Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          4h8QmCh7ll+NqXoIYw9/7tLU1iwnm5R1oXjOnV0mylE=
Subject key identifier:   3C:29:AD:3E:7E:68:79:70:77:F1:25:CF:67:75:13:8E:E7:D5:7C:22
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       1946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          18FB
Signing time:             Wed 20 May 2026 16:27:56 +0000
Manifest this update:     Wed 20 May 2026 16:27:55 +0000
Manifest next update:     Wed 27 May 2026 16:27:55 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: MjcHWEJDAhGXbENT8CqWF5DZdhLjx5m+Yj+Ag1Gov4c=)
                          2: 6E7091EC4F7E11F1B4DF150FCE833773.roa (hash: 0MG67aBScsg4nE8gajlEe8w7/C8r9nokYZHAIWdxuSk=)
                          3: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: DTA9mxmgUMp5dN7zA4nVO7JGbSY6mzRAlz02SBccYEA=)
                          4: 0274EDA84F7E11F1BF198B9FCD833773.roa (hash: 2b1uQMF4FwcVSTC/yqeg7TBJVN4RXUpB0rp+hLS1BIw=)
                          5: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: lCIe/jXkg4rN1KsDsytQ0JDHRzjYIhUkGHJLYrtlAfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6470 (0x1946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: May 20 16:27:55 2026 GMT
            Not After : May 27 16:27:55 2026 GMT
        Subject: CN=6a0de10c-69d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:04:c0:83:68:be:78:d9:7a:01:7e:1a:80:
                    c4:5c:2c:aa:04:2a:97:80:f1:84:6b:c7:4a:70:f1:
                    9d:98:de:10:75:cb:2c:63:4d:2b:9d:10:46:e5:49:
                    82:dc:0a:59:ba:71:ee:ad:d1:a8:79:39:43:27:e0:
                    31:01:12:e7:17:61:2c:fb:a6:be:eb:c8:eb:80:09:
                    53:ca:f0:4c:21:e9:80:25:0f:33:7a:f2:3f:4d:ba:
                    a7:a7:07:46:0e:0c:4d:3d:cc:18:8f:ac:86:e5:01:
                    be:16:28:3a:a8:73:95:84:28:86:92:4e:89:89:95:
                    20:8c:8a:c6:27:ee:23:f3:28:2a:58:c3:9b:7d:d5:
                    fc:d5:27:83:56:ce:7e:5f:52:b4:32:62:13:da:07:
                    39:ba:4f:8b:41:74:ae:24:2f:5d:73:49:5b:33:3e:
                    9c:21:fe:e1:98:b6:48:02:39:28:2e:10:c4:7c:99:
                    d1:14:6c:a0:2f:eb:79:c7:c0:2d:3a:6c:83:12:06:
                    e0:d5:e3:fd:e8:13:72:9e:f4:2e:74:e7:69:56:76:
                    ff:07:b3:39:26:1e:66:7d:a2:11:8b:fe:97:df:6f:
                    c3:8e:92:ff:77:06:e3:53:48:57:94:3c:4d:45:f0:
                    e5:9e:30:f1:23:43:d6:1f:a5:0d:31:de:5d:02:bf:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:29:AD:3E:7E:68:79:70:77:F1:25:CF:67:75:13:8E:E7:D5:7C:22
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:f4:26:9a:de:06:d3:64:38:82:bf:00:27:0a:b0:8a:69:
         c8:82:ca:0e:b6:0f:1f:d3:f7:5a:7b:cb:15:94:a4:20:3d:d3:
         f6:1c:34:bf:11:85:70:55:a5:9f:4a:11:7e:87:f4:13:bb:14:
         62:98:1b:08:6a:13:a9:9c:a2:23:5a:87:84:eb:63:83:cd:89:
         53:47:ac:c9:1d:8d:84:bd:bf:0b:32:eb:78:42:aa:66:6d:a0:
         0d:f1:43:5f:de:f6:f4:02:e9:8c:c4:8a:89:fc:5f:96:e5:86:
         50:25:22:0c:54:ec:b9:5e:a9:82:da:bc:65:68:f9:cb:66:f3:
         d5:aa:81:86:d2:47:05:ca:1b:c8:49:35:58:4e:d6:ea:3a:e7:
         c2:80:57:8f:75:d6:ed:38:c1:61:cb:8d:d8:02:ac:b2:ea:b3:
         fc:49:d4:01:66:6b:97:3c:41:54:82:dc:48:40:7b:2a:a7:24:
         03:3b:ff:86:45:39:e7:a8:a5:c4:dc:b5:e4:69:a0:c0:7f:50:
         96:1f:a5:f3:d6:28:13:ae:c6:3b:e5:e6:f7:6c:c1:38:3a:0c:
         63:ca:38:3d:1f:5d:93:c3:6e:de:37:84:6c:3d:76:71:cd:c6:
         24:b5:af:39:ba:49:57:d3:30:53:ec:57:b6:94:15:ec:96:e8:
         e0:6c:e0:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx
OEZEQjVCNUUwHhcNMjYwNTIwMTYyNzU1WhcNMjYwNTI3MTYyNzU1WjAYMRYwFAYD
VQQDEw02YTBkZTEwYy02OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqswEwINovnjZegF+GoDEXCyqBCqXgPGEa8dKcPGdmN4QdcssY00rnRBG5UmC
3ApZunHurdGoeTlDJ+AxARLnF2Es+6a+68jrgAlTyvBMIemAJQ8zevI/TbqnpwdG
DgxNPcwYj6yG5QG+Fig6qHOVhCiGkk6JiZUgjIrGJ+4j8ygqWMObfdX81SeDVs5+
X1K0MmIT2gc5uk+LQXSuJC9dc0lbMz6cIf7hmLZIAjkoLhDEfJnRFGygL+t5x8At
OmyDEgbg1eP96BNynvQudOdpVnb/B7M5Jh5mfaIRi/6X32/DjpL/dwbjU0hXlDxN
RfDlnjDxI0PWH6UNMd5dAr/ZrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwprT5+
aHlwd/Elz2d1E47n1XwiMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1
QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjVCRC8zM0NCMTE3QUI1QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16
VUI0RnI2dVVFaGtZX2JXMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ9f0JpreBtNkOIK/ACcKsIppyILKDrYPH9P3WnvLFZSkID3T9hw0vxGFcFWl
n0oRfof0E7sUYpgbCGoTqZyiI1qHhOtjg82JU0esyR2NhL2/CzLreEKqZm2gDfFD
X9729ALpjMSKifxfluWGUCUiDFTsuV6pgtq8ZWj5y2bz1aqBhtJHBcobyEk1WE7W
6jrnwoBXj3XW7TjBYcuN2AKssuqz/EnUAWZrlzxBVILcSEB7KqckAzv/hkU556il
xNy15GmgwH9Qlh+l89YoE67GO+Xm92zBODoMY8o4PR9dk8Nu3jeEbD12cc3GJLWv
ObpJV9MwU+xXtpQV7Jbo4GzgkQ==
-----END CERTIFICATE-----
Generated at Thu May 21 20:55:00 2026 by rpki-client