Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
File:                     iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json)
Hash identifier:          WzlfYiTY+RLbIs/mpHnsQG3Gl1PwgvC450EraGo2noI=
Subject key identifier:   4E:D6:C9:4E:65:53:7A:09:94:AD:46:D6:A9:4E:44:D0:C8:98:1D:66
Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1
Certificate issuer:       /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
Certificate serial:       06E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
Manifest number:          06DD
Signing time:             Sat 04 Apr 2026 21:59:01 +0000
Manifest this update:     Sat 04 Apr 2026 21:59:00 +0000
Manifest next update:     Sat 11 Apr 2026 21:59:00 +0000
Files and hashes:         1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: MpTJyeQV3YcpLzJK9B2lBxCyoUamk6oyJLZHX8hxfl4=)
                          2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: VX88OE/wWbDicqUK9Ecwlc7eXNXa2V1ARfcCGVaZ16E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
        Validity
            Not Before: Apr  4 21:59:00 2026 GMT
            Not After : Apr 11 21:59:00 2026 GMT
        Subject: CN=69d189a5-2176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:4c:db:9c:18:dd:80:d3:94:8d:26:50:a5:
                    10:ac:12:c0:fd:19:01:17:86:6c:5a:e2:61:91:cf:
                    59:c7:e9:5f:2c:79:3a:8c:a3:77:0b:54:6d:6c:50:
                    59:ce:5b:53:4a:9a:39:f4:e1:d8:a0:71:3e:de:ac:
                    50:af:6c:fb:cb:25:c9:bf:09:e6:8a:e0:25:62:ca:
                    7e:7f:40:66:4c:fc:84:90:c4:31:da:1c:44:85:42:
                    6b:b7:c3:b7:43:63:69:5e:64:5a:f7:54:6f:c8:cd:
                    1a:a7:5e:86:21:6f:39:82:e1:13:47:7a:0e:18:4f:
                    84:5e:0f:9e:07:49:fc:89:14:e7:ac:78:08:4c:90:
                    76:01:fc:50:54:dd:eb:ce:be:38:48:26:68:6a:dd:
                    67:ef:2a:ce:df:2e:ab:14:a6:39:4e:3f:ff:6b:2b:
                    7c:6b:c3:bb:6d:af:52:a8:51:84:cf:79:0e:28:32:
                    c5:c3:86:e5:14:89:d0:47:12:94:b5:4b:54:e6:cf:
                    a5:de:6b:f6:95:8a:9a:93:71:91:c9:5d:de:1c:ec:
                    e8:36:72:c3:09:da:cc:0d:04:d3:70:ae:62:b6:4f:
                    e5:bc:5a:51:7f:03:9a:b9:02:46:66:d4:16:d9:4c:
                    29:c6:7b:22:71:67:2c:c0:64:25:46:3f:41:0c:71:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:C9:4E:65:53:7A:09:94:AD:46:D6:A9:4E:44:D0:C8:98:1D:66
            X509v3 Authority Key Identifier:
                keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:12:ea:d7:41:92:51:fe:2e:4f:d0:ba:83:9f:c7:9e:7e:
         05:6c:bf:a1:7c:b7:9a:31:38:0d:ec:12:52:b2:74:35:c5:cd:
         f3:e2:26:ae:d1:fc:0c:d6:f6:cf:a9:d7:6d:e5:2c:78:de:41:
         b7:c8:98:13:0a:51:4b:3b:9d:9a:a9:e7:e3:fe:76:f3:b3:ff:
         9d:7b:46:26:73:3e:d3:eb:68:45:8c:c5:ad:c6:58:6b:bc:30:
         20:bc:99:ff:0b:c3:b6:7f:00:7a:d9:fd:09:10:75:20:53:19:
         65:12:65:10:4e:11:96:ae:87:94:c7:d0:26:ff:bb:dc:d2:52:
         4a:6e:e9:ad:a9:2a:b3:9b:be:3d:04:4a:64:77:b3:63:22:cf:
         24:9e:07:a9:5c:67:c3:6f:fd:93:06:91:b3:c5:00:3e:b5:33:
         4a:53:45:e8:86:b0:0b:1d:c4:11:72:3c:61:10:86:ba:86:02:
         cd:4e:29:75:18:fc:6a:9b:53:1c:eb:b2:2c:bc:6f:18:bb:2b:
         33:83:bd:84:73:5c:fc:31:9f:cb:23:8a:58:5e:96:fc:01:6a:
         f0:6c:9b:da:9d:ab:e4:89:81:6b:bf:6e:aa:1e:9d:e6:cd:2a:
         be:6f:fc:05:a7:33:55:8f:9d:90:d6:54:2e:ed:1a:dc:e5:f3:
         a4:19:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:33 2026 by rpki-client