Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File:                     ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier:          AZBPS7LLfA9oLBXc/mySxprNi5O4MEjpXC4Q/F+dJug=
Subject key identifier:   C6:CF:F9:3B:AC:17:31:74:CE:BE:6F:62:7D:2D:F9:B4:B8:74:0A:3F
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer:       /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number:          CD
Signing time:             Sun 31 May 2026 20:20:46 +0000
Manifest this update:     Sun 31 May 2026 20:20:46 +0000
Manifest next update:     Sun 07 Jun 2026 20:20:46 +0000
Files and hashes:         1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: lo+tW6Fjy8zlnCym4Z3K6xpyS4q+M/3m0hVvl+7jDSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 20:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
        Validity
            Not Before: May 31 20:20:46 2026 GMT
            Not After : Jun  7 20:20:46 2026 GMT
        Subject: CN=6a1c981e-d969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:66:3f:74:aa:56:f6:84:13:96:94:64:5d:
                    cf:4f:82:64:1d:e2:fb:e3:e6:b6:2e:4d:a8:94:ca:
                    66:c9:c9:87:66:e2:35:11:ff:95:63:51:28:2f:06:
                    c2:2b:3a:6f:14:97:54:c1:de:80:76:b5:3b:d5:0d:
                    97:93:fd:30:eb:ff:90:c4:f3:ba:58:82:de:e2:4e:
                    9a:44:51:69:c8:34:3f:1c:d6:6f:e9:91:47:dd:4a:
                    d7:20:ee:66:e4:1d:f8:7c:64:15:5d:b2:e8:9b:86:
                    d0:b9:a5:df:8b:d7:df:d4:50:b7:19:99:2d:b7:5d:
                    d3:30:50:d0:9d:96:e2:61:f9:fa:d5:5b:e5:d2:fb:
                    93:21:24:d2:c8:26:4f:cb:81:95:21:54:64:c9:c6:
                    20:6f:e3:83:08:bb:2c:d0:6b:46:c8:52:60:32:e0:
                    95:62:da:dc:ee:2a:70:59:a3:3f:47:7b:cb:23:5d:
                    20:7d:a0:02:6d:0b:f6:5f:43:27:38:0d:1c:6e:8f:
                    65:0e:60:81:fd:2c:9c:76:db:93:89:44:5a:51:07:
                    86:09:c5:2e:39:d2:0b:49:b8:27:86:4d:38:37:db:
                    0e:8a:dd:8a:99:25:af:93:d4:f6:8c:cb:f4:c9:4b:
                    9c:ee:11:ad:c6:8d:d3:f0:cc:a4:6a:dc:f2:5a:5a:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:F9:3B:AC:17:31:74:CE:BE:6F:62:7D:2D:F9:B4:B8:74:0A:3F
            X509v3 Authority Key Identifier:
                keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:af:e2:4b:5c:86:0d:4e:e7:75:27:71:1b:5f:fe:3e:d5:b5:
         c8:7d:b7:11:4f:b5:9a:0f:3c:42:50:10:e5:7e:2a:39:e7:33:
         02:3e:3b:60:00:03:ad:e0:89:f5:fd:c3:5e:92:3e:bd:f9:23:
         29:81:60:36:5a:3e:8e:84:83:55:61:cf:af:3d:51:1a:75:06:
         c3:1d:03:67:dd:1f:77:6b:40:8b:8d:56:41:30:68:9b:c4:55:
         63:7a:6f:1f:96:14:df:fb:85:94:fa:2a:2d:e1:ec:9f:15:e6:
         59:97:4c:45:93:5a:38:0b:3d:99:df:30:46:18:1e:8d:f9:91:
         1e:01:05:1d:fa:94:97:bd:30:68:4b:8b:be:df:ae:6d:0b:6e:
         db:3d:66:d0:f8:15:60:2a:b5:5d:cf:55:dd:bd:ff:df:7c:53:
         92:3e:97:fe:18:d3:4f:05:d3:48:8e:19:7d:c8:e0:c9:74:27:
         98:a4:78:95:43:57:03:d5:86:e1:66:76:a6:44:c1:e8:4e:e9:
         79:a8:67:23:81:dd:34:33:4d:9d:26:f1:fe:f0:68:fa:7b:15:
         0f:08:5b:10:8c:75:a0:8c:d4:34:88:48:c1:18:62:d2:b7:7f:
         b1:2e:01:28:c1:37:3a:bd:69:a3:1f:5b:e4:fa:36:01:9f:80:
         d6:8d:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:45 2026 by rpki-client