Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File:                     ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier:          Zuo0XyvJccfmzKWAPNBkLFZN5ZilYyoeJf+/tsO/Yns=
Subject key identifier:   B3:00:D6:8D:2C:1E:4B:30:BE:B8:85:05:CC:08:11:B7:DE:D5:6A:53
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer:       /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number:          53
Signing time:             Sun 23 Aug 2026 07:56:52 +0000
Manifest this update:     Sun 23 Aug 2026 07:56:51 +0000
Manifest next update:     Sun 30 Aug 2026 07:56:51 +0000
Files and hashes:         1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: /7WN3gdTFejfNzXm8Ob3UXYkAHlClCNu3dKuXs/QBog=)
                          2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
        Validity
            Not Before: Aug 23 07:56:51 2026 GMT
            Not After : Aug 30 07:56:51 2026 GMT
        Subject: CN=6a8aa7c3-f055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:88:e4:bc:96:5e:07:10:a8:f8:29:bc:f8:
                    6e:8d:d4:8d:62:d4:8d:a0:2f:fa:63:7a:28:6f:34:
                    c5:f4:3e:47:4f:0c:65:9b:fa:44:2c:ee:ac:2e:ca:
                    8f:59:46:e5:c1:b0:ce:17:5c:ee:ca:b7:9c:7b:da:
                    0c:2c:0a:cc:bc:8d:e5:35:d9:8d:8d:b3:48:b9:01:
                    8f:81:24:03:62:94:0b:ec:d2:7c:f3:04:06:32:f6:
                    c7:72:0d:60:54:38:41:13:f5:a5:e5:85:1a:7f:7f:
                    3e:f6:0c:a1:aa:7b:83:46:ce:3c:9e:8c:24:76:aa:
                    7e:ff:1d:27:27:95:7a:d1:4a:5f:2a:c2:aa:96:80:
                    60:06:50:32:c0:bd:08:ae:22:6c:c6:66:57:10:94:
                    37:f0:79:3e:8c:77:ff:fb:1e:d9:b7:19:d9:31:fe:
                    a4:b7:63:4f:95:36:34:6e:4a:7b:f6:2a:19:a6:2a:
                    fa:56:e6:85:f5:e2:bd:2c:b1:13:6a:52:e4:22:ee:
                    ef:12:2b:06:b7:91:42:65:26:98:b2:fa:84:5f:70:
                    a4:ef:b6:55:6f:65:c9:2d:86:ac:d3:6f:78:eb:e6:
                    e7:28:84:7e:c3:43:5a:ca:05:d9:7b:0a:f2:69:bf:
                    31:59:50:47:cc:70:f7:2a:38:84:21:99:2d:85:6b:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:D6:8D:2C:1E:4B:30:BE:B8:85:05:CC:08:11:B7:DE:D5:6A:53
            X509v3 Authority Key Identifier:
                keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:9a:5b:63:12:ba:48:27:ac:d7:c8:23:d1:1f:82:50:52:
         bb:b2:33:c6:f6:b5:29:00:04:64:22:37:e8:7c:da:67:62:29:
         8a:47:64:fc:47:85:89:20:3a:de:0e:7d:08:7c:7e:38:11:0a:
         34:b5:3e:ae:54:32:47:ec:2d:79:d4:04:b4:0a:38:fc:12:af:
         91:b5:b9:f2:61:3e:eb:be:ee:8b:43:21:f9:a5:3f:c3:35:2a:
         ed:2c:2f:75:48:92:3d:63:8b:6a:16:e4:3b:5f:00:8e:b0:2e:
         fc:e8:e4:68:36:74:92:5e:a5:6c:9b:26:9d:13:b8:22:b8:d9:
         2d:d2:03:f2:30:ea:1a:81:ec:d9:0f:a9:a4:d1:b2:7d:75:3e:
         99:88:3c:a5:fb:b0:9a:3a:c2:60:2c:cb:dd:1f:6d:19:bc:00:
         cb:37:bb:b0:72:74:8c:ec:19:bc:53:64:75:0a:3b:14:2f:61:
         9e:0a:ee:06:83:ba:a2:5d:43:7e:b0:ee:f0:69:8b:20:43:a7:
         c7:8b:77:46:93:2d:a5:88:03:50:25:1f:50:82:af:f0:82:60:
         25:83:d1:8f:b0:af:70:bd:07:e4:28:18:da:7a:8d:1f:64:03:
         a6:e2:71:3d:3d:41:97:15:4f:59:be:60:31:db:22:22:f2:fd:
         d0:f2:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:55:39 2026 by rpki-client