Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          hNh00q8eWyfgEf7xIcSLH2Lj/4Gua7wcKM96+YbWBx4=
Subject key identifier:   7A:4B:AA:C7:52:56:DF:76:D1:FB:1F:5B:A1:37:EB:31:09:FB:FC:9E
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       0421
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          0414
Signing time:             Wed 19 Aug 2026 00:42:33 +0000
Manifest this update:     Wed 19 Aug 2026 00:42:32 +0000
Manifest next update:     Wed 26 Aug 2026 00:42:32 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: x7xquIHoJTgayApyuRlFPwcKR+cykGZPilC+aetMoT8=)
                          2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
                          3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Aug 19 00:42:32 2026 GMT
            Not After : Aug 26 00:42:32 2026 GMT
        Subject: CN=6a84fbf9-16eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:32:e8:53:e5:0e:aa:0d:5e:2c:75:e7:bb:
                    30:bc:85:fc:05:88:62:61:85:21:a5:50:dd:bd:7d:
                    a0:b3:20:a6:93:45:80:2e:a8:ec:3e:c7:52:e0:a7:
                    b1:01:e9:83:88:54:3e:cf:0a:7a:c2:b2:a1:6a:55:
                    c7:34:36:39:59:dd:8c:20:93:45:86:ca:b5:e0:aa:
                    8f:72:7d:62:d8:39:6a:88:a8:03:87:4e:3f:9c:ef:
                    78:1f:a7:23:ef:7d:03:e8:1e:f4:a6:e8:5d:cd:a0:
                    34:bb:9f:d1:24:2c:35:68:88:9e:00:1b:dd:3e:90:
                    43:b6:d2:89:fe:80:3a:6d:4d:42:39:fe:61:ef:57:
                    8f:22:6a:ba:f3:54:72:79:65:0a:b6:9a:fd:55:61:
                    e4:05:b0:7d:ba:a2:0d:17:b0:5c:c8:a9:61:61:76:
                    d3:fc:6a:4f:95:2e:71:73:40:4f:d4:f0:dd:af:fb:
                    f0:1d:aa:4c:56:70:af:3e:40:be:59:68:31:11:67:
                    12:3e:45:70:88:e0:63:80:c6:cf:8c:c5:c4:ea:11:
                    57:c9:4c:fe:b8:f9:2e:0d:3f:92:e4:a4:53:45:a4:
                    7b:df:6f:da:18:55:90:bc:c5:8d:b1:d4:59:6d:2c:
                    33:b1:63:54:19:93:e0:69:00:17:5a:22:69:7b:27:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4B:AA:C7:52:56:DF:76:D1:FB:1F:5B:A1:37:EB:31:09:FB:FC:9E
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:97:81:cf:e6:25:a6:e4:ce:d3:cb:19:df:d9:7e:6b:41:84:
         33:9a:81:88:ec:8b:c0:dc:ab:12:d6:d8:41:05:0c:f8:76:0a:
         d8:db:99:ca:59:5a:5f:37:1b:f3:39:6c:27:e8:5f:7e:62:d9:
         23:15:94:69:7a:6e:6f:4e:f5:62:d0:2c:ff:49:65:c8:63:88:
         5a:2b:59:4f:2a:91:42:00:b9:af:3f:42:bb:01:da:5c:63:6a:
         5c:45:12:7e:df:46:23:85:55:90:56:c8:4a:e6:44:91:65:f1:
         23:fc:6c:27:bd:42:0b:7a:08:77:ba:d8:98:3c:39:d5:8b:f4:
         31:77:53:ea:58:d2:b3:c6:0c:48:1d:c3:ee:30:46:da:f6:a9:
         91:2d:50:c4:a5:16:19:00:48:d3:8d:13:99:b3:ca:b6:c0:5e:
         13:c9:c0:e9:86:d2:67:e4:55:cf:e4:48:21:0e:b7:8d:dd:96:
         6e:be:80:3d:d7:0c:e6:3f:03:1a:43:32:10:b7:06:00:fa:4c:
         2d:70:ec:5d:de:0b:69:ce:92:48:8c:6e:e4:96:59:23:d5:d2:
         98:47:84:45:f1:c4:28:87:5e:61:72:88:ad:a3:00:0c:eb:fa:
         f9:53:00:43:1e:99:e5:d6:0f:d7:d5:68:da:ca:f8:9a:20:a0:
         b6:2d:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:30 2026 by rpki-client