Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
File:                     ijL6yit6Kieb3e2pT1iNAGddgKQ.mft (raw, json)
Hash identifier:          3wErVBqq9AyBdUNfrsb8YxiNO1kC+BMYisjVADETggc=
Subject key identifier:   9E:86:5C:EE:3D:67:7F:D4:17:D4:80:2A:3F:3D:DB:88:6D:B2:1A:0B
Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
Certificate issuer:       /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
Manifest number:          3A
Signing time:             Fri 15 May 2026 08:42:39 +0000
Manifest this update:     Fri 15 May 2026 08:42:39 +0000
Manifest next update:     Fri 22 May 2026 08:42:39 +0000
Files and hashes:         1: ijL6yit6Kieb3e2pT1iNAGddgKQ.crl (hash: Ok5u3yrmfBvkbsFG3IBf9i5SzP3Tt/2GqLGRYVigUVw=)
                          2: 8F628C6C000E11F1B0B593243F6F56BC.roa (hash: mhV3wJI4sW60cgaV9TFMNE1Xlg3TBUPjAyuhHyfLW4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 08:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
        Validity
            Not Before: May 15 08:42:39 2026 GMT
            Not After : May 22 08:42:39 2026 GMT
        Subject: CN=6a06dc7f-af8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:a3:90:3e:9a:30:23:53:05:6c:e5:bd:ef:
                    2b:50:89:36:16:9b:be:d5:c8:10:c3:17:9b:81:60:
                    b5:13:92:12:08:c7:b7:1a:42:fa:c3:a2:f3:84:01:
                    35:23:94:c8:3b:71:08:a2:76:9d:56:be:51:31:c0:
                    ae:6d:ec:1f:f4:a6:89:5b:54:30:ac:8c:f3:87:ea:
                    5a:7a:c6:b8:81:f7:b0:77:6e:31:1e:dd:ee:02:17:
                    cc:46:7f:03:cf:3b:ff:64:83:f4:20:0e:f5:92:d0:
                    6a:e0:94:4c:33:c6:f9:a3:4d:2b:05:0e:97:11:25:
                    e8:fb:0d:67:33:04:44:0c:e0:18:52:86:a0:11:ba:
                    73:3c:0a:92:96:86:38:04:78:10:79:bc:a6:44:c5:
                    b9:90:d7:a2:1c:e0:00:d0:9f:49:ed:aa:3e:d0:e7:
                    5f:50:2d:ba:25:4d:38:1c:45:03:ee:03:1a:01:6f:
                    8d:dc:d4:4b:b3:ef:53:a9:41:3f:38:1e:69:8f:ec:
                    ca:a4:53:1a:bd:42:06:ec:70:6c:95:d1:0e:50:d3:
                    48:9f:38:8d:22:c9:4e:70:aa:5b:c1:c6:b5:d4:30:
                    3d:17:56:3f:76:11:c2:11:c7:88:02:69:c4:77:db:
                    ae:a2:f1:26:82:53:52:f8:33:d1:30:bc:8e:0d:4e:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:86:5C:EE:3D:67:7F:D4:17:D4:80:2A:3F:3D:DB:88:6D:B2:1A:0B
            X509v3 Authority Key Identifier:
                keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:20:32:50:44:70:5b:ee:cf:7e:50:06:7f:87:dc:96:31:9e:
         86:02:a4:ab:e5:2e:54:dd:89:cf:65:21:41:d7:77:bd:44:6c:
         83:1e:18:ce:73:46:36:54:2e:2e:13:12:b1:02:c8:20:43:bb:
         b1:81:28:2f:2e:26:3e:06:bb:53:ef:a6:a5:af:f5:54:01:48:
         72:5e:84:83:b1:f6:39:7d:0f:bc:3b:59:c2:a1:2c:50:dc:bc:
         11:e4:6f:f9:f0:fc:d2:e7:d9:6b:36:2f:eb:60:63:aa:fe:9e:
         61:cf:22:4f:03:d0:bc:c2:07:8f:cc:19:a5:eb:1b:d8:28:b1:
         57:bf:01:6c:d4:81:80:0b:4e:10:aa:13:aa:b3:e3:b8:8e:88:
         94:90:bc:59:e7:ec:d6:68:dd:f0:1c:b4:10:d0:d3:19:1a:a5:
         0e:87:75:07:d0:91:a5:18:21:a3:5e:9c:c9:20:89:64:98:21:
         88:21:81:6c:f5:37:a8:01:93:9a:b3:76:12:37:b1:f2:0e:c9:
         ff:12:b7:27:d5:33:d7:81:9e:21:8e:55:56:38:21:44:af:ea:
         d9:c7:d2:9e:a2:8e:c1:7e:11:a8:1f:d0:89:a4:4b:d5:e8:05:
         eb:c6:98:7f:f5:e5:3f:15:ef:c4:d6:a3:d1:8e:cc:45:36:d6:
         cf:ad:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:10 2026 by rpki-client