Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          bCmpe/EVT1Nw64yyPcA3DF0vXqEm9OaZtOFWHYU9t/I=
Subject key identifier:   B3:8A:4C:02:0C:E4:58:D2:53:26:54:AD:80:58:94:AB:A4:2F:62:84
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          D9
Signing time:             Mon 01 Jun 2026 07:27:53 +0000
Manifest this update:     Mon 01 Jun 2026 07:27:52 +0000
Manifest next update:     Mon 08 Jun 2026 07:27:52 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: JWFJc6l2vAeJ/JQv20HDOkTCoLGpT4Gb5zE9iefUQow=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Jun  1 07:27:52 2026 GMT
            Not After : Jun  8 07:27:52 2026 GMT
        Subject: CN=6a1d3479-96c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:45:25:3e:88:09:4b:28:b4:c8:04:23:7b:
                    22:dc:b3:6a:47:35:25:10:1e:88:5d:b7:33:bb:44:
                    e3:c5:11:bb:86:43:89:3b:31:b6:1b:29:1d:8c:c5:
                    69:72:8d:fe:a4:7a:db:2b:53:80:f7:cb:fb:6d:ec:
                    90:96:de:89:b9:13:da:5b:c2:16:23:c5:ee:c5:65:
                    3f:78:35:02:9e:e4:b9:cc:06:1b:79:57:85:bb:4c:
                    7a:16:d9:6c:4b:54:c3:1f:0f:a2:4d:7e:62:f9:5f:
                    5f:46:0b:44:18:9e:a7:c0:ec:0b:27:74:73:3f:11:
                    d5:21:da:5e:35:2d:0d:6e:b7:27:2e:de:6c:aa:35:
                    c3:8b:06:ec:76:28:85:61:e4:de:bf:c6:4d:f2:3d:
                    70:11:ad:d4:d6:79:64:7e:3c:be:f8:48:2d:1e:71:
                    7c:1a:73:15:11:62:87:3c:96:db:fc:c2:ac:25:09:
                    69:32:f0:d0:8a:b0:96:4a:f9:89:50:a2:0d:fb:27:
                    6e:02:fe:16:df:79:07:8c:2c:dd:47:5d:7b:55:31:
                    0b:6d:2a:59:d6:4e:5d:a0:b6:93:1b:20:3c:69:6e:
                    5d:3f:c5:93:9f:16:2e:03:fe:78:12:8e:84:10:87:
                    83:43:63:33:d6:ac:48:fd:1b:fd:0a:31:97:de:bf:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:4C:02:0C:E4:58:D2:53:26:54:AD:80:58:94:AB:A4:2F:62:84
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:db:58:a1:23:a2:08:e7:3f:f8:ce:26:0f:fa:0c:0b:08:
         f1:c5:b0:b2:92:58:99:27:23:85:9d:1a:59:95:f9:bd:02:13:
         bd:da:56:b1:be:2e:74:ca:92:b4:38:44:7b:d3:41:3c:23:a9:
         f9:77:f6:43:25:07:19:d6:f7:39:73:f7:d1:7d:5f:62:1a:c2:
         21:bb:0d:12:52:2f:62:39:3c:d1:ff:8d:41:f3:a5:1f:38:18:
         bc:a9:0a:06:0b:19:52:38:ea:57:28:33:80:d5:6d:9b:67:66:
         b1:96:d4:33:8a:c5:cf:79:12:7c:35:7e:5f:9b:9e:87:40:e0:
         17:76:fb:65:41:5c:98:89:5c:57:1b:ad:d1:7d:44:28:4a:db:
         83:6b:c0:34:2c:22:1a:e6:e5:5e:ce:cb:da:27:8d:ed:7b:98:
         77:2a:00:1d:2a:f6:1d:82:63:fc:48:7a:6f:ab:c9:60:cf:21:
         80:09:f6:eb:9a:26:0b:c0:1c:9d:07:7a:5e:c3:81:8d:0b:71:
         e0:86:77:1f:57:24:6a:40:ae:c5:84:83:e9:34:32:a9:5b:30:
         de:cf:53:ac:00:2d:09:8a:17:88:10:1b:ae:3e:ce:9b:8d:9b:
         47:de:b5:19:bd:19:63:7d:b9:81:96:45:56:57:38:14:a6:45:
         f0:6f:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:02 2026 by rpki-client