Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
File:                     iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json)
Hash identifier:          yswAmwS9bShFc8pW/1VcAooCQNMEjNjihYYm2NNFNKg=
Subject key identifier:   14:3A:6E:61:B8:3A:9A:34:FC:C0:B0:7F:55:B7:71:7D:ED:1B:14:D6
Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
Certificate issuer:       /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
Certificate serial:       11E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
Manifest number:          11DD
Signing time:             Mon 22 Jun 2026 17:08:40 +0000
Manifest this update:     Mon 22 Jun 2026 17:08:39 +0000
Manifest next update:     Mon 29 Jun 2026 17:08:39 +0000
Files and hashes:         1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: V7qP9zcJkg1JrxzP/A4odkBWxw0MdfC86BpbHn6tfRU=)
                          2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: WXbttLnIbP2dS5ns2q85mnfryDdhOignXdZHx6svPT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4585 (0x11e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
        Validity
            Not Before: Jun 22 17:08:39 2026 GMT
            Not After : Jun 29 17:08:39 2026 GMT
        Subject: CN=6a396c18-1ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:f5:f4:e4:dc:ea:30:4a:4e:2b:95:52:9d:
                    b8:8c:92:73:80:69:52:96:41:3c:4b:b2:24:43:bb:
                    39:cb:9f:41:68:c1:a5:ee:be:50:45:a6:aa:8d:d6:
                    71:fc:e5:9c:35:7a:ca:c0:d7:f4:e0:04:f0:81:25:
                    c5:59:d3:4d:b0:91:08:9a:47:57:dc:1a:86:85:77:
                    2d:2f:65:78:16:90:32:17:74:54:39:bd:42:e3:d7:
                    64:1c:f5:d2:0e:7b:fb:b5:a7:fe:f6:7e:47:eb:d4:
                    06:cd:e7:99:4f:2c:0c:d1:9d:4f:87:62:dd:b9:4b:
                    83:3d:c5:f8:0c:8d:af:43:ce:6c:59:b3:d6:0d:eb:
                    94:d3:32:82:c4:36:51:b2:ba:a0:1a:a4:68:fc:74:
                    08:e0:f7:f4:85:96:55:96:d3:9f:ad:b4:81:23:04:
                    bc:4a:9e:01:52:a6:0c:6b:51:ca:4b:6c:93:46:83:
                    19:0b:1a:51:0c:55:56:a5:62:cb:07:c4:8f:4f:ad:
                    eb:f5:6c:a5:0b:ac:1e:fc:33:2f:96:79:98:3b:00:
                    63:ac:f6:8e:aa:4a:75:73:dc:a6:7e:2e:03:ea:cd:
                    4c:aa:47:0a:d1:c5:7d:ef:8c:81:e4:82:86:ce:76:
                    1d:b7:51:c8:ea:36:bf:40:e1:2e:40:34:fb:8b:a7:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3A:6E:61:B8:3A:9A:34:FC:C0:B0:7F:55:B7:71:7D:ED:1B:14:D6
            X509v3 Authority Key Identifier:
                keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:4c:ba:8a:64:7f:6a:34:b8:62:b2:5e:1e:f9:40:18:a0:
         26:19:71:ee:9d:5d:0b:a6:56:f2:de:66:ed:f2:6b:ea:37:14:
         ff:ae:56:ca:4e:18:a9:36:f4:24:ac:be:96:05:e1:54:2f:17:
         c3:0b:2b:2c:65:bc:11:7c:40:0a:43:4d:0a:e1:47:59:3f:7e:
         16:d5:9e:b2:72:af:d9:9b:2c:3e:36:af:46:ea:4e:d2:4f:4c:
         ad:74:11:63:34:f7:23:01:e7:be:1d:40:3a:9e:36:ab:e4:85:
         f9:8d:87:ef:66:f4:6b:80:38:83:0f:cc:fe:1c:87:de:7c:38:
         f3:e9:99:55:71:79:2c:d5:3f:61:d5:a5:32:77:d8:ac:dc:10:
         ca:0e:d8:7a:d1:ef:2f:76:be:60:f0:d3:cc:ee:73:cd:47:70:
         34:84:ad:1c:ed:fa:b2:d8:f8:76:a7:af:1e:8b:d9:71:a8:51:
         56:4b:89:61:90:a4:15:ef:6e:12:81:07:e6:61:7c:63:69:e8:
         b3:a9:1f:30:db:1c:83:50:ec:a8:72:11:75:63:d5:bd:d2:00:
         1a:71:fd:a4:8e:fa:fc:88:71:1e:df:a6:b7:33:52:0d:44:b0:
         23:23:90:7e:21:63:27:b0:9f:84:c7:cb:e8:b3:cd:59:57:0b:
         22:ba:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:50 2026 by rpki-client