Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
File:                     Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json)
Hash identifier:          x3LvkohKjKNPKHtfOBAxTIMAIZxEigMMDHkhhgtZ7jI=
Subject key identifier:   18:F3:53:ED:DF:9C:8E:AF:72:D3:5E:11:B6:D8:FE:26:22:A8:99:03
Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46
Certificate issuer:       /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
Manifest number:          8D
Signing time:             Tue 23 Jun 2026 07:42:57 +0000
Manifest this update:     Tue 23 Jun 2026 07:42:56 +0000
Manifest next update:     Tue 30 Jun 2026 07:42:56 +0000
Files and hashes:         1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: HM/iuAUKmItAuBXyrMh/Ur4IzqPm84hkS+26b4SzrEM=)
                          2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: SOUc2IXOvl/L1pMPWSJBgclEArQVhHSL8F26Jssjy60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846
        Validity
            Not Before: Jun 23 07:42:56 2026 GMT
            Not After : Jun 30 07:42:56 2026 GMT
        Subject: CN=6a3a3900-67ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:4a:6a:d8:37:bb:65:15:a5:9f:8a:f4:fa:
                    af:a4:bb:7d:d4:d3:15:df:2b:e2:18:7a:ba:a9:f7:
                    73:73:15:77:38:d4:a8:39:99:4b:fc:a5:b4:14:42:
                    2d:2d:62:b3:57:61:c0:75:d7:1c:e7:7a:b1:4f:bf:
                    65:3b:24:0d:19:7a:c2:34:77:bf:38:d4:03:65:d2:
                    2d:e9:bc:96:c8:4a:f7:0a:81:a3:7c:92:6b:78:58:
                    92:0f:51:a2:c4:2b:01:ce:9f:08:41:ba:49:e3:d0:
                    4e:82:aa:2a:b8:28:de:81:af:0a:93:4f:15:a2:d9:
                    80:16:97:fe:5b:ee:2c:0e:6e:87:e7:41:1b:63:1a:
                    4d:d1:7f:80:6b:57:41:ba:1f:f3:b3:d0:15:08:8e:
                    ab:4d:63:4d:61:57:39:59:77:f2:3e:4e:d6:08:3e:
                    29:b6:b1:90:67:fc:20:bf:85:4e:5f:f6:48:95:52:
                    96:af:98:74:08:5f:b7:04:70:d5:fa:ff:1d:5e:d2:
                    70:f1:18:3a:38:03:62:1a:67:20:7f:d1:6a:84:32:
                    60:47:d9:da:6e:50:b2:1d:8e:3d:6d:bb:43:31:c0:
                    6f:f6:d8:2a:9c:49:64:69:69:77:8f:24:36:cb:04:
                    b9:b4:e4:17:b6:ac:46:8f:1f:f4:ae:9a:db:df:81:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:53:ED:DF:9C:8E:AF:72:D3:5E:11:B6:D8:FE:26:22:A8:99:03
            X509v3 Authority Key Identifier:
                keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6f:24:52:ed:f6:58:05:be:4b:5a:e8:e7:9c:f6:16:4c:ef:
         9b:54:55:33:6c:84:b1:98:17:e9:5d:d1:a2:ec:97:e2:59:f2:
         e0:62:58:8d:03:29:ff:99:75:62:ea:cc:e3:e4:08:08:ef:6b:
         7e:28:68:64:83:5f:55:bc:58:0d:b3:09:c5:cd:53:4e:b2:3c:
         33:0e:17:da:ea:8f:c0:37:74:23:c8:e1:68:31:e7:03:0f:8a:
         69:32:75:4e:6e:4d:4a:41:b4:e0:60:e1:17:24:ca:c0:b8:27:
         fc:6a:93:80:0a:13:f3:56:73:56:c8:07:3f:69:ec:b7:81:07:
         00:cc:2e:88:53:32:d5:e5:95:39:ae:0d:92:2e:32:9e:6f:cf:
         2e:71:0d:da:b9:93:7c:a9:6e:8e:37:eb:71:35:29:c8:82:1d:
         97:62:21:e0:16:07:9c:80:12:d6:64:0d:d4:17:0e:2f:c8:ab:
         70:4f:98:89:ef:cb:76:6b:a7:e6:f8:e1:34:d6:45:e7:d2:62:
         c3:7c:ec:3d:17:c1:93:f3:48:7a:c4:7a:2c:ae:16:27:86:3e:
         3f:ef:31:be:16:83:ae:95:16:38:8e:39:63:a5:e8:67:f4:4a:
         07:21:2f:8a:2d:9f:f2:91:17:e0:50:f2:f7:af:22:05:ce:80:
         c6:5a:73:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VFNkQxMTAvBgNVBAUTKDIyNDcyMTg3NkExMUUyRDNBNEI5OEIyMUJDODRGNzhF
NjRGRUM4NDYwHhcNMjYwNjIzMDc0MjU2WhcNMjYwNjMwMDc0MjU2WjAYMRYwFAYD
VQQDEw02YTNhMzkwMC02N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAripKatg3u2UVpZ+K9PqvpLt91NMV3yviGHq6qfdzcxV3ONSoOZlL/KW0FEIt
LWKzV2HAddcc53qxT79lOyQNGXrCNHe/ONQDZdIt6byWyEr3CoGjfJJreFiSD1Gi
xCsBzp8IQbpJ49BOgqoquCjega8Kk08VotmAFpf+W+4sDm6H50EbYxpN0X+Aa1dB
uh/zs9AVCI6rTWNNYVc5WXfyPk7WCD4ptrGQZ/wgv4VOX/ZIlVKWr5h0CF+3BHDV
+v8dXtJw8Rg6OANiGmcgf9FqhDJgR9nablCyHY49bbtDMcBv9tgqnElkaWl3jyQ2
ywS5tOQXtqxGjx/0rprb34FU8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjzU+3f
nI6vctNeEbbY/iYiqJkDMB8GA1UdIwQYMBaAFCJHIYdqEeLTpLmLIbyE945k/shG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU2RC81MTExMEFGRTk3
NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0T2t1WXNodklUM2ptVC15
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUU2RC81MTExMEFGRTk3NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0
T2t1WXNodklUM2ptVC15RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwW8kUu32WAW+S1ro55z2Fkzvm1RVM2yEsZgX6V3RouyX4lny4GJYjQMp/5l1
YurM4+QICO9rfihoZINfVbxYDbMJxc1TTrI8Mw4X2uqPwDd0I8jhaDHnAw+KaTJ1
Tm5NSkG04GDhFyTKwLgn/GqTgAoT81ZzVsgHP2nst4EHAMwuiFMy1eWVOa4Nki4y
nm/PLnEN2rmTfKlujjfrcTUpyIIdl2Ih4BYHnIAS1mQN1BcOL8ircE+Yie/Ldmun
5vjhNNZF59Jiw3zsPRfBk/NIesR6LK4WJ4Y+P+8xvhaDrpUWOI45Y6XoZ/RKByEv
ii2f8pEX4FDy968iBc6Axlpz6g==
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:31:46 2026 by rpki-client