Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          EpRi2Ww/eVG+Y9RmjokbCTqtw6IVEp7tf97dUfl8xuM=
Subject key identifier:   3C:B2:83:54:21:27:00:30:CA:FE:3A:EF:24:BA:D2:EA:1D:6D:5E:7B
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          01D9
Signing time:             Thu 21 May 2026 03:35:46 +0000
Manifest this update:     Thu 21 May 2026 03:35:45 +0000
Manifest next update:     Thu 28 May 2026 03:35:45 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: JM7fXd9s78RVtnNjjGmg14uzmS1lqhFC3+8ioQEObrc=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: May 21 03:35:45 2026 GMT
            Not After : May 28 03:35:45 2026 GMT
        Subject: CN=6a0e7d92-aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:3a:38:50:96:ca:22:8b:03:ea:0d:20:20:
                    98:12:e7:35:d6:d9:56:de:19:68:cb:6d:01:d6:7c:
                    7c:ae:0b:67:16:30:41:6d:ae:3b:b4:54:65:3e:a1:
                    14:44:b1:c1:a8:1b:ac:97:38:d0:89:5e:49:87:68:
                    cc:b4:9f:14:eb:4e:ee:91:5d:68:8f:91:23:af:5f:
                    a7:54:17:ac:57:f9:75:c6:75:e2:be:3b:27:42:61:
                    c5:92:39:aa:1f:18:cd:d2:41:ce:75:b2:23:6d:44:
                    3a:fa:d5:b7:d7:c6:6d:17:ef:5a:84:20:af:db:d5:
                    a6:c4:37:2c:bd:c9:9b:39:3f:e9:8f:6b:65:3d:5d:
                    5d:9e:a5:82:d1:35:36:b0:5d:72:e2:2d:51:7c:0c:
                    88:92:90:e6:4e:64:88:52:08:43:04:d9:85:2a:e2:
                    a5:83:74:8e:c4:ac:82:78:0a:ab:b5:1b:e2:70:b1:
                    47:a4:98:6e:e7:c6:fc:ad:b2:66:ae:05:65:32:bb:
                    f6:f5:1f:55:e2:68:58:23:7f:fa:3d:df:32:83:53:
                    99:2d:3b:7a:ad:3b:a2:1c:fb:74:5b:40:21:62:84:
                    b8:d4:f1:bc:21:aa:d1:df:b7:e0:9d:a2:cc:a3:16:
                    1c:94:6b:85:99:de:31:0f:ca:c7:16:4f:f4:4f:5b:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B2:83:54:21:27:00:30:CA:FE:3A:EF:24:BA:D2:EA:1D:6D:5E:7B
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:60:00:d9:c9:4f:6f:5d:39:6e:9e:4b:97:6a:d4:03:3a:5f:
         c8:8e:fa:c3:6c:50:ea:75:9a:50:e2:ac:ed:54:e8:b6:d6:90:
         80:40:8f:67:fe:b6:d4:2d:f9:2e:e2:95:53:ed:dc:08:60:8f:
         81:41:87:a6:83:65:e6:93:99:f1:d1:4c:5a:90:91:88:a8:5f:
         02:2e:6d:1a:22:38:37:9d:8c:6d:da:a1:db:c0:c2:c5:7a:2e:
         f2:f7:5a:b3:1e:4e:fc:08:ae:60:20:4b:c9:55:19:30:ae:1a:
         02:2f:1b:fa:65:50:dc:ee:5e:5a:19:98:35:04:3b:ac:b1:5d:
         13:88:bf:47:e9:65:06:dc:35:d2:66:23:e4:cd:06:9f:7e:71:
         f2:7f:f5:4f:67:31:5b:3f:5a:58:54:61:c2:51:8f:04:28:0a:
         03:49:e9:6f:8d:6d:9c:b4:41:5e:9b:4f:63:08:5b:c8:20:31:
         34:49:1e:0d:48:e9:8d:a5:11:d3:51:95:31:07:0b:4a:f6:39:
         d3:62:7b:f7:6f:8d:62:5a:94:a2:d2:ab:5a:c8:18:ad:f0:61:
         16:fc:5c:df:ea:eb:a9:95:5c:08:38:df:4e:63:53:12:ed:28:
         71:53:90:a6:84:ce:62:6f:d3:6c:a9:05:7f:62:86:3d:c9:ce:
         0b:84:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:05 2026 by rpki-client