Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File:                     n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier:          wigcuWMvMpwMECawPrq6qsLa3UvIay8bmvPyJooMBrM=
Subject key identifier:   52:19:06:66:20:38:87:12:0C:48:36:93:7F:EF:B4:33:39:38:8E:AD
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number:          018C
Signing time:             Tue 21 Jul 2026 05:52:27 +0000
Manifest this update:     Tue 21 Jul 2026 05:52:26 +0000
Manifest next update:     Tue 28 Jul 2026 05:52:26 +0000
Files and hashes:         1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: U8AT0OkX2uaxq6SYE7sy+j6aj1WbdaDiEECvkJMbZt4=)
                          2: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: H04/8UCM0HIwt/kQIuV1r0Bul5P9qNZh2AavqYuBxdQ=)
                          3: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: rA7V1naVvYRqsHEWb7MBLZbTli7oyFi0ZmHVez4sKpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Jul 21 05:52:26 2026 GMT
            Not After : Jul 28 05:52:26 2026 GMT
        Subject: CN=6a5f091b-1ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:df:ce:2f:ac:64:c7:c6:4c:d7:4b:32:33:
                    6a:9a:ca:72:60:84:02:fb:e9:b5:78:fc:2b:83:2b:
                    d1:9a:7b:69:fc:15:d4:df:be:bc:cf:4f:2c:6c:cb:
                    0e:ee:a4:cb:40:82:e3:8a:27:a2:7e:2f:fa:8a:50:
                    d3:8e:c0:04:11:02:27:f8:be:b7:ef:da:e0:39:f5:
                    1d:a5:c0:9e:78:49:02:21:3c:e8:c6:c9:63:d5:16:
                    c0:a2:7d:fa:c7:e4:19:6c:c9:64:bf:1d:bf:85:73:
                    5b:bf:3c:0e:6d:34:ed:f0:43:b9:70:08:2a:61:b6:
                    42:34:ee:fa:e1:2d:a5:6b:ac:42:ab:38:26:8f:91:
                    d8:e1:a2:c2:25:f7:c2:ea:f7:d4:89:44:5a:a5:01:
                    09:aa:9f:68:82:27:f4:f2:6b:ea:de:76:00:a2:23:
                    57:66:95:25:84:c9:19:54:cd:8d:d7:2c:79:51:4d:
                    21:2c:1f:6a:dc:4f:93:8a:14:ea:2d:66:a1:53:95:
                    9e:51:0b:49:fb:05:e5:bb:27:45:ac:5b:cb:a3:74:
                    08:11:b6:c4:3e:75:e6:aa:a7:08:ce:1e:82:e4:59:
                    fc:c4:08:fa:60:f5:11:5e:2b:4c:dc:bf:98:c3:46:
                    c1:bc:b6:90:63:f0:f7:df:de:84:9c:9b:b3:38:08:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:06:66:20:38:87:12:0C:48:36:93:7F:EF:B4:33:39:38:8E:AD
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e1:93:16:ea:06:48:c8:ad:7a:e5:f9:bb:6d:f3:97:c4:57:
         9e:3e:91:3e:73:ab:ea:ba:0f:3f:a9:09:ea:6e:97:0d:9d:5a:
         da:d1:2d:c2:a7:69:fc:ec:a0:fd:e9:1f:74:68:7f:c3:af:e8:
         04:c3:96:41:db:3c:31:6b:ce:7c:ae:7b:ec:33:9b:31:20:f7:
         ae:a4:fa:08:0a:e0:1f:73:2c:f3:45:a5:10:0d:44:98:a1:b9:
         6c:b9:14:b6:17:fa:25:c2:4d:08:e1:d5:39:de:46:b7:d5:55:
         80:3a:c0:49:27:eb:77:07:d9:c3:48:d3:0e:00:5f:2e:6d:1f:
         65:82:52:8b:ac:6d:1c:6e:d2:b2:82:07:ba:7e:cd:a6:65:dd:
         c0:af:97:e9:21:a3:2c:1c:09:fa:fd:ae:94:17:60:70:6d:a6:
         af:f6:87:24:a8:19:02:b3:5c:4c:84:e2:d3:18:18:3c:b6:b3:
         09:b2:02:2b:40:2d:ff:81:62:fe:1e:ee:a7:33:f1:84:e2:92:
         f3:48:46:5f:07:ac:6c:93:85:f3:fb:ba:9d:c1:7d:f6:6d:16:
         6d:52:61:13:93:5a:4f:f9:15:17:e2:ac:39:3b:ba:d0:df:08:
         96:2d:00:7f:d3:a7:2e:b5:07:f3:1c:b1:94:88:55:a7:6d:cf:
         1d:91:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:51 2026 by rpki-client