Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
File:                     ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json)
Hash identifier:          nmJDU7QWh/5JBrNCUmkUsTpIk933dzj4AjZlOf9nZOE=
Subject key identifier:   87:77:0D:43:CB:BF:2A:ED:2E:EB:66:A6:E1:DA:0C:43:15:65:83:78
Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD
Certificate issuer:       /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
Manifest number:          81
Signing time:             Sat 13 Jun 2026 07:41:14 +0000
Manifest this update:     Sat 13 Jun 2026 07:41:13 +0000
Manifest next update:     Sat 20 Jun 2026 07:41:13 +0000
Files and hashes:         1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: yNfKVQHVfx56+zSRHIcI+WPVimNCiWg+RrJm6yYIoz4=)
                          2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: r2L+5zqyZ6IXeM2mIQAiI2PNwo+tejqOC0YJpkywEYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl
                          rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD
        Validity
            Not Before: Jun 13 07:41:13 2026 GMT
            Not After : Jun 20 07:41:13 2026 GMT
        Subject: CN=6a2d099a-4995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:9b:67:8c:e9:86:0e:d7:61:07:7d:16:f2:
                    d6:ca:87:07:5d:64:11:93:66:04:51:89:c2:1c:60:
                    e8:60:e3:33:a7:40:8a:c0:ff:77:70:4b:cd:cc:e9:
                    e1:79:1f:ab:76:a6:25:fd:0a:78:d1:a6:67:a7:6b:
                    75:b1:74:98:1e:20:39:b8:49:9b:85:42:cf:0f:3e:
                    b3:9c:02:e4:26:e5:d8:f3:e1:71:f4:32:fa:a3:01:
                    1c:2f:e9:99:99:a5:36:f5:a5:b5:70:ab:6d:8e:68:
                    37:e3:97:c9:b0:aa:aa:d0:59:bd:dd:cf:05:eb:f1:
                    c9:83:f7:10:3e:4b:d7:5f:23:ab:0d:bb:da:a5:a8:
                    06:6d:46:5b:70:54:b1:7c:58:5f:f7:a5:fe:f3:ea:
                    a5:b0:b2:13:df:2b:dc:f9:d3:bd:84:a7:6a:f5:15:
                    3e:06:4d:56:35:25:b0:94:be:e3:50:04:c2:4e:71:
                    ca:ae:d5:61:e9:69:f2:1a:29:0f:28:82:c2:3a:08:
                    41:71:82:d7:de:f5:11:5a:32:6b:12:67:c6:31:73:
                    c5:23:0e:aa:d4:75:e0:1c:89:8e:87:56:cc:83:41:
                    87:a0:5c:98:05:65:e7:f6:3e:86:c8:dd:96:fa:c5:
                    b4:b9:40:e3:0e:94:a5:8a:59:39:ac:8b:d7:6c:a1:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:0D:43:CB:BF:2A:ED:2E:EB:66:A6:E1:DA:0C:43:15:65:83:78
            X509v3 Authority Key Identifier:
                keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:46:c0:fe:16:ce:3c:45:c3:2b:a3:a5:48:28:0b:59:e2:12:
         3f:2e:84:b9:d8:ba:9e:75:44:a4:75:59:76:91:19:7e:dd:80:
         97:b1:52:3e:51:18:4c:0f:15:b3:08:d9:42:25:2e:44:ca:1a:
         d6:cd:a7:7b:20:d3:32:56:66:eb:98:1f:85:c0:81:d0:99:29:
         7e:38:ab:49:ae:ab:66:05:04:52:ba:04:2f:03:12:0c:3b:2d:
         fa:87:8b:af:29:7b:b2:25:4c:6f:1b:8b:ec:48:50:c8:97:6d:
         d7:b1:67:58:87:e3:ab:6a:1a:f8:27:f9:56:67:27:46:d6:95:
         c8:80:95:c2:f1:f8:01:9a:d3:37:a6:65:b9:65:2b:c9:94:c0:
         fd:2c:5d:49:00:92:5f:7d:ed:49:e4:bb:ee:82:5b:e6:d8:1a:
         5d:03:ec:9d:d5:ef:dc:90:5a:b7:4b:a7:90:88:3f:54:05:4d:
         09:cd:67:50:4d:c2:c8:51:8c:b5:f1:2e:a9:d5:b5:a0:13:92:
         6f:91:2c:77:8b:56:7e:9e:6d:75:f2:38:d9:88:7a:63:da:8e:
         22:cf:cd:29:98:d9:a4:b9:00:ca:aa:06:17:9f:4b:09:33:7e:
         6e:bb:48:db:a2:8f:7b:c3:05:75:8a:af:b4:1b:eb:20:ca:2b:
         2a:12:19:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQyNUUxMTAvBgNVBAUTKDg5QkE5MENCN0Q0NDJBODM4N0M2QUI5MzA3MzhDQTIw
MEUxMzdCQUQwHhcNMjYwNjEzMDc0MTEzWhcNMjYwNjIwMDc0MTEzWjAYMRYwFAYD
VQQDEw02YTJkMDk5YS00OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkl2bZ4zphg7XYQd9FvLWyocHXWQRk2YEUYnCHGDoYOMzp0CKwP93cEvNzOnh
eR+rdqYl/Qp40aZnp2t1sXSYHiA5uEmbhULPDz6znALkJuXY8+Fx9DL6owEcL+mZ
maU29aW1cKttjmg345fJsKqq0Fm93c8F6/HJg/cQPkvXXyOrDbvapagGbUZbcFSx
fFhf96X+8+qlsLIT3yvc+dO9hKdq9RU+Bk1WNSWwlL7jUATCTnHKrtVh6WnyGikP
KILCOghBcYLX3vURWjJrEmfGMXPFIw6q1HXgHImOh1bMg0GHoFyYBWXn9j6GyN2W
+sW0uUDjDpSlilk5rIvXbKHghwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFId3DUPL
vyrtLutmpuHaDEMVZYN4MB8GA1UdIwQYMBaAFIm6kMt9RCqDh8arkwc4yiAOE3ut
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI1RS8zNTVCRUM4NkEy
N0IxMUYwOTgwRkQwNEFDNEY5QUUwMi9pYnFReTMxRUtvT0h4cXVUQnpqS0lBNFRl
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDI1RS8zNTVCRUM4NkEyN0IxMUYwOTgwRkQwNEFDNEY5QUUwMi9pYnFReTMxRUtv
T0h4cXVUQnpqS0lBNFRlNjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIUbA/hbOPEXDK6OlSCgLWeISPy6Eudi6nnVEpHVZdpEZft2Al7FSPlEYTA8V
swjZQiUuRMoa1s2neyDTMlZm65gfhcCB0JkpfjirSa6rZgUEUroELwMSDDst+oeL
ryl7siVMbxuL7EhQyJdt17FnWIfjq2oa+Cf5VmcnRtaVyICVwvH4AZrTN6ZluWUr
yZTA/SxdSQCSX33tSeS77oJb5tgaXQPsndXv3JBat0unkIg/VAVNCc1nUE3CyFGM
tfEuqdW1oBOSb5Esd4tWfp5tdfI42Yh6Y9qOIs/NKZjZpLkAyqoGF59LCTN+brtI
26KPe8MFdYqvtBvrIMorKhIZDA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:05 2026 by rpki-client