Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
File:                     igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json)
Hash identifier:          8tGNdSkJixtS/IjTQSIobf3su2ogCPAuA7wDVeAvAc4=
Subject key identifier:   5A:E6:35:03:D9:54:89:A8:17:D1:54:A1:19:DD:24:45:73:54:B5:5C
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Certificate issuer:       /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
Manifest number:          99
Signing time:             Wed 19 Aug 2026 08:05:03 +0000
Manifest this update:     Wed 19 Aug 2026 08:05:02 +0000
Manifest next update:     Wed 26 Aug 2026 08:05:02 +0000
Files and hashes:         1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: sgi9QHZF+qpwVY0Qq3+pyYi/b6ozZm+D5ICv2EvSths=)
                          2: 8F8C10F021B511F192BB9899183D8C67.roa (hash: Qspe0e/jD5ftFW6k2VBzPuJWxT8JG0kniB7v/aJxi4Q=)
                          3: 4B6ACA2E21B511F19C8EC293183D8C67.roa (hash: hTm1hC4z4/h09pd99dIB7y+cP+dNmHyx5jWFuawvpdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
                          rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
        Validity
            Not Before: Aug 19 08:05:02 2026 GMT
            Not After : Aug 26 08:05:02 2026 GMT
        Subject: CN=6a8563af-93fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:ca:8f:e6:1e:4f:b1:a1:08:4b:c4:36:5b:
                    e5:bd:ef:0b:97:9c:2d:5c:b3:f2:7f:41:11:eb:8f:
                    e7:f7:96:78:f4:8e:ad:59:04:8a:64:fc:30:d8:0b:
                    c5:b9:c2:6c:a5:58:bb:bd:a7:43:e7:f3:67:dc:98:
                    f8:b6:5c:94:87:5b:bc:15:2a:dc:47:da:54:07:8a:
                    60:68:d4:58:2c:7a:ef:36:86:3d:a1:8e:fb:6a:74:
                    6c:0e:26:dd:04:64:7c:35:13:92:ac:e8:55:fd:21:
                    cd:6b:fb:ca:b3:29:34:fe:90:57:86:76:b5:18:5f:
                    90:bd:fd:67:db:32:83:2d:1a:a8:94:64:52:8f:c3:
                    2f:bd:bc:d0:33:ef:cc:ce:9d:97:33:ea:f3:cd:12:
                    bd:64:8e:e5:90:ce:2f:a6:dd:25:2f:60:ec:ab:44:
                    e7:c1:7a:6f:e8:35:2f:ae:49:6e:c9:35:a9:76:4c:
                    d8:f8:01:a7:b4:01:f7:cc:ea:dd:0e:2c:27:c8:6f:
                    0f:20:8c:13:8c:51:75:94:e5:2e:84:48:11:09:01:
                    8c:0f:8a:96:c0:d2:bb:fb:86:b7:8f:bf:76:22:cf:
                    db:66:2b:bd:8a:fa:42:04:5d:80:06:be:a5:06:5a:
                    af:fe:b6:f1:23:b5:3e:b3:c1:ea:ad:49:30:88:54:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E6:35:03:D9:54:89:A8:17:D1:54:A1:19:DD:24:45:73:54:B5:5C
            X509v3 Authority Key Identifier:
                keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:d6:4b:89:03:ca:ef:6e:fc:24:d4:85:9c:f5:95:0f:bc:
         ba:25:83:02:17:31:3a:c0:1b:d7:97:2d:f9:ac:a3:60:40:71:
         76:b3:41:36:09:af:9d:59:e8:f0:f5:6a:f3:a9:cc:3f:60:19:
         30:ac:54:b0:72:4b:5d:2a:ed:06:38:db:19:73:57:ba:a0:1c:
         89:de:f4:cd:45:79:dc:6b:14:56:fc:4e:f2:59:62:91:2f:08:
         47:be:7a:5d:1a:d9:e6:e0:84:ec:52:08:14:8f:19:fd:7e:94:
         eb:d0:c2:aa:30:f4:a2:2b:57:78:14:3e:03:65:ac:6b:49:93:
         26:14:9d:15:84:e6:78:68:88:51:ba:e6:6b:3a:48:28:75:b4:
         32:7d:70:f9:c9:48:2e:19:e0:0b:8b:68:5b:18:71:2e:0e:a2:
         ad:0d:75:7d:c7:1c:de:35:9c:b4:df:a0:de:87:c0:54:13:71:
         31:42:c7:c8:b5:32:a1:bf:98:70:89:8b:b6:ce:3f:2f:43:7e:
         93:c1:a3:bc:28:c1:62:75:d1:fd:bd:69:e1:74:d9:16:b8:45:
         8e:1c:24:d7:d3:16:ea:64:07:47:34:45:a2:a6:4b:61:63:56:
         40:07:eb:f2:c5:90:24:af:79:93:2b:97:01:0f:5a:6e:2f:46:
         79:2a:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:29 2026 by rpki-client