Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File:                     ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier:          9vI/UTB/1+To17nNueXhpsy7t86+WnjTHORwbb8rEC0=
Subject key identifier:   52:89:CD:4B:6E:8F:5A:E8:9D:BC:69:98:95:79:64:4A:2A:F2:00:6F
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer:       /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial:       0CA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number:          0C97
Signing time:             Wed 20 May 2026 18:33:37 +0000
Manifest this update:     Wed 20 May 2026 18:33:37 +0000
Manifest next update:     Wed 27 May 2026 18:33:37 +0000
Files and hashes:         1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: b8+g7HGfD+4pTYOPk6wkehXXWY6b1uCBcd0m8VHaeNs=)
                          2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
                          rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3232 (0xca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
        Validity
            Not Before: May 20 18:33:37 2026 GMT
            Not After : May 27 18:33:37 2026 GMT
        Subject: CN=6a0dfe81-aded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:f2:14:60:b2:44:8b:f4:1b:55:de:36:b6:
                    83:bf:bf:19:1a:6e:7d:2a:e8:d2:ac:92:53:dc:8b:
                    09:98:1e:33:86:21:97:f7:c7:b2:d4:91:35:43:5e:
                    72:52:79:1f:a1:a4:18:2f:6a:4b:2b:d6:9a:08:38:
                    01:3e:4a:dc:98:1e:33:16:d2:eb:c0:bd:4d:79:55:
                    aa:0b:77:d3:a9:75:8d:61:0c:31:ff:b7:f1:18:af:
                    d5:ef:ab:aa:da:fc:90:e6:64:68:2e:8d:d0:82:84:
                    0f:48:f8:76:4e:5e:9a:e6:0a:c8:d2:97:4f:c0:05:
                    f0:e3:10:0f:4b:af:54:ee:ee:a1:64:a7:7d:d7:e6:
                    d1:34:ff:82:8e:88:11:00:79:d8:36:20:3b:68:a3:
                    26:4c:16:8c:eb:3b:34:16:9c:1a:ef:7c:b0:64:72:
                    a1:0a:b7:50:85:8c:f3:bf:48:bd:91:7d:6e:f8:c0:
                    ed:d6:e6:79:54:6a:b9:69:38:5c:e7:ed:25:0e:ea:
                    69:37:8f:6c:02:11:a9:79:cf:3c:fb:d8:8e:4a:a3:
                    87:ed:1e:a0:cd:43:a9:c5:de:95:c3:db:38:b3:69:
                    8e:2a:48:e4:7b:34:83:99:05:3d:49:b6:7d:c0:25:
                    cc:4a:91:91:46:17:78:14:8f:c8:e2:83:88:e0:c6:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:89:CD:4B:6E:8F:5A:E8:9D:BC:69:98:95:79:64:4A:2A:F2:00:6F
            X509v3 Authority Key Identifier:
                keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:43:3a:1c:1c:58:57:e8:f1:b0:7e:cd:c1:b0:4f:33:db:80:
         18:c5:fb:2b:59:59:d0:10:dd:27:08:b7:11:00:5f:1a:3b:89:
         1d:bc:8c:50:28:10:d2:ea:96:0d:17:7e:79:16:24:b7:e8:3e:
         d1:96:a8:39:1b:d4:ed:37:3f:ab:0c:b3:0f:06:85:c2:10:b6:
         1e:41:50:ab:b9:c8:62:4d:73:32:30:be:43:3e:32:7a:f1:fa:
         ea:ff:56:83:f2:de:c5:a6:31:f1:60:ea:77:75:56:83:c1:27:
         08:14:06:09:5e:54:b7:7e:ab:0a:06:5d:60:2a:32:7c:1f:be:
         19:67:f0:7a:2b:61:04:86:34:c1:66:46:9b:0f:7b:e0:db:ba:
         a6:89:2a:f8:9e:a9:41:ac:63:0d:19:df:e3:89:af:f0:2d:15:
         4a:31:51:87:5d:39:c0:2a:2b:01:65:f7:90:49:91:ad:6e:bb:
         e3:34:21:91:a1:52:96:7c:20:fa:ba:61:4f:73:66:81:20:d8:
         39:e7:77:e3:23:67:63:19:a3:ba:97:05:47:c9:1d:b2:6a:9e:
         e9:af:b6:34:9e:ab:e1:9d:9e:fa:6d:48:fa:04:46:33:64:c6:
         70:8a:0d:04:15:0b:60:de:48:aa:76:b5:9d:f8:1a:f7:04:ff:
         f2:c7:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:07 2026 by rpki-client