Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File:                     IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier:          fa+X+GVLHOa2H6sc8fXStaFGh7Zrw0yROl8sEIyksBY=
Subject key identifier:   E8:E3:2B:28:7F:7A:9E:E6:F5:6D:F4:28:6D:71:AE:07:E9:E7:2E:5F
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number:          7E
Signing time:             Fri 17 Jul 2026 08:59:02 +0000
Manifest this update:     Fri 17 Jul 2026 08:59:02 +0000
Manifest next update:     Fri 24 Jul 2026 08:59:02 +0000
Files and hashes:         1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: jYXLzNEIPYWnftEA0HQU2uAae5Rr4z6KGID/ElCKp1U=)
                          2: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=)
                          3: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=)
                          4: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: ATMgVxPSynGqWdcAfi8xFi3AYSDzSjTxt/zALkRAATU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Jul 17 08:59:02 2026 GMT
            Not After : Jul 24 08:59:02 2026 GMT
        Subject: CN=6a59eed6-9370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:ed:0b:8b:31:34:ec:c0:ae:67:53:0b:ed:
                    a5:84:1f:e8:73:2d:6f:19:e9:29:6a:61:f0:36:f7:
                    0b:5d:f3:11:36:52:57:97:9d:e7:fb:a7:36:3a:51:
                    d5:0a:25:54:79:af:db:0b:80:82:e2:6f:98:7b:ae:
                    50:e5:70:87:55:65:ad:80:c3:eb:50:2a:a9:e5:73:
                    74:76:ae:0c:d4:fa:24:8b:a4:74:f5:f5:0e:d0:9f:
                    8e:f2:c5:0a:4b:8a:d8:04:c6:00:90:36:58:2b:b5:
                    56:d6:73:c8:b8:b6:1c:93:0b:89:b5:b1:c7:97:d0:
                    a1:5e:42:0b:03:66:62:8e:07:d7:8d:39:d6:ff:3e:
                    07:b6:96:06:81:a3:ce:2f:9f:31:3f:90:7d:dc:78:
                    0a:35:54:84:6c:6f:aa:23:e8:43:dc:23:d6:49:43:
                    53:2b:36:d1:9a:e6:82:7c:68:0e:43:4c:99:4e:25:
                    22:a5:a0:27:0f:ab:c4:4c:c2:f6:c1:75:bf:c4:51:
                    6f:2c:8d:ec:79:33:21:0a:f9:b0:87:1c:80:83:c7:
                    94:27:b5:2d:22:62:17:e0:13:93:7e:26:44:56:4a:
                    cf:63:15:33:d2:cb:d7:10:03:55:bf:4b:14:8f:42:
                    7c:76:52:2e:a7:c7:87:73:c1:45:51:23:00:79:b6:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E3:2B:28:7F:7A:9E:E6:F5:6D:F4:28:6D:71:AE:07:E9:E7:2E:5F
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:33:63:c9:ed:a1:24:b5:c9:52:1b:e0:e4:d0:5b:3b:0b:
         c0:c7:74:8f:30:47:54:d0:15:0f:4f:15:41:c3:d9:59:7d:96:
         0a:2e:67:06:d9:82:e0:f0:6a:f9:eb:ea:08:30:e1:6b:85:ba:
         9b:c4:bd:ab:59:33:a7:e1:be:6c:01:95:93:d3:0d:90:c9:36:
         29:73:34:f6:eb:ed:c5:44:97:ff:b1:54:fe:98:7a:16:60:62:
         ae:93:94:2b:9f:64:3f:ee:6f:a8:6b:af:15:06:97:11:42:a8:
         26:62:1d:21:72:39:c5:b8:32:4f:98:9c:54:a7:02:2d:62:10:
         d5:f5:84:fd:fc:ac:93:c2:59:f4:d3:33:e2:dd:db:46:3e:e9:
         a9:5d:4e:e0:cf:a3:dc:be:b3:00:3a:9e:47:e1:bb:f6:bb:49:
         90:2c:88:3a:ce:dc:0a:11:9f:07:e5:06:3c:e6:76:67:7b:d3:
         27:d2:43:d6:e0:18:45:77:52:1d:c0:cd:75:a1:c0:31:81:19:
         df:73:59:07:64:ac:fd:17:60:f4:eb:fc:a4:60:b9:c9:f2:de:
         5d:ba:58:a2:9c:22:82:09:82:e7:6c:36:af:70:5d:02:df:cb:
         95:37:b5:c4:f1:a6:0a:ec:57:b6:97:e6:c3:28:82:85:24:bb:
         d8:c7:e9:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5NUExMTAvBgNVBAUTKDIyMjY2MjdCNzNFNTE1NDZCM0JENTEwRTBFMkEwREVB
QTgyNTIwNzgwHhcNMjYwNzE3MDg1OTAyWhcNMjYwNzI0MDg1OTAyWjAYMRYwFAYD
VQQDEw02YTU5ZWVkNi05MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAklTtC4sxNOzArmdTC+2lhB/ocy1vGekpamHwNvcLXfMRNlJXl53n+6c2OlHV
CiVUea/bC4CC4m+Ye65Q5XCHVWWtgMPrUCqp5XN0dq4M1Poki6R09fUO0J+O8sUK
S4rYBMYAkDZYK7VW1nPIuLYckwuJtbHHl9ChXkILA2ZijgfXjTnW/z4HtpYGgaPO
L58xP5B93HgKNVSEbG+qI+hD3CPWSUNTKzbRmuaCfGgOQ0yZTiUipaAnD6vETML2
wXW/xFFvLI3seTMhCvmwhxyAg8eUJ7UtImIX4BOTfiZEVkrPYxUz0svXEANVv0sU
j0J8dlIup8eHc8FFUSMAebZDJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjjKyh/
ep7m9W30KG1xrgfp5y5fMB8GA1UdIwQYMBaAFCImYntz5RVGs71RDg4qDeqoJSB4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjk1QS81QTc5NzE0MEM4
RjExMUYwODBFRTM3NzZDNEY5QUUwMi9JaVppZTNQbEZVYXp2VkVPRGlvTjZxZ2xJ
SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lpWmllM1BsRlVhenZWRU9EaW9ONnFnbElIZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njk1QS81QTc5NzE0MEM4RjExMUYwODBFRTM3NzZDNEY5QUUwMi9JaVppZTNQbEZV
YXp2VkVPRGlvTjZxZ2xJSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh8EzY8ntoSS1yVIb4OTQWzsLwMd0jzBHVNAVD08VQcPZWX2WCi5nBtmC4PBq
+evqCDDha4W6m8S9q1kzp+G+bAGVk9MNkMk2KXM09uvtxUSX/7FU/ph6FmBirpOU
K59kP+5vqGuvFQaXEUKoJmIdIXI5xbgyT5icVKcCLWIQ1fWE/fysk8JZ9NMz4t3b
Rj7pqV1O4M+j3L6zADqeR+G79rtJkCyIOs7cChGfB+UGPOZ2Z3vTJ9JD1uAYRXdS
HcDNdaHAMYEZ33NZB2Ss/Rdg9Ov8pGC5yfLeXbpYopwiggmC52w2r3BdAt/LlTe1
xPGmCuxXtpfmwyiChSS72Mfp2g==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:10 2026 by rpki-client