Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          yAiOEWsWk1G78+k6suM0R6z1vwvBH+SETcePP3glswo=
Subject key identifier:   EE:6D:D9:D7:81:A1:EC:DD:47:06:69:39:D6:60:77:15:73:A8:F2:40
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       1978
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          192D
Signing time:             Wed 26 Aug 2026 16:24:55 +0000
Manifest this update:     Wed 26 Aug 2026 16:24:54 +0000
Manifest next update:     Wed 02 Sep 2026 16:24:54 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: Yjrt6+IbUsL2kRaybgFxieOv+4mpbz+2GmKypn8ISoo=)
                          2: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: DTA9mxmgUMp5dN7zA4nVO7JGbSY6mzRAlz02SBccYEA=)
                          3: 0274EDA84F7E11F1BF198B9FCD833773.roa (hash: 2b1uQMF4FwcVSTC/yqeg7TBJVN4RXUpB0rp+hLS1BIw=)
                          4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: lCIe/jXkg4rN1KsDsytQ0JDHRzjYIhUkGHJLYrtlAfM=)
                          5: 6E7091EC4F7E11F1B4DF150FCE833773.roa (hash: 0MG67aBScsg4nE8gajlEe8w7/C8r9nokYZHAIWdxuSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 16:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6520 (0x1978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Aug 26 16:24:54 2026 GMT
            Not After : Sep  2 16:24:54 2026 GMT
        Subject: CN=6a8f1357-87a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:d8:3b:3b:02:6d:b5:97:3a:93:bf:c3:e5:
                    df:c0:79:ef:13:64:27:32:ec:89:54:75:d0:fc:a9:
                    7f:92:a8:9c:08:1f:c9:01:a2:04:a4:e8:fe:22:f7:
                    69:62:a4:ab:5e:c8:4e:34:07:c1:de:24:a3:2d:62:
                    a4:b0:c6:43:a1:70:fb:cf:af:4e:15:31:5a:b6:58:
                    2f:31:f6:fe:2f:31:16:17:e5:6e:6a:39:81:9b:64:
                    0f:81:24:bd:cc:3a:6c:75:c9:0a:4b:31:fe:95:2d:
                    24:dd:24:b0:8c:78:32:c2:2d:d9:82:ec:69:53:d8:
                    52:a8:8b:d0:83:0f:e2:c9:93:28:5c:c7:31:58:d7:
                    9d:86:7b:89:78:7a:bf:ef:c4:b1:5b:98:9d:2b:a0:
                    20:8e:82:08:8c:18:48:1a:bb:cf:e9:c8:65:20:6f:
                    fd:54:d9:d7:11:14:ca:4e:b5:ab:3d:b6:84:22:67:
                    bf:3c:73:a2:d2:e7:d4:04:53:0e:9c:08:e9:bc:39:
                    a8:f4:35:8d:6e:8c:76:23:a2:71:c4:0c:e6:d8:c1:
                    9e:bc:6d:e2:8e:83:5f:0a:70:28:4c:ae:99:54:a4:
                    47:0e:28:24:5b:52:7f:4c:76:0c:fc:09:04:74:ec:
                    63:27:7e:f9:67:a5:c3:48:73:40:2d:8c:72:58:27:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6D:D9:D7:81:A1:EC:DD:47:06:69:39:D6:60:77:15:73:A8:F2:40
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:38:21:55:02:9a:5c:7a:9c:f3:d3:8e:f9:d4:c6:0d:9e:
         c3:89:cb:b5:85:0d:32:48:ad:4d:8b:48:ce:b5:f0:91:a4:cd:
         d4:17:00:6d:14:77:75:27:61:cc:22:4d:35:f4:8f:27:7f:e6:
         e6:aa:d9:ca:7d:73:cd:07:6a:ce:0a:f6:00:eb:6c:52:e7:d6:
         67:38:7c:1a:bd:45:9a:6a:b0:7b:2a:fb:9c:ff:78:0f:0e:8f:
         87:9e:29:7d:4f:7d:12:b1:13:ba:40:cc:fb:22:bb:ae:d2:fe:
         d5:0b:ed:29:7e:9d:52:51:b5:05:29:d9:fc:02:e0:52:df:8e:
         ce:f9:1f:d3:20:f2:6a:14:ae:fb:ac:25:d2:d3:b4:70:b7:e1:
         5a:e8:d3:be:69:70:7e:fd:fa:40:44:57:9c:df:36:f8:1a:0b:
         01:a0:72:6f:40:92:ed:bd:3d:90:23:05:9e:63:c3:cc:6f:62:
         f2:cf:9f:77:4a:f0:7b:57:dd:f7:ed:4c:de:e8:cb:7b:97:99:
         c4:80:e6:14:c5:6a:f3:7a:d2:3d:28:80:c0:8f:41:9d:ae:9d:
         98:83:a4:c6:21:16:fc:70:27:7f:ff:60:7b:0c:28:bf:fc:54:
         c9:ae:ed:66:44:58:30:a7:31:20:9b:41:9b:fe:be:f3:f0:b2:
         9b:a0:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:03:49 2026 by rpki-client