Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
File:                     iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json)
Hash identifier:          TiEkcyhBacdn9RpV3xAhzRl/bHAw8KtH7kYUzcD6n9A=
Subject key identifier:   66:0A:08:63:81:D7:99:45:E3:50:7B:A0:83:79:DA:50:54:53:01:F1
Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70
Certificate issuer:       /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
Manifest number:          99
Signing time:             Sat 13 Jun 2026 07:29:30 +0000
Manifest this update:     Sat 13 Jun 2026 07:29:29 +0000
Manifest next update:     Sat 20 Jun 2026 07:29:29 +0000
Files and hashes:         1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: EhZ/eP5LRPGczjwZSlTAjnv7HySLAAWSHW4OqZsGFJ0=)
                          2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70
        Validity
            Not Before: Jun 13 07:29:29 2026 GMT
            Not After : Jun 20 07:29:29 2026 GMT
        Subject: CN=6a2d06da-02df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:e9:16:a7:d5:49:e9:9e:74:4c:37:82:7b:
                    b1:ac:e7:98:1f:7d:e6:78:cd:30:7d:4e:80:f1:41:
                    eb:d3:78:20:bb:e4:6d:18:a6:13:76:2f:dc:27:43:
                    93:51:14:cb:45:64:13:b4:67:85:60:d1:89:5c:80:
                    c1:11:63:91:73:30:07:5b:82:f4:ac:6a:c8:9e:a3:
                    98:0b:37:98:67:28:33:9f:51:6e:bd:f4:87:86:38:
                    a2:d4:4d:f8:a6:e1:d7:fe:a6:a1:d3:ee:c5:50:74:
                    01:a3:e9:79:a8:34:f7:63:cb:0d:0f:97:ff:f6:4d:
                    3f:22:d9:d9:cc:8b:ac:7b:45:a7:63:c4:d3:b8:44:
                    f7:96:5d:49:51:f8:b4:53:04:73:61:e0:d3:1a:e9:
                    cd:da:bf:0c:3e:26:69:f5:73:bc:a9:8d:79:2d:18:
                    90:ea:c8:27:37:17:66:a7:25:d5:89:c0:aa:0d:72:
                    58:83:a0:39:48:ca:21:6c:a8:99:8f:77:9d:a2:92:
                    5f:1d:0d:c8:8b:c3:95:b1:7e:1a:6d:24:7a:73:56:
                    9f:02:8a:cb:c1:a2:d8:7d:53:59:9b:b5:00:b5:8a:
                    eb:2c:c4:92:38:1f:75:00:0c:4d:ff:6c:bc:5e:33:
                    f3:c8:fd:3a:33:1e:a4:94:fe:f3:af:10:ea:cd:66:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:08:63:81:D7:99:45:E3:50:7B:A0:83:79:DA:50:54:53:01:F1
            X509v3 Authority Key Identifier:
                keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:a2:68:ab:2a:dd:c7:86:17:aa:4a:39:51:0e:b7:43:0a:
         b2:46:6d:4e:cc:34:cf:af:23:76:b7:85:42:82:4a:d8:35:73:
         8b:6d:6f:64:07:52:96:d9:87:03:ad:8e:19:21:23:cb:ff:02:
         f6:5f:42:f1:cc:3b:9a:19:2c:5d:07:e5:ef:ef:cf:23:2f:e3:
         01:42:e5:82:71:86:3b:a6:f8:a1:95:4f:97:dc:8a:35:30:cd:
         52:09:b6:6b:76:3f:2d:77:cc:65:94:8b:d9:13:54:db:ee:61:
         71:04:03:ed:cf:cc:8b:8f:28:87:d2:1a:27:07:ef:17:3d:27:
         1d:38:14:0d:5e:6f:cf:25:72:37:a9:f9:07:21:1d:56:43:0c:
         3a:49:18:8e:6e:2a:0f:1e:2f:a0:4b:b8:c5:8b:fa:bb:4b:e1:
         0a:f2:df:79:59:f2:37:09:fd:5c:34:a1:da:18:a4:f4:84:53:
         42:21:72:29:d3:18:c6:98:81:86:18:e8:71:6e:34:12:85:b7:
         f1:e3:be:3c:07:07:5d:12:c6:d2:a1:14:cb:11:fa:8a:9d:06:
         ae:31:cc:33:3c:52:34:12:73:2d:17:3e:2e:3e:8d:66:fb:19:
         4e:84:de:92:a6:87:bb:94:b6:0e:b0:6a:f2:56:08:fb:c5:39:
         1a:50:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:33 2026 by rpki-client