Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File:                     iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier:          ghTLXvpR4mHmh6aNU3M5kT7vRQk/N4O7FFXOrpD0Ljw=
Subject key identifier:   56:E8:B1:E5:0B:62:10:5D:3A:67:0F:96:8A:C3:31:ED:6D:32:C4:1F
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer:       /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number:          05D5
Signing time:             Sat 04 Apr 2026 22:47:43 +0000
Manifest this update:     Sat 04 Apr 2026 22:47:42 +0000
Manifest next update:     Sat 11 Apr 2026 22:47:42 +0000
Files and hashes:         1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: ZXmMnlrEYWQkpmGyP9gloC6rtBQyLkh3+arTogCq73k=)
                          2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: d8MrH6JxdvkZ8bmYCUsbjAAgnFmtKv67lKs9/PuVhBs=)
                          3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: A+KmJdUugPsA3jAkxWcxLu/k5vPqJeyn3ew/1Ms3MTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
                          rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
        Validity
            Not Before: Apr  4 22:47:42 2026 GMT
            Not After : Apr 11 22:47:42 2026 GMT
        Subject: CN=69d1950f-9a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:79:82:78:72:11:c6:62:d1:7f:4e:b0:e9:
                    3b:17:b7:fd:f2:b6:8b:bd:dd:97:66:d3:99:42:78:
                    26:0a:c8:a2:97:d3:14:a0:8e:92:93:9a:bf:4e:d6:
                    73:70:30:9b:50:2f:3e:62:b9:8d:08:61:45:78:1b:
                    9b:50:06:6e:d4:d1:be:30:8c:6d:e4:ae:5f:ad:97:
                    0f:3d:ee:c7:4a:3c:15:bf:2d:0c:cc:02:32:f4:38:
                    ed:a7:9c:0e:3e:65:3a:52:25:c7:ac:c4:90:42:ce:
                    f4:d4:79:8d:6f:a0:35:be:4b:e0:a9:2a:65:ab:da:
                    06:f0:8d:4b:1a:c2:e5:4b:e6:48:54:03:6c:07:2d:
                    bc:10:e4:5f:60:ec:de:55:bf:b8:71:a0:7e:fe:b3:
                    0b:6b:10:6d:db:71:c0:9d:b4:40:6f:e3:01:49:a9:
                    ba:e9:eb:85:fa:ba:99:1f:b1:26:c7:6d:42:95:f4:
                    19:e7:a7:66:3c:c9:a0:96:c5:78:72:8e:17:68:10:
                    63:64:2a:78:5e:0e:1d:ec:5c:16:b7:47:31:58:14:
                    38:98:c6:2d:f4:ac:46:c8:e9:59:32:0c:ae:de:57:
                    28:0c:96:ef:f0:2f:54:39:6e:59:d3:8f:28:97:90:
                    7b:f3:b4:48:6f:68:12:1d:49:a0:fb:21:e3:ef:d6:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E8:B1:E5:0B:62:10:5D:3A:67:0F:96:8A:C3:31:ED:6D:32:C4:1F
            X509v3 Authority Key Identifier:
                keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:09:4f:e7:04:1a:39:79:0c:7f:59:14:06:2b:0f:55:43:96:
         5b:ea:b4:e9:8a:6a:f9:dd:cd:31:b9:e8:c2:84:bc:ae:3a:82:
         8a:44:36:5a:a2:dc:85:13:b4:a4:7d:fd:71:ec:b1:1e:5f:08:
         a8:0e:94:23:42:c4:15:61:80:56:62:f2:af:35:cc:0d:79:96:
         e9:73:21:7a:71:3a:20:31:42:f5:bf:62:12:06:3d:3e:29:67:
         e9:4e:6b:90:3d:c8:86:db:91:6f:5e:09:f2:f5:fb:a1:4a:47:
         68:c8:9f:46:19:bc:18:52:be:f3:18:4b:d1:ab:31:67:74:3e:
         65:c7:0b:a8:d2:27:8b:02:b7:fd:4d:a9:88:ef:ad:10:57:94:
         88:5e:40:63:ae:d9:24:0b:f4:3f:9b:91:db:52:a8:ce:35:95:
         d5:32:22:c8:e7:c9:21:e8:6b:75:33:a0:88:62:29:22:58:73:
         f5:60:ee:ad:be:39:6d:fa:e2:66:98:5a:dc:9d:32:2d:58:27:
         10:29:ee:fd:b9:37:a5:fa:67:50:ce:2d:73:fa:a7:8d:64:5c:
         4e:55:32:f0:3e:3b:70:57:47:a4:a7:4d:38:85:72:c6:46:58:
         27:bf:51:6c:fb:e6:1d:29:f4:cd:61:63:2f:27:96:9a:90:aa:
         8a:8f:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:28 2026 by rpki-client