Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File:                     idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier:          F27bw4iNk7/zJEctv/67IAalHDve2QtQT3AKfzXftEI=
Subject key identifier:   55:D1:CC:7F:A2:BC:A2:4E:68:45:71:AA:3C:D1:E3:5C:D6:86:A8:4C
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer:       /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number:          3A
Signing time:             Fri 15 May 2026 08:43:20 +0000
Manifest this update:     Fri 15 May 2026 08:43:20 +0000
Manifest next update:     Fri 22 May 2026 08:43:20 +0000
Files and hashes:         1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: d9duuruUpQ5c+i+hK9+iNJ1k7vn9HDN2KGbuyHAP6Wk=)
                          2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
                          rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 08:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
        Validity
            Not Before: May 15 08:43:20 2026 GMT
            Not After : May 22 08:43:20 2026 GMT
        Subject: CN=6a06dca8-2ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:1b:dc:13:cc:0a:b9:39:bd:76:27:48:85:
                    dc:6b:7c:fd:ca:de:59:8b:27:2f:62:7a:3b:0f:53:
                    00:e1:26:10:dd:58:ca:6d:88:ba:b0:f1:a6:db:4d:
                    31:02:2e:40:63:f5:61:b5:66:04:27:2a:65:d8:ff:
                    5b:4e:b0:92:15:ac:88:57:39:b2:98:9c:14:f0:25:
                    c1:c0:b8:27:8f:f5:c2:0b:e0:50:9e:34:65:d7:98:
                    49:77:0d:dc:12:07:8a:20:2a:b3:2f:54:38:7f:3e:
                    f7:ce:5f:b1:f8:d0:54:e5:40:d3:be:57:40:bc:ae:
                    48:fd:83:21:84:74:a4:c5:91:81:39:12:23:2b:14:
                    20:fe:a6:70:8b:f3:ac:2d:b2:80:32:16:d4:c2:83:
                    8c:eb:b5:a4:58:63:a4:03:cd:91:06:cb:08:ff:2f:
                    83:42:07:c8:6c:c6:57:65:99:ac:b1:3c:a1:63:16:
                    e1:26:21:5a:80:18:92:56:c1:88:ed:05:d6:50:d4:
                    e9:07:0d:67:91:bc:c3:14:cf:f5:2b:16:65:ee:9c:
                    7c:6f:c2:5c:a0:8b:62:93:a1:c8:ed:0d:39:8e:90:
                    b0:0f:21:6d:70:8c:93:08:76:b8:f6:64:ab:dc:69:
                    d2:87:3b:1e:0c:29:c2:28:e2:04:46:29:34:0a:6c:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:CC:7F:A2:BC:A2:4E:68:45:71:AA:3C:D1:E3:5C:D6:86:A8:4C
            X509v3 Authority Key Identifier:
                keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:1f:ac:79:72:ac:7d:a5:d3:82:25:e4:00:27:4c:18:24:
         75:20:78:48:94:85:11:20:0c:40:00:8e:3d:eb:06:7c:16:cb:
         c1:58:20:e4:3b:28:7f:fe:85:08:3d:a0:d9:42:40:68:d2:c9:
         4e:59:47:ba:69:fd:98:6e:7c:7f:e2:13:7e:7c:79:10:5a:6d:
         fa:e5:4c:9b:c2:b0:26:f1:79:81:91:fe:fa:0b:d0:65:ab:8e:
         05:a3:00:ba:c9:62:c9:dc:e7:f1:af:8b:da:7d:21:9d:cd:a6:
         01:dc:6d:65:f1:cd:ae:af:57:73:1f:fe:32:48:e5:19:4b:dd:
         b1:45:e6:94:77:cd:d9:48:12:e9:57:31:36:b5:35:6c:7d:c0:
         0e:c8:df:f0:f9:cc:c8:ec:0b:73:2d:1f:74:7d:bf:e5:ba:16:
         5c:39:66:12:dc:42:7b:a6:0a:a4:84:4d:e4:b2:5c:0c:c5:cf:
         19:df:4b:75:a1:27:f3:54:2b:5e:88:b9:e7:1c:3d:c2:48:cf:
         17:ba:27:0e:84:72:b0:b2:99:61:05:66:22:00:ea:35:80:2e:
         70:88:e6:88:08:3a:de:38:f5:99:dd:5b:d2:16:2a:59:06:dd:
         37:e4:23:e4:b8:15:79:81:90:fe:64:76:3d:53:1a:ba:85:e0:
         4d:4e:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:18 2026 by rpki-client