Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
File:                     iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json)
Hash identifier:          o3aFrgWy1nsE0kxWH2oMCXmKRxtArpZdiNmHd3/g7c4=
Subject key identifier:   6F:68:37:91:A6:2F:2E:0A:47:97:EB:0E:43:B9:6B:9B:95:B9:32:BA
Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
Certificate issuer:       /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
Manifest number:          0876
Signing time:             Mon 20 Jul 2026 21:16:01 +0000
Manifest this update:     Mon 20 Jul 2026 21:16:00 +0000
Manifest next update:     Mon 27 Jul 2026 21:16:00 +0000
Files and hashes:         1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: iv1uwIDc2yUCV1IMRFkdFbk6LfOblaa7FDQjsm21DeY=)
                          2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: VJWL5FwR6FzGZwbi+71O98nqwApSQ/wv9sevkMC+DcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
                          rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
        Validity
            Not Before: Jul 20 21:16:00 2026 GMT
            Not After : Jul 27 21:16:00 2026 GMT
        Subject: CN=6a5e9011-1334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:20:e3:b8:12:49:27:6b:0e:ca:fa:24:21:
                    52:70:e2:ae:14:fb:8b:25:77:d2:2c:98:ed:71:4e:
                    66:cf:05:c7:ed:4b:96:9e:67:5f:42:c5:07:7e:c8:
                    6c:ab:2e:6c:01:2b:35:2d:44:aa:8c:f1:36:c7:a2:
                    da:07:43:42:9f:e2:52:0b:b1:45:40:2b:5c:0d:fb:
                    9e:79:10:32:b8:33:c2:fa:ea:c9:b5:c9:f3:16:4b:
                    4c:e5:bc:da:e8:ba:75:55:5e:1a:32:aa:d1:be:79:
                    fc:69:38:dd:97:90:8d:ba:58:76:6d:9c:ff:fd:29:
                    fe:d8:b5:12:59:03:5e:c0:15:38:6a:d7:7a:37:c9:
                    cd:c5:15:dc:42:75:cb:54:38:8b:1e:f8:c9:0a:be:
                    31:2a:e1:81:55:b8:71:57:4b:ac:e0:80:62:58:59:
                    0a:d5:b5:20:9d:5f:9b:32:99:56:e4:7f:32:72:ed:
                    d2:9d:37:65:bd:7b:a0:95:03:8d:4a:76:36:91:2b:
                    35:57:bf:ae:c7:e8:e6:85:e0:2e:db:f5:e5:38:da:
                    3e:47:81:11:11:3c:7a:99:da:f9:a6:98:8c:db:d3:
                    e1:db:23:77:32:17:f1:69:43:0e:31:17:1c:be:01:
                    11:32:26:85:70:10:0c:ba:ce:04:74:2c:26:7d:8b:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:37:91:A6:2F:2E:0A:47:97:EB:0E:43:B9:6B:9B:95:B9:32:BA
            X509v3 Authority Key Identifier:
                keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:c9:b6:1c:c9:c1:09:41:bc:df:b1:7b:98:69:42:b6:e4:
         d4:6b:b8:f0:d2:53:9a:fe:01:0b:89:51:2c:24:2e:33:52:a9:
         33:a7:1d:2c:bd:50:ea:a9:d0:d5:79:82:f8:05:19:7d:75:b7:
         3d:22:2f:f6:23:fd:e5:4d:0c:e6:85:09:1f:8a:27:6e:4a:33:
         76:c3:1c:73:f8:90:12:fe:2d:b2:0b:05:27:0d:22:57:97:00:
         6b:a8:a9:83:85:33:2b:94:51:ce:45:d8:28:d9:4a:7c:c2:64:
         4d:34:f7:9d:88:b1:84:77:3d:e7:57:d1:81:02:32:29:72:cf:
         9c:e6:10:4f:60:11:8e:87:34:12:87:eb:32:df:cc:5e:4b:f4:
         2a:16:53:1b:cc:09:d1:2f:91:dd:bc:1c:99:12:f6:88:f7:a0:
         43:67:f1:33:e8:8f:4d:87:ff:ec:e3:f6:68:d9:1c:34:ae:10:
         f2:04:0e:b2:a0:eb:54:6f:14:e9:c1:1c:a7:93:2d:a9:6e:31:
         1d:8c:60:42:12:52:51:31:f2:fb:12:63:a5:d5:75:49:ac:92:
         af:d7:96:09:eb:51:73:95:95:e2:21:3f:2e:bf:56:d2:f8:ff:
         63:10:a0:39:f8:23:6b:b4:c6:78:0e:c9:05:87:ed:88:4f:df:
         cf:45:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:43 2026 by rpki-client