Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
File:                     IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json)
Hash identifier:          gKFmb44VXBQm4ZcEgqnRd12i3TfERDh9/r7ev8YzvC4=
Subject key identifier:   2B:EA:A7:C1:80:0B:57:71:8A:F1:34:EE:FB:67:E7:C9:A3:25:9B:A2
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Certificate issuer:       /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial:       10E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
Manifest number:          10D4
Signing time:             Wed 10 Jun 2026 17:18:37 +0000
Manifest this update:     Wed 10 Jun 2026 17:18:36 +0000
Manifest next update:     Wed 17 Jun 2026 17:18:36 +0000
Files and hashes:         1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: DR/HiDFcnOOzkOb9vHgmvzmg8RbOg+qFsVJHXHIHqYM=)
                          2: 608836D046B111E98B793856C4F9AE02.roa (hash: CkPn2ZJIX2L7WrIqMPI/SIicfwibPMx/ZU7x2GuJAkw=)
                          3: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: a8kvW6Orzqu3ANz5V7LVYSu6qTioAnb21VQHXAb65ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4324 (0x10e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
        Validity
            Not Before: Jun 10 17:18:36 2026 GMT
            Not After : Jun 17 17:18:36 2026 GMT
        Subject: CN=6a299c6c-3e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:f5:95:67:14:d2:f5:a6:7f:a9:01:10:cb:
                    45:c4:66:8e:63:ba:82:0a:35:f8:a6:27:b4:19:53:
                    2d:e1:b2:72:41:89:a5:0d:6b:26:7c:30:a8:8b:57:
                    87:60:79:49:c6:74:9e:cd:05:0a:8b:e0:3e:b2:fa:
                    2b:b1:08:98:75:cd:08:d8:39:23:61:ff:68:db:0a:
                    d9:53:9e:d3:6c:6b:6c:7c:df:2e:55:a0:40:7f:0c:
                    78:0c:04:e6:bb:92:c3:80:c4:92:34:08:d2:a4:e1:
                    08:63:32:f9:2b:ca:5a:79:3d:1f:36:8b:df:ee:85:
                    42:bd:eb:cf:68:21:14:38:fd:11:b1:a3:a9:77:49:
                    fa:e3:51:21:49:f8:26:87:c2:b1:25:1d:4f:4b:ad:
                    de:33:70:0a:04:09:8d:e1:9d:59:ee:c5:98:83:36:
                    d5:a8:8e:f7:38:ef:c3:ae:b8:0a:af:9b:78:eb:ab:
                    d6:23:df:21:24:b6:e3:d6:58:a4:e7:65:0f:0a:d2:
                    89:5b:5c:d4:c5:f3:da:80:32:74:d7:e2:f4:85:a4:
                    b4:82:26:eb:ba:84:53:56:6f:2d:53:93:86:a2:24:
                    9e:0c:f3:78:40:86:68:5f:77:bc:32:5d:ef:0b:b0:
                    d8:bc:42:d6:7b:34:80:36:6a:f1:d1:ca:83:6f:85:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:A7:C1:80:0B:57:71:8A:F1:34:EE:FB:67:E7:C9:A3:25:9B:A2
            X509v3 Authority Key Identifier:
                keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:09:c6:d5:7a:85:6c:d8:ec:03:e2:60:84:1d:90:7c:57:
         9a:84:23:17:3c:38:ca:02:6b:2b:d2:b7:21:92:a0:e3:90:55:
         c0:eb:4b:3c:dd:f4:36:2c:6b:ae:69:88:ec:e8:b3:b9:77:8e:
         62:d3:32:c2:c5:ae:72:b1:02:a6:5b:90:ee:88:49:9f:4b:0c:
         c8:ef:e1:e4:dc:fd:76:98:3b:91:b2:45:7e:62:1f:47:93:ae:
         f4:42:7d:b3:67:47:ee:ad:07:dd:f0:f2:3f:3a:18:e9:ce:44:
         fa:42:39:98:d2:f5:3d:de:f6:a7:80:bf:b5:70:3c:1c:20:08:
         56:fb:af:c1:bb:12:bf:06:38:72:1f:0a:10:ab:0a:dd:30:0c:
         01:ba:53:1c:41:b7:ed:06:c6:09:06:cb:a5:1d:da:28:6e:4f:
         ce:cb:92:66:05:db:19:b6:89:55:1a:32:0d:52:5e:da:bf:44:
         46:3e:0e:6d:05:85:43:0b:f4:d0:61:e1:4b:e3:b7:a7:68:8f:
         00:9a:99:59:56:53:f5:0c:af:4e:5b:40:fc:38:dd:43:8d:e6:
         63:50:2d:68:7f:81:c6:d5:7b:78:a8:65:8f:7c:2e:2f:2d:68:
         12:a2:c1:18:3e:a9:83:5a:91:87:56:7d:91:4a:48:64:67:f2:
         49:47:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:51 2026 by rpki-client