Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File:                     ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier:          VqW5Ubgm4d7MQd1X5s2V4tUiwE4iRfk52COGPPik8Z4=
Subject key identifier:   C7:D3:28:75:8E:FB:66:E3:8F:2A:7D:02:22:C6:66:D8:9F:6D:67:68
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer:       /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number:          01AF
Signing time:             Sat 13 Jun 2026 04:04:02 +0000
Manifest this update:     Sat 13 Jun 2026 04:04:01 +0000
Manifest next update:     Sat 20 Jun 2026 04:04:01 +0000
Files and hashes:         1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: et5ZBQX1qiqcaPwbh8eU5ZSM/hPKfUeMGxO9h4Ob32s=)
                          2: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=)
                          3: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
                          rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
        Validity
            Not Before: Jun 13 04:04:01 2026 GMT
            Not After : Jun 20 04:04:01 2026 GMT
        Subject: CN=6a2cd6b2-cb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:73:ee:3f:94:0c:d8:b3:0d:06:f0:65:da:
                    1c:98:ef:d2:15:c9:e9:23:2f:89:ad:53:78:e8:0a:
                    2d:9d:28:44:b1:82:64:d1:b2:8e:0d:af:1a:48:66:
                    a1:8e:22:fc:8c:a3:ed:de:19:61:12:01:4e:1b:83:
                    f6:b7:3e:33:73:32:e5:e0:19:d3:30:26:54:87:2a:
                    ae:e9:24:12:31:45:99:6e:98:7a:b9:11:ed:fa:33:
                    a6:84:99:6e:a3:ef:c8:17:53:69:bb:b7:f9:3d:ac:
                    d4:6b:08:d0:22:c6:d7:77:9b:8a:57:22:91:29:dc:
                    ff:8f:b2:59:53:42:86:3c:36:4a:51:f2:68:2a:fc:
                    93:2b:43:24:3c:39:28:10:e6:93:fa:85:73:70:94:
                    64:68:09:6d:3c:9c:20:36:14:76:0a:a5:35:19:b6:
                    d3:5d:96:99:39:1c:ae:58:f8:0e:e0:58:03:b3:de:
                    97:1d:dc:0d:fb:13:e7:f3:1c:a5:1a:06:76:b8:7c:
                    68:94:18:d9:9f:35:76:c4:1e:f3:d7:cf:e7:12:50:
                    3f:3b:5f:89:99:d0:a1:9e:06:eb:df:39:60:87:1e:
                    98:e9:5e:73:90:79:51:30:e2:49:70:42:f0:8e:ca:
                    92:bb:1a:74:37:4c:c0:0e:c8:44:2d:f8:73:bc:a2:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D3:28:75:8E:FB:66:E3:8F:2A:7D:02:22:C6:66:D8:9F:6D:67:68
            X509v3 Authority Key Identifier:
                keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:ba:24:f2:68:a1:52:41:07:20:97:d4:ba:3c:69:ed:fb:
         d3:a2:f7:ff:a2:60:00:e3:5f:09:58:99:b5:7f:55:86:26:de:
         5c:f6:9e:9c:3d:b1:41:70:6b:86:66:0c:1c:58:79:7f:12:08:
         01:e8:a8:50:5a:70:e1:94:76:e4:12:07:65:24:26:94:5e:e1:
         02:f6:90:87:7f:9a:96:8c:3e:b0:26:84:58:7e:f7:4b:7a:82:
         da:cb:b4:df:5c:24:2d:5b:ee:e4:dd:7e:fb:0f:5e:f0:21:34:
         7d:86:68:ac:37:04:ea:3e:2c:83:51:c8:cf:8b:16:66:e7:4b:
         60:d8:31:37:ce:3b:23:ea:bf:3e:3e:70:42:cf:2c:23:de:68:
         ff:41:36:91:07:fa:3f:b5:bc:45:b9:b3:22:14:35:22:31:01:
         8c:a9:cc:d0:4a:b5:4a:fb:40:a9:aa:91:22:f7:86:02:f4:e3:
         58:66:05:60:ce:14:58:05:80:96:ea:bc:4a:1c:c9:12:1d:9f:
         29:54:c5:b5:0e:35:ea:89:9f:82:b2:77:aa:8f:3a:cc:33:d7:
         ea:51:38:c8:cf:fc:d3:b7:a8:cc:d3:a0:62:d8:09:d7:8d:c3:
         e7:3b:15:9b:3d:39:1d:c3:5f:02:3d:e2:50:7e:0f:70:9e:83:
         df:ee:60:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3
RDJBREI0REUwHhcNMjYwNjEzMDQwNDAxWhcNMjYwNjIwMDQwNDAxWjAYMRYwFAYD
VQQDEw02YTJjZDZiMi1jYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmDRz7j+UDNizDQbwZdocmO/SFcnpIy+JrVN46AotnShEsYJk0bKODa8aSGah
jiL8jKPt3hlhEgFOG4P2tz4zczLl4BnTMCZUhyqu6SQSMUWZbph6uRHt+jOmhJlu
o+/IF1Npu7f5PazUawjQIsbXd5uKVyKRKdz/j7JZU0KGPDZKUfJoKvyTK0MkPDko
EOaT+oVzcJRkaAltPJwgNhR2CqU1GbbTXZaZORyuWPgO4FgDs96XHdwN+xPn8xyl
GgZ2uHxolBjZnzV2xB7z18/nElA/O1+JmdChngbr3zlghx6Y6V5zkHlRMOJJcELw
jsqSuxp0N0zADshELfhzvKK+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfTKHWO
+2bjjyp9AiLGZtifbWdoMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1
QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt
d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnuK6JPJooVJBByCX1Lo8ae3706L3/6JgAONfCViZtX9VhibeXPaenD2xQXBr
hmYMHFh5fxIIAeioUFpw4ZR25BIHZSQmlF7hAvaQh3+alow+sCaEWH73S3qC2su0
31wkLVvu5N1++w9e8CE0fYZorDcE6j4sg1HIz4sWZudLYNgxN847I+q/Pj5wQs8s
I95o/0E2kQf6P7W8RbmzIhQ1IjEBjKnM0Eq1SvtAqaqRIveGAvTjWGYFYM4UWAWA
luq8ShzJEh2fKVTFtQ416omfgrJ3qo86zDPX6lE4yM/807eozNOgYtgJ143D5zsV
mz05HcNfAj3iUH4PcJ6D3+5g5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:42 2026 by rpki-client