Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          hYWm1273o/bmZbQXa76RWXJHs2SDF4mIsakdobR3Jxw=
Subject key identifier:   82:CC:D0:43:D8:DC:2D:1D:51:76:60:1A:18:43:B8:1D:11:B4:BB:EB
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          0178
Signing time:             Mon 01 Jun 2026 05:26:56 +0000
Manifest this update:     Mon 01 Jun 2026 05:26:55 +0000
Manifest next update:     Mon 08 Jun 2026 05:26:55 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: B2Ni1dyFiTNFOiJLTW0QUxQauVvDIImlqb/Z84FIkFA=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: wfWPCJF64COMQ4+GFRDWNSHHIcvg9J+oSNDdFL1r5Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Jun  1 05:26:55 2026 GMT
            Not After : Jun  8 05:26:55 2026 GMT
        Subject: CN=6a1d1820-0534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:1c:bb:ad:4f:11:90:cc:ef:e8:9d:74:cd:
                    92:47:8b:cc:ab:e9:68:24:32:a4:eb:5a:52:26:f0:
                    c7:8a:40:19:cc:55:fc:2d:41:a2:2b:a3:c1:b2:03:
                    40:a1:8b:1c:8e:70:d2:d5:d7:c8:6e:df:fd:92:72:
                    4e:fb:71:2e:0f:c1:e1:d0:9d:55:06:73:26:60:72:
                    73:ed:d3:e4:bd:df:aa:e6:2d:91:ec:fe:47:b2:7d:
                    b5:24:7f:c5:51:4d:0f:6f:08:6b:62:80:39:23:b2:
                    ce:87:8d:1e:f1:c2:84:48:8d:f3:6b:b3:d3:61:e2:
                    d6:4a:7d:40:bb:31:35:fd:7a:b9:f5:35:0f:45:56:
                    49:d6:bf:ac:3c:14:21:54:23:43:e3:1c:4d:41:23:
                    e1:3e:64:40:05:28:75:ef:af:3c:2b:3e:a3:6c:d6:
                    32:c8:79:eb:34:29:c5:0d:f5:f3:fb:a9:b0:14:6b:
                    7f:79:b9:d5:69:a4:65:43:4c:16:4c:43:0b:22:34:
                    57:80:87:da:3e:89:57:10:18:0e:80:1f:ec:5a:7f:
                    b3:69:4e:60:6d:bd:fb:ce:89:92:2b:cd:f2:13:04:
                    df:94:a7:48:b7:10:d3:3a:64:1f:bd:34:1d:4d:1a:
                    48:93:bc:7e:58:1d:98:bd:04:cf:b8:a8:cb:75:e1:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:D0:43:D8:DC:2D:1D:51:76:60:1A:18:43:B8:1D:11:B4:BB:EB
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:49:57:57:99:bc:29:98:4d:ff:f2:27:9e:3c:0d:6e:71:
         1c:b2:0e:e6:fb:ee:18:1c:01:4a:5b:83:71:d1:4d:a0:1e:32:
         f3:bd:b9:40:b8:68:a6:a5:c0:e2:fb:76:96:4c:b5:b2:75:02:
         73:ee:30:b5:f1:98:1a:ac:a6:e8:14:b4:ec:16:2c:26:a2:bd:
         0a:0c:6c:8e:d6:f2:6e:73:e6:7b:30:d9:24:0c:bb:f4:e2:26:
         91:e1:f3:fd:b5:ff:22:ae:07:37:84:d9:4c:f4:7b:b3:8a:19:
         b7:e6:65:7b:fd:d3:f1:76:6d:d2:2e:21:33:2b:44:87:22:c1:
         d6:57:5c:e2:54:e5:f4:0b:22:b8:9b:7e:df:40:89:c9:ca:2a:
         c6:33:dd:2f:28:71:3d:77:8c:4e:58:90:05:9e:36:1e:a8:7a:
         1e:51:27:13:a6:3b:62:de:ee:dc:a7:9b:a1:89:cc:ed:c0:91:
         0c:2b:f2:96:a4:66:c1:b6:62:13:60:7a:99:6d:e5:35:57:ef:
         cf:c6:d2:16:66:ab:fb:d6:33:a1:10:2a:d2:2a:94:da:eb:dc:
         1e:fb:cb:9d:4d:09:ff:19:e9:e0:ed:5a:72:3e:3c:2d:c3:4c:
         76:90:28:41:2a:89:57:7d:26:77:bb:f4:2d:43:4c:71:07:e6:
         55:82:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:48 2026 by rpki-client