Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
File:                     iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json)
Hash identifier:          DyxB7bzXyvDEeYLmM+WMFEviMtQC1l92jE1AiSsp6WI=
Subject key identifier:   F8:9F:3D:78:32:D3:31:A2:CD:10:79:3B:2B:03:F3:2F:22:9C:8B:FC
Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1
Certificate issuer:       /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
Certificate serial:       0704
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
Manifest number:          06FC
Signing time:             Sun 31 May 2026 22:43:04 +0000
Manifest this update:     Sun 31 May 2026 22:43:03 +0000
Manifest next update:     Sun 07 Jun 2026 22:43:03 +0000
Files and hashes:         1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: ykOtgwAxoVHBMQvY/woIzDCw0VCmgOk2Xt+XRUgObpM=)
                          2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: kAiJ+qt1b9uLv28IHarV5SgEnVjfBFg87tLbajTu+3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C52, serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
        Validity
            Not Before: May 31 22:43:03 2026 GMT
            Not After : Jun  7 22:43:03 2026 GMT
        Subject: CN=6a1cb977-31e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:c6:29:4b:e8:7d:9a:51:d2:2c:ad:ae:68:
                    ea:ae:95:eb:9f:8f:71:38:df:e7:d7:b5:ce:be:f7:
                    70:dd:41:4d:0f:eb:a2:b5:c5:d4:b1:a9:5f:b0:7c:
                    db:fe:0f:93:9b:47:e9:fa:38:69:df:bf:13:c1:27:
                    be:c9:84:cb:ef:17:7b:a4:cb:2f:e1:57:a8:23:e6:
                    5e:13:95:44:a9:e1:16:0f:ec:b3:2d:01:12:9a:25:
                    21:b5:00:aa:98:81:41:c4:fd:5a:8b:de:18:b7:e5:
                    65:1e:47:7b:8f:be:c9:9f:7b:a0:4b:3f:e7:23:98:
                    f4:e8:55:63:ff:5d:03:12:29:28:de:54:e2:f7:17:
                    7a:d9:2b:22:a1:31:5e:79:18:55:f8:8f:75:f7:e2:
                    69:8f:c2:ea:3d:86:29:3c:a9:45:03:a2:8c:d1:e1:
                    19:fe:4f:c7:26:ae:62:f1:f7:bf:0a:6e:70:1b:bf:
                    1e:90:a0:97:cd:8c:c8:f6:49:91:69:14:5c:e4:4f:
                    50:3c:57:4e:18:6a:23:4b:50:07:eb:7d:70:ba:c2:
                    31:96:c8:dd:e2:eb:60:49:90:94:78:d3:ea:88:77:
                    0d:2e:2f:9f:00:9b:2a:ab:79:fc:af:10:4d:de:25:
                    a5:78:89:0e:b3:3c:57:28:b3:a0:95:c5:ab:4c:c6:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9F:3D:78:32:D3:31:A2:CD:10:79:3B:2B:03:F3:2F:22:9C:8B:FC
            X509v3 Authority Key Identifier:
                keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9e:0b:a6:f9:3c:49:11:35:6c:2b:38:7e:6f:09:a1:f5:6c:
         6f:22:5f:6a:ec:11:12:44:ea:22:40:b6:e3:ad:83:2a:65:44:
         9e:75:d6:f3:ab:f8:ba:cc:63:30:02:02:cb:43:40:65:d4:da:
         2e:c1:3c:31:29:6e:ec:89:ad:03:ce:62:4e:f7:1a:0d:56:0f:
         8a:1c:61:ae:b2:60:d3:42:79:0e:4f:d1:2f:ae:ca:b5:84:83:
         f7:1b:13:c1:51:eb:1a:06:7f:51:9a:ae:8a:92:03:12:26:84:
         c8:db:cd:0e:57:42:58:7e:f8:ed:8e:be:18:75:9b:42:f3:08:
         9b:c1:38:7c:93:a7:81:c3:29:7a:54:d9:c4:ce:4b:31:b3:9e:
         68:3d:79:01:5e:d6:73:16:84:28:4d:32:ea:ea:34:ab:7e:cb:
         ca:3c:a0:e3:7d:a4:70:fb:0a:86:9f:d2:1f:42:08:f9:31:a7:
         39:d1:33:69:d5:d2:4a:59:72:5a:43:55:80:41:b4:df:25:db:
         4d:b6:d0:2f:50:a4:1f:ef:35:07:9c:dd:dd:df:8d:2b:df:80:
         9f:13:af:63:8a:32:a6:d2:a7:e6:0c:73:83:2e:e4:68:87:45:
         05:84:7a:ea:c8:c4:1d:48:27:f1:17:33:d4:d3:58:ab:2e:01:
         d6:1b:97:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDNTIxMTAvBgNVBAUTKDhBQkI5OTI2QzMxMkExNDE0OUM1MjMwQkE1NUZBOENG
NUI4OUFBRTEwHhcNMjYwNTMxMjI0MzAzWhcNMjYwNjA3MjI0MzAzWjAYMRYwFAYD
VQQDEw02YTFjYjk3Ny0zMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz93GKUvofZpR0iytrmjqrpXrn49xON/n17XOvvdw3UFND+uitcXUsalfsHzb
/g+Tm0fp+jhp378TwSe+yYTL7xd7pMsv4VeoI+ZeE5VEqeEWD+yzLQESmiUhtQCq
mIFBxP1ai94Yt+VlHkd7j77Jn3ugSz/nI5j06FVj/10DEiko3lTi9xd62SsioTFe
eRhV+I919+Jpj8LqPYYpPKlFA6KM0eEZ/k/HJq5i8fe/Cm5wG78ekKCXzYzI9kmR
aRRc5E9QPFdOGGojS1AH631wusIxlsjd4utgSZCUeNPqiHcNLi+fAJsqq3n8rxBN
3iWleIkOszxXKLOglcWrTMYQ2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPifPXgy
0zGizRB5OysD8y8inIv8MB8GA1UdIwQYMBaAFIq7mSbDEqFBScUjC6VfqM9biarh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM1Mi9CNDZDRDc3RTkx
QjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29VRkp4U01McFYtb3oxdUpx
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lydVpKc01Tb1VGSnhTTUxwVi1vejF1SnF1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEM1Mi9CNDZDRDc3RTkxQjkxMUVCOUM1QjQ2MThDNEY5QUUwMi9pcnVaSnNNU29V
Rkp4U01McFYtb3oxdUpxdUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbZ4Lpvk8SRE1bCs4fm8JofVsbyJfauwREkTqIkC2462DKmVEnnXW86v4usxj
MAICy0NAZdTaLsE8MSlu7ImtA85iTvcaDVYPihxhrrJg00J5Dk/RL67KtYSD9xsT
wVHrGgZ/UZquipIDEiaEyNvNDldCWH747Y6+GHWbQvMIm8E4fJOngcMpelTZxM5L
MbOeaD15AV7WcxaEKE0y6uo0q37Lyjyg432kcPsKhp/SH0II+TGnOdEzadXSSlly
WkNVgEG03yXbTbbQL1CkH+81B5zd3d+NK9+AnxOvY4oyptKn5gxzgy7kaIdFBYR6
6sjEHUgn8Rcz1NNYqy4B1huXVg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:32 2026 by rpki-client