Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File:                     IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier:          xZRTgn26r7BDhgceha2qkEgni+OlvNTHehKtEe55Ltg=
Subject key identifier:   72:88:E7:4B:E0:E1:79:CA:FB:11:C5:79:23:1F:FA:7D:CE:4D:7F:61
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer:       /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number:          073F
Signing time:             Wed 20 May 2026 21:48:47 +0000
Manifest this update:     Wed 20 May 2026 21:48:46 +0000
Manifest next update:     Wed 27 May 2026 21:48:46 +0000
Files and hashes:         1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: B6kWfYC/Kpg0jIeW6tXO8ilqoa1kVAgIwbjoqvr9S2A=)
                          2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: kjgnZeVn+N324KHyf3fGO9g9YrF9YolyFM7PZ06SKLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
                          rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
        Validity
            Not Before: May 20 21:48:46 2026 GMT
            Not After : May 27 21:48:46 2026 GMT
        Subject: CN=6a0e2c3e-8603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:92:97:d5:3b:1c:de:38:86:58:a0:85:12:
                    af:e5:ff:54:84:b0:54:8d:93:cd:3c:7f:23:a6:f0:
                    d4:6d:3c:fb:f5:f7:4a:21:cd:f4:28:8c:62:87:ab:
                    ec:e4:aa:07:4b:67:e5:bf:ec:c7:20:e0:27:6b:3c:
                    6d:0b:dc:86:e5:3c:7e:65:ec:0e:54:40:f7:01:e1:
                    49:7a:0c:88:57:b4:59:c2:b6:a0:f6:80:92:a6:f0:
                    9e:4b:3d:5b:7d:94:79:b7:f6:6f:c0:39:41:2d:ad:
                    29:42:45:3e:5e:8b:ae:8f:e6:3a:2d:a9:07:72:72:
                    c0:fc:02:45:7b:cb:a6:cd:d9:65:2b:c7:68:45:cb:
                    22:b9:76:b3:3b:53:3f:ae:3f:3d:53:76:04:f8:a3:
                    2f:e9:fe:3f:49:da:d3:54:1a:a2:49:53:95:34:a0:
                    21:98:42:7d:3a:27:14:c7:ee:a6:0e:3f:ff:ae:67:
                    02:6a:f0:79:c3:77:0d:4e:ff:5b:37:fd:06:ab:18:
                    4a:68:6f:94:bd:4f:6a:6f:d9:ff:e2:f6:0e:01:d2:
                    f3:5d:85:22:83:7b:1c:02:1e:e6:b1:d0:32:50:c1:
                    b3:0e:a9:3d:63:39:74:d1:f5:80:7e:3f:12:78:88:
                    91:4c:21:71:93:2a:de:37:a5:48:36:c8:c3:4c:21:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:88:E7:4B:E0:E1:79:CA:FB:11:C5:79:23:1F:FA:7D:CE:4D:7F:61
            X509v3 Authority Key Identifier:
                keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:a1:f0:e4:ac:67:7b:1f:bf:2d:51:46:33:75:ce:4f:e9:
         32:90:5f:bb:bf:aa:0e:07:d1:49:a5:ad:7e:94:5f:c4:fe:36:
         5c:f0:dd:9e:52:4b:47:50:2c:35:e4:0e:c2:b4:99:40:58:d4:
         2b:92:87:7d:d6:f3:56:06:3c:dd:ad:7a:26:df:35:5d:30:68:
         3f:00:30:23:7b:6c:e3:d6:a9:1f:11:65:49:6b:85:55:4a:0b:
         65:fc:25:a7:3e:c3:04:69:eb:1c:2a:86:eb:f1:b1:37:ff:62:
         ac:26:96:ef:ef:e0:90:7c:4f:1c:b7:e6:b7:ad:da:77:f5:50:
         74:f4:a3:34:68:fd:62:65:52:46:25:af:e9:1e:a3:c3:e2:2c:
         16:5d:17:9c:74:7a:d0:3e:ad:06:65:34:21:b6:13:56:fc:b4:
         db:66:7b:fc:2a:d9:75:f2:da:1e:97:cf:93:d5:e1:7f:b3:75:
         64:18:69:48:94:75:89:35:68:f8:4b:33:94:f6:7c:88:04:27:
         0c:36:ee:fe:c1:6b:40:15:85:ac:cd:f6:4b:89:e4:d2:2d:6e:
         59:ab:be:39:43:91:d4:89:e6:0e:d3:e7:0a:3c:12:72:d4:5b:
         b6:83:4b:20:fb:b3:c9:2f:8b:12:a1:69:d1:be:52:05:48:d9:
         db:93:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:35 2026 by rpki-client