:ef:49:cc:d6:70:4c:7a:3f:
         3b:4d:04:25:c4:2f:04:64:4f:0e:aa:e5:5c:47:24:2a:86:f8:
         0a:ae:98:02:3e:a0:4f:4b:3b:af:2a:b7:3f:72:cd:73:5f:94:
         96:fb:43:fc:9a:56:8e:73:d2:a8:6f:ef:6e:dc:7a:5f:a9:84:
         06:7b:c2:5a:57:4c:4a:0e:39:e5:96:c6:7b:22:aa:d6:01:23:
         89:15:1d:52:39:60:f9:66:af:6a:69:02:13:a8:75:60:41:6c:
         3e:f4:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:04:50 2026 by rpki-client