Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
File:                     IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json)
Hash identifier:          y5KvTNGcxx6+Sj6fiupucPrGkPkYMvQlbjC8Dmchk58=
Subject key identifier:   90:5B:A9:27:20:3A:2A:B7:3B:2B:92:2D:31:E3:75:0E:10:81:48:1A
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Certificate issuer:       /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
Manifest number:          9D
Signing time:             Thu 21 May 2026 07:30:17 +0000
Manifest this update:     Thu 21 May 2026 07:30:16 +0000
Manifest next update:     Thu 28 May 2026 07:30:16 +0000
Files and hashes:         1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: 3Q1D6rEOXWCWhGfT+z8AvMZZTBtDON/D3HqhQboiBOA=)
                          2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
        Validity
            Not Before: May 21 07:30:16 2026 GMT
            Not After : May 28 07:30:16 2026 GMT
        Subject: CN=6a0eb489-a652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:6c:f7:a5:e2:30:1e:b0:60:f3:a4:e2:2f:
                    34:f0:87:22:90:ac:81:e5:9a:0e:50:96:f5:1e:23:
                    b8:d3:eb:11:46:42:03:84:9a:1d:2d:1e:5f:25:7a:
                    54:65:24:e2:b6:db:c9:b3:02:43:0e:2a:45:a7:94:
                    30:3d:15:4d:34:60:f5:ad:3b:37:c3:46:1a:11:04:
                    a0:f4:b2:ed:8e:5e:07:51:87:59:bb:cc:55:bb:a8:
                    29:a9:4a:1a:ff:ce:42:39:6f:5f:97:48:4a:61:9c:
                    e1:0c:10:25:74:4e:9b:72:6b:a4:bb:7a:d2:c4:9f:
                    a0:b1:9a:82:99:d4:c5:4e:33:32:42:bb:72:01:74:
                    41:0a:76:2e:a4:d5:78:12:a9:bf:7a:3c:5a:d7:d4:
                    e0:8c:9e:41:e5:4d:c7:c8:e0:28:71:b1:5b:82:8d:
                    73:ea:35:e6:b2:ca:6b:e5:8d:4f:44:7c:4d:73:e6:
                    2c:42:9e:e1:92:15:24:fe:11:c3:bc:0d:33:3d:b3:
                    05:e7:8f:3b:ce:fc:2b:0f:85:5b:aa:38:af:55:11:
                    f7:71:da:a9:65:12:3e:8f:5b:e8:bd:4c:52:11:c3:
                    e0:7f:d8:33:00:85:37:db:0c:91:66:3e:31:f5:a6:
                    02:b0:51:6c:82:04:7e:d6:49:20:8e:22:44:71:d5:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:A9:27:20:3A:2A:B7:3B:2B:92:2D:31:E3:75:0E:10:81:48:1A
            X509v3 Authority Key Identifier:
                keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ec:ec:3c:3e:83:92:14:29:f7:01:f6:d0:84:ac:87:8c:2b:
         e3:00:48:e2:46:e2:aa:dc:a3:41:71:2b:b5:2b:3a:1e:08:1a:
         1f:d0:f9:6a:22:1a:4d:85:eb:eb:9a:1c:91:29:f4:9c:03:b3:
         9d:e7:20:17:fc:a6:d4:64:a1:59:88:76:55:41:5c:f2:88:a8:
         26:ff:2b:a3:d1:07:2e:1b:dc:60:c1:7d:69:d0:ff:47:18:78:
         30:9a:5a:a0:f6:b3:c8:ae:b2:46:a0:79:bf:e3:94:2a:95:05:
         5b:dc:2c:ac:2f:49:c0:a0:43:bd:37:25:44:12:24:79:e4:14:
         b9:50:53:50:41:68:d0:88:b2:6c:b0:cb:68:3c:d1:16:5b:1e:
         3f:8b:d4:82:bf:e6:e2:34:06:eb:b4:cd:4a:da:cc:dd:2f:d0:
         bf:fa:90:9c:58:fa:5d:b1:ce:90:fb:d3:11:7c:20:c6:8f:e0:
         68:3a:83:f4:57:64:74:1b:d0:cb:90:16:9c:10:d5:b3:5c:9e:
         62:80:da:f9:72:e6:8f:87:a4:cd:ed:23:a7:ce:7e:16:1a:25:
         06:05:1b:ca:08:af:d3:32:04:cb:66:96:17:9a:2e:4a:5e:f7:
         d6:41:14:21:da:89:34:4d:83:25:05:eb:3f:f5:79:cf:d2:bb:
         81:0f:f9:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDNjIxMTAvBgNVBAUTKDIxQzhGMkI2RTAxRDBBODJEMTNDMzUxODhDM0M5M0U2
RjUxNEJBOTQwHhcNMjYwNTIxMDczMDE2WhcNMjYwNTI4MDczMDE2WjAYMRYwFAYD
VQQDEw02YTBlYjQ4OS1hNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tZs96XiMB6wYPOk4i808IcikKyB5ZoOUJb1HiO40+sRRkIDhJodLR5fJXpU
ZSTittvJswJDDipFp5QwPRVNNGD1rTs3w0YaEQSg9LLtjl4HUYdZu8xVu6gpqUoa
/85COW9fl0hKYZzhDBAldE6bcmuku3rSxJ+gsZqCmdTFTjMyQrtyAXRBCnYupNV4
Eqm/ejxa19TgjJ5B5U3HyOAocbFbgo1z6jXmsspr5Y1PRHxNc+YsQp7hkhUk/hHD
vA0zPbMF5487zvwrD4VbqjivVRH3cdqpZRI+j1vovUxSEcPgf9gzAIU32wyRZj4x
9aYCsFFsggR+1kkgjiJEcdURCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBbqScg
Oiq3OyuSLTHjdQ4QgUgaMB8GA1UdIwQYMBaAFCHI8rbgHQqC0Tw1GIw8k+b1FLqU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUM2Mi8wQUVBQUNENjZC
NjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENvTFJQRFVZakR5VDV2VVV1
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUM2Mi8wQUVBQUNENjZCNjYxMUYwQjdGOEVCNDBDNEY5QUUwMi9JY2p5dHVBZENv
TFJQRFVZakR5VDV2VVV1cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADuzsPD6DkhQp9wH20ISsh4wr4wBI4kbiqtyjQXErtSs6HggaH9D5aiIaTYXr
65ockSn0nAOznecgF/ym1GShWYh2VUFc8oioJv8ro9EHLhvcYMF9adD/Rxh4MJpa
oPazyK6yRqB5v+OUKpUFW9wsrC9JwKBDvTclRBIkeeQUuVBTUEFo0IiybLDLaDzR
FlseP4vUgr/m4jQG67TNStrM3S/Qv/qQnFj6XbHOkPvTEXwgxo/gaDqD9FdkdBvQ
y5AWnBDVs1yeYoDa+XLmj4ekze0jp85+FholBgUbygiv0zIEy2aWF5ouSl731kEU
IdqJNE2DJQXrP/V5z9K7gQ/5xw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:47 2026 by rpki-client