Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
File:                     iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json)
Hash identifier:          tuU5EwghSSc9wpQzpuc36mejbAVxw6EY8p009eBynas=
Subject key identifier:   34:23:44:F2:EA:2B:1D:FF:FB:F5:F2:A6:99:F3:40:93:A8:1C:04:C0
Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E
Certificate issuer:       /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
Manifest number:          0166
Signing time:             Sun 05 Apr 2026 04:21:51 +0000
Manifest this update:     Sun 05 Apr 2026 04:21:51 +0000
Manifest next update:     Sun 12 Apr 2026 04:21:51 +0000
Files and hashes:         1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: dkonuVroaFETN7ny3GpVw/eH4EuOyRCBtG3qVMxm8JY=)
                          2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: 0MC3M/D9hdEqrZPQotxdyqsZrkxdxXCIcqMyB/RgjTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl
                          rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
        Validity
            Not Before: Apr  5 04:21:51 2026 GMT
            Not After : Apr 12 04:21:51 2026 GMT
        Subject: CN=69d1e35f-eaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:ce:4c:3a:e2:47:aa:63:57:31:e2:25:90:
                    c3:b5:67:9e:b8:df:3f:cf:be:81:e5:3a:61:05:13:
                    86:c4:a1:82:a1:e3:96:fd:a8:a0:98:d0:5f:64:d2:
                    08:98:21:83:2b:79:27:00:7b:3f:e7:5f:cc:3a:94:
                    dd:65:f8:ac:34:6c:93:7c:0b:9a:9e:07:df:c2:14:
                    6f:79:a4:4b:dd:09:9c:9a:1c:f8:73:70:bd:cf:aa:
                    f7:7f:55:f7:61:99:cf:64:b1:0e:3a:bb:da:42:78:
                    fd:0a:01:d1:57:39:6f:21:51:29:28:e1:b0:98:1a:
                    77:38:3f:d7:b3:ff:ca:ef:25:5f:78:50:d9:e8:c1:
                    88:62:95:64:19:ea:dd:61:fa:45:1d:67:49:21:63:
                    aa:3f:3c:0b:57:14:ec:2c:7c:28:f6:8e:e5:7c:13:
                    d3:55:2e:ee:de:0c:3a:8b:a9:03:f7:9c:a9:73:af:
                    4b:c4:a0:14:94:a8:a8:6c:bb:3b:99:dd:f1:9d:2a:
                    90:86:68:14:36:0c:5f:89:82:09:0a:7c:33:80:fb:
                    3b:0f:38:a6:25:e1:b3:8c:39:65:6b:2f:c6:a1:95:
                    b2:14:10:78:c8:28:c3:0b:86:94:65:78:0e:42:3f:
                    e5:41:b9:39:cb:a5:06:84:aa:19:bc:9a:db:68:b6:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:44:F2:EA:2B:1D:FF:FB:F5:F2:A6:99:F3:40:93:A8:1C:04:C0
            X509v3 Authority Key Identifier:
                keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:82:25:48:c5:9d:25:22:64:2d:eb:e8:79:22:35:0d:3b:
         0f:e0:e3:b5:88:89:45:6a:c4:0f:ba:aa:cc:e0:62:5e:26:38:
         f1:5f:13:5a:91:f7:98:31:04:b1:15:35:ef:c9:ad:80:3c:ae:
         eb:44:df:66:db:57:a0:da:e5:99:79:26:f3:2e:2b:04:4c:f1:
         bb:17:16:b0:65:cb:33:c0:1f:e7:4a:e3:fe:c7:11:65:77:e4:
         ea:01:93:cb:07:aa:f1:f3:85:cd:2b:31:6f:78:af:02:06:b3:
         48:3f:8e:da:f3:b6:04:b2:67:15:94:86:cd:86:72:c7:5e:2b:
         f2:ca:c7:cd:67:2f:59:a9:20:5d:c6:46:0e:00:55:a3:b6:25:
         5c:f5:79:81:df:c4:aa:92:ca:1a:35:cc:1f:4d:38:a4:15:4c:
         85:c0:e9:49:80:12:e1:56:7d:53:eb:1a:4a:cb:dc:0d:cc:34:
         a6:41:96:a7:4f:7f:1c:97:9c:31:0c:9c:fc:25:08:23:41:f9:
         98:b7:96:df:00:11:80:2f:07:4d:91:5d:53:c8:3d:2d:05:6d:
         6f:3b:e0:36:68:b8:39:64:45:e4:98:bf:d4:e3:fc:8e:ff:f8:
         3c:da:59:3b:cd:25:91:4a:4a:33:aa:09:12:09:05:81:76:6c:
         6e:f9:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:36 2026 by rpki-client