Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File:                     IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier:          VfYnZZtv9K+aOyRuu9Hhb7YXFdk2C/DDHlg1rYEIUc4=
Subject key identifier:   A6:E8:A2:61:A2:FF:AA:F9:30:90:B2:11:06:22:C4:AA:8C:03:86:2D
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer:       /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial:       30DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number:          30B7
Signing time:             Fri 04 Sep 2026 15:24:56 +0000
Manifest this update:     Fri 04 Sep 2026 15:24:55 +0000
Manifest next update:     Fri 11 Sep 2026 15:24:55 +0000
Files and hashes:         1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: QkA0MWsItJTpjhJFOZvNAIyR4JkoENgkWGiEKZ52Szg=)
                          2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: +Qp6vsqqY646UGgo2jMWEe+cx9g7miXROpVKh+lI0/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
                          rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12511 (0x30df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
        Validity
            Not Before: Sep  4 15:24:55 2026 GMT
            Not After : Sep 11 15:24:55 2026 GMT
        Subject: CN=6a9ae2c8-6dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:eb:fe:5f:b2:f3:a7:e8:8a:fd:f4:65:81:
                    bd:d5:10:f8:b1:90:d8:e2:bd:18:dc:60:71:11:99:
                    b1:f2:39:8d:e6:64:1c:01:06:d3:5d:df:0b:d3:ac:
                    06:da:22:18:bf:04:9f:40:6d:62:1b:2e:3d:60:13:
                    5a:6e:02:ab:db:0d:4d:2d:f1:a9:05:18:f5:95:df:
                    90:38:bf:31:3b:cd:70:75:1c:e4:8b:52:98:1c:48:
                    43:14:69:20:ed:aa:7f:a2:b0:59:f0:8b:e9:b1:4e:
                    42:1f:81:a1:c0:9f:68:b4:44:37:c3:e2:a2:cb:7c:
                    aa:47:dd:9c:c4:c6:61:2a:4c:3a:58:b4:1e:b8:c3:
                    06:2b:6b:6e:42:eb:52:e5:46:1e:0f:8b:47:53:65:
                    c5:5b:2e:41:84:95:93:c4:ae:1e:ca:db:64:e4:31:
                    9c:39:88:de:77:af:10:0c:fd:e8:06:5a:e7:d8:0b:
                    10:e1:df:16:30:fd:55:47:55:41:9c:d2:ec:d1:86:
                    69:1b:69:25:1e:8b:87:b4:85:d5:89:d9:7d:0c:8b:
                    e4:43:fa:cb:1b:ef:d0:11:de:02:19:ea:c2:8b:ca:
                    03:35:39:d5:cb:2d:5f:48:0c:3e:63:23:e2:af:33:
                    28:54:4d:b4:01:75:48:ae:22:24:40:44:9a:d1:bb:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E8:A2:61:A2:FF:AA:F9:30:90:B2:11:06:22:C4:AA:8C:03:86:2D
            X509v3 Authority Key Identifier:
                keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:65:bd:d1:4f:f3:1d:a6:f0:48:59:42:27:d6:ed:35:56:6d:
         4f:64:7a:e0:4f:52:40:f9:c1:1f:32:d7:1c:06:49:30:3e:23:
         f2:c5:8e:3c:c8:8d:ab:4b:55:00:04:3d:f9:8e:64:20:1f:74:
         61:2c:03:61:40:e0:cd:fc:58:c5:2b:4f:7c:64:df:f0:69:e3:
         87:51:6b:e8:b8:48:3a:0e:1d:22:6b:aa:1a:33:fe:18:38:23:
         cd:bc:50:22:3c:bd:a5:60:47:08:09:1f:17:8b:55:39:c7:66:
         d2:29:28:0e:da:d1:f9:21:f6:28:3d:f1:47:0b:c3:01:42:4e:
         b7:5b:94:dd:dc:08:c0:9f:54:0f:96:09:4b:36:a0:98:eb:d1:
         a2:c0:d5:83:22:10:58:fd:f7:1a:49:e8:76:6b:1f:37:2f:2f:
         32:20:c5:2c:dd:8c:be:d0:a9:eb:58:22:8a:75:5c:78:09:ee:
         82:c8:fa:cf:6a:26:2d:63:0c:50:85:78:1e:2f:14:55:81:62:
         b7:27:5a:23:f2:34:7a:4b:10:b7:7a:06:e5:88:47:8e:79:3e:
         cc:f7:5f:7e:b1:00:2a:f4:69:59:80:cb:48:90:ab:84:61:17:
         64:a1:41:94:bd:db:89:e7:9d:bc:d7:99:55:50:56:fe:bd:fe:
         33:e5:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:46:40 2026 by rpki-client