Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
File:                     iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json)
Hash identifier:          cbDh/zsEFkM03NhsQ8QwMUWmIuPA4CcI3horE+YG5h8=
Subject key identifier:   34:BD:F1:08:CC:6B:E0:C1:3D:25:C0:AA:CF:66:76:AF:7A:7F:32:F6
Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1
Certificate issuer:       /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
Certificate serial:       06ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
Manifest number:          06E5
Signing time:             Thu 16 Apr 2026 22:05:34 +0000
Manifest this update:     Thu 16 Apr 2026 22:05:33 +0000
Manifest next update:     Thu 23 Apr 2026 22:05:33 +0000
Files and hashes:         1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: qusfKDJ/jEncWKb0ihKYoekCksGYoR8tyvzwUbTYaUo=)
                          2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: kAiJ+qt1b9uLv28IHarV5SgEnVjfBFg87tLbajTu+3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
        Validity
            Not Before: Apr 16 22:05:33 2026 GMT
            Not After : Apr 23 22:05:33 2026 GMT
        Subject: CN=69e15d2e-441b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:dd:54:b9:3e:b3:42:2f:48:72:d1:7a:43:
                    e5:62:81:c2:91:ae:c8:b9:d4:c8:51:2b:33:9f:3f:
                    90:0f:fe:87:21:21:86:df:9e:92:86:19:f1:06:0d:
                    4a:40:18:09:2b:4c:c4:d0:5c:a4:52:5b:c8:e0:f3:
                    8f:d9:74:bd:78:23:ae:6e:cb:be:f8:e8:52:63:ee:
                    f1:b8:a3:d0:41:b2:e4:08:4b:79:c1:68:2d:c5:c6:
                    02:57:f4:02:ab:69:af:56:18:48:b5:ff:8b:10:e0:
                    cf:cc:06:23:7a:80:72:8c:98:9d:ae:44:4c:0e:46:
                    e5:53:b5:6b:d0:34:e4:ac:fb:72:8b:f3:9d:4b:84:
                    a0:d7:87:e4:a4:60:b7:c1:6e:08:98:cf:77:14:02:
                    d2:9d:1d:39:18:16:d4:b4:d9:59:cd:18:fb:4c:59:
                    14:d3:31:06:75:84:1a:2c:5a:04:4c:88:e9:51:a9:
                    15:b7:37:f9:6c:01:93:0b:a7:eb:71:7e:c8:ad:f8:
                    f4:ee:ef:30:d2:b0:fd:de:0e:ad:41:f7:12:b6:36:
                    c5:f1:fe:1a:92:e9:a1:71:2b:52:06:15:9d:25:10:
                    3a:86:5d:6e:b7:8b:a9:f6:63:31:65:87:a0:2a:40:
                    52:c9:b7:80:60:de:4a:73:bc:20:19:5e:38:83:7d:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BD:F1:08:CC:6B:E0:C1:3D:25:C0:AA:CF:66:76:AF:7A:7F:32:F6
            X509v3 Authority Key Identifier:
                keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:8c:92:d1:8e:81:8d:01:5f:86:d1:a5:6f:ce:8d:02:3d:
         59:d3:ac:6e:bc:55:ef:9e:28:01:23:28:86:44:b3:eb:cd:79:
         aa:e1:f7:c4:bd:a4:56:37:c0:61:85:11:54:70:e5:f0:cb:7b:
         81:ee:57:dd:0e:0a:69:d8:b9:f8:de:13:a5:20:4c:9e:25:87:
         17:e8:8c:37:c5:8f:b1:90:34:c8:3a:ae:26:14:28:65:0a:8b:
         77:2e:73:9f:b4:da:55:0c:10:9e:4b:00:47:fc:ba:7f:1f:56:
         7d:70:6d:d7:54:a1:69:5d:a6:0f:f9:a9:4d:1b:fd:fe:43:02:
         54:03:f9:02:26:4f:96:0a:a2:0e:0d:85:a6:a8:77:35:f6:05:
         9d:b5:a0:02:7b:db:a3:2c:0f:1d:a3:54:5d:58:fd:05:e1:dd:
         2c:f7:fa:b4:64:43:77:52:f6:9d:60:b1:41:c2:85:7e:da:c8:
         ee:5b:b9:2a:a7:52:2d:b7:2f:fa:9d:cc:2d:1d:1d:4d:86:93:
         0b:78:04:54:c2:be:60:f6:61:35:0f:43:94:5a:02:2d:57:e6:
         5f:2c:a5:77:44:13:f3:9c:9c:9b:6d:0d:4d:67:77:63:7f:6c:
         2b:64:19:75:87:f9:24:f1:13:ac:d8:ff:ce:12:75:37:1c:26:
         56:2b:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:38 2026 by rpki-client