Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          18clHFXth8wqUxQtRpEN/5P8NUEB2seSQ1L3vd7nDd4=
Subject key identifier:   8D:F1:58:84:0E:9F:B3:D4:DD:AE:31:1C:94:D7:83:1E:DF:C4:A2:2B
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          042D
Signing time:             Wed 07 Oct 2026 00:23:21 +0000
Manifest this update:     Wed 07 Oct 2026 00:23:21 +0000
Manifest next update:     Wed 14 Oct 2026 00:23:21 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: vti9GaEkid8447QnialuXlgK6Dto1FBB0V9R4IBnimM=)
                          2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
                          3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Oct  7 00:23:21 2026 GMT
            Not After : Oct 14 00:23:21 2026 GMT
        Subject: CN=6ac590f9-b742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:13:14:b5:53:b9:c9:d4:29:87:82:06:01:
                    22:b4:9a:13:a2:b6:24:51:39:54:80:6b:b2:a0:4f:
                    b5:82:e5:cb:00:f1:01:3e:d8:89:0d:87:9e:0b:41:
                    ec:33:1a:09:42:58:81:f7:dc:16:f6:fc:fe:5d:e5:
                    6e:fb:ec:5d:09:16:bd:7c:57:52:41:7b:b7:22:19:
                    43:82:3e:42:72:f1:e2:cb:8f:8d:32:ac:37:0d:4f:
                    b1:c0:b0:27:58:2d:63:c4:96:92:07:cd:91:64:4e:
                    d4:1c:a6:4e:1d:10:70:88:ba:e3:e9:01:1d:58:13:
                    32:3e:8f:89:d2:31:8d:18:85:11:25:fb:63:fa:94:
                    52:27:8b:97:18:55:09:c8:70:66:b6:5d:b3:08:29:
                    0e:33:49:cd:b6:9e:c3:30:46:d8:58:dd:34:68:e7:
                    03:8f:be:ff:2d:bd:d1:0c:ea:a0:62:d7:6a:b8:a1:
                    1c:15:be:69:f9:75:12:f9:98:91:16:15:6f:08:24:
                    5d:8f:aa:65:0d:66:75:b1:07:c9:2c:8e:82:38:1d:
                    f7:a3:29:eb:d1:13:0f:44:87:1d:b6:14:2d:4c:f2:
                    a4:f6:6b:17:7a:3e:62:10:16:66:9e:f0:72:c2:99:
                    66:8c:f2:8e:03:33:c2:5b:72:83:b0:ce:24:af:14:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F1:58:84:0E:9F:B3:D4:DD:AE:31:1C:94:D7:83:1E:DF:C4:A2:2B
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:db:d8:f2:9a:82:32:6c:ad:04:f3:f9:79:6b:6d:9b:25:6d:
         74:05:6c:0f:ec:0b:f0:43:b1:c8:df:8e:0f:25:2c:62:8a:bf:
         da:79:20:56:06:55:57:3d:8a:20:a9:ca:60:ae:9e:1d:79:4f:
         ef:e6:c6:bb:99:72:2e:d0:60:04:5f:91:7d:b3:76:a9:ff:38:
         c3:45:6a:0c:80:6d:15:b1:d1:7e:9c:3d:04:26:95:97:9a:25:
         83:28:97:cc:dd:5c:f0:b0:68:1b:d4:63:3f:c4:e0:ee:e2:29:
         22:6f:d8:0b:2d:b1:a5:a4:23:78:6b:80:47:60:85:54:7e:72:
         1d:7a:15:ad:f5:73:05:ce:07:bb:73:fe:90:27:3d:ac:a5:e9:
         43:89:53:f3:01:f2:fe:d6:98:68:8f:72:4d:53:27:00:08:bb:
         5c:07:fa:0b:34:32:ef:a7:b3:24:cc:53:e1:cc:21:68:5d:2c:
         67:cb:93:a6:bf:23:57:de:c9:83:14:07:35:80:91:b8:9c:68:
         20:7a:db:0a:91:90:68:0c:10:be:88:55:00:e5:2b:76:77:79:
         23:9e:50:2a:ff:ad:b3:30:5d:fc:0b:3c:fd:8f:c5:90:05:5e:
         75:51:c2:1f:cc:04:bf:e6:01:19:28:35:7f:e3:60:ad:55:c6:
         3b:5e:b9:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4
NzM0MkI3MjkwHhcNMjYxMDA3MDAyMzIxWhcNMjYxMDE0MDAyMzIxWjAYMRYwFAYD
VQQDEw02YWM1OTBmOS1iNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0oTFLVTucnUKYeCBgEitJoTorYkUTlUgGuyoE+1guXLAPEBPtiJDYeeC0Hs
MxoJQliB99wW9vz+XeVu++xdCRa9fFdSQXu3IhlDgj5CcvHiy4+NMqw3DU+xwLAn
WC1jxJaSB82RZE7UHKZOHRBwiLrj6QEdWBMyPo+J0jGNGIURJftj+pRSJ4uXGFUJ
yHBmtl2zCCkOM0nNtp7DMEbYWN00aOcDj77/Lb3RDOqgYtdquKEcFb5p+XUS+ZiR
FhVvCCRdj6plDWZ1sQfJLI6COB33oynr0RMPRIcdthQtTPKk9msXej5iEBZmnvBy
wplmjPKOAzPCW3KDsM4krxScgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3xWIQO
n7PU3a4xHJTXgx7fxKIrMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2
MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN
VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFtvY8pqCMmytBPP5eWttmyVtdAVsD+wL8EOxyN+ODyUsYoq/2nkgVgZVVz2K
IKnKYK6eHXlP7+bGu5lyLtBgBF+RfbN2qf84w0VqDIBtFbHRfpw9BCaVl5olgyiX
zN1c8LBoG9RjP8Tg7uIpIm/YCy2xpaQjeGuAR2CFVH5yHXoVrfVzBc4Hu3P+kCc9
rKXpQ4lT8wHy/taYaI9yTVMnAAi7XAf6CzQy76ezJMxT4cwhaF0sZ8uTpr8jV97J
gxQHNYCRuJxoIHrbCpGQaAwQvohVAOUrdnd5I55QKv+tszBd/As8/Y/FkAVedVHC
H8wEv+YBGSg1f+NgrVXGO165sQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 22:55:02 2026 by rpki-client