Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File:                     IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier:          RuwF1QEYWGRcJsNqYpug0LNHyswczkeFEnTCuDGlIaU=
Subject key identifier:   46:73:64:C0:41:B5:2A:33:2E:00:97:12:F7:AD:EB:E6:C2:1F:8D:B2
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer:       /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number:          012A
Signing time:             Sat 13 Jun 2026 05:39:47 +0000
Manifest this update:     Sat 13 Jun 2026 05:39:47 +0000
Manifest next update:     Sat 20 Jun 2026 05:39:47 +0000
Files and hashes:         1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: ihKP15zn5fDinbHBHMUTG1ef+DZqf+bblcRq2/GHGb4=)
                          2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
        Validity
            Not Before: Jun 13 05:39:47 2026 GMT
            Not After : Jun 20 05:39:47 2026 GMT
        Subject: CN=6a2ced23-9fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:ec:59:f1:d2:88:07:b7:09:64:e5:9d:41:
                    6c:61:16:a5:c8:a1:ae:b0:92:bd:fd:60:02:88:85:
                    cb:f2:78:25:42:dc:b3:07:8f:1d:de:73:01:06:f0:
                    ae:81:3a:98:e7:79:c5:df:ea:c8:a8:ee:32:7b:cc:
                    cf:94:c4:a7:dd:5d:67:ed:69:ca:1a:dd:7f:df:4b:
                    f4:cf:9f:1c:bb:65:71:fe:19:1a:0e:62:7f:6f:21:
                    06:3b:05:e3:33:3c:96:bf:c5:d4:8d:13:69:33:bb:
                    b8:0a:ee:47:a2:e0:53:af:bc:dc:f2:9a:c1:f2:bb:
                    38:7c:72:82:96:3a:bd:08:be:dc:7d:20:fc:e2:2c:
                    03:f3:c3:1e:9b:36:40:52:8e:9b:5f:17:f2:eb:4a:
                    e0:63:81:fe:8d:9b:4f:b2:6d:bb:22:2c:fc:ad:bb:
                    79:a4:72:a1:01:db:60:8a:63:0c:86:5d:e1:59:1e:
                    2b:15:a0:87:68:56:f6:e8:9f:e2:18:79:27:78:db:
                    d1:93:ca:68:07:ce:10:f1:e0:f9:5d:15:c0:a4:a2:
                    14:73:08:97:64:4d:15:90:f1:ef:d3:be:83:6e:18:
                    f0:fe:6c:71:14:2d:10:09:ca:3c:5c:cc:71:27:92:
                    5f:90:c0:60:f8:bd:05:04:83:f6:cb:d4:4a:44:14:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:64:C0:41:B5:2A:33:2E:00:97:12:F7:AD:EB:E6:C2:1F:8D:B2
            X509v3 Authority Key Identifier:
                keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:7b:20:5b:e0:63:be:65:c0:31:49:50:9c:87:ee:a7:5b:
         14:3d:af:0b:8a:38:33:bb:5a:67:24:0a:d5:f9:19:46:42:85:
         b1:43:2a:5c:9c:bd:7d:aa:0b:20:a4:07:bc:10:90:e7:f9:72:
         76:dc:ef:5c:95:e0:46:6c:f9:07:ef:16:3b:90:9c:d2:ba:3d:
         ef:64:18:fb:ad:64:69:9f:9a:94:73:59:ad:65:95:f2:29:00:
         c6:71:55:96:27:08:d7:4d:f6:28:b7:59:55:35:37:7e:32:b7:
         92:f2:88:32:76:27:2f:69:94:a6:5e:7c:87:56:bd:23:26:c4:
         7c:c6:bb:d5:c7:48:bf:59:cc:27:04:99:d4:78:53:b4:95:71:
         08:9b:ff:7b:08:d5:0a:dc:9d:9a:76:50:b6:2e:c4:bb:b7:32:
         cb:2c:2e:12:2d:10:62:b4:e8:b6:88:81:d8:1c:cc:43:74:24:
         a8:1d:47:ac:65:f4:bf:5c:9b:6b:e5:9f:30:97:c9:3b:cd:49:
         7d:5e:19:41:a7:0e:ea:2f:e7:07:11:19:72:52:bf:ae:fe:a6:
         9c:f6:9f:54:06:fc:37:8a:da:28:be:24:cc:3d:66:02:15:2e:
         48:c0:54:7c:c9:b5:a6:3e:5c:e2:43:76:f7:91:9e:09:52:6d:
         b1:19:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:25 2026 by rpki-client