Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File:                     IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier:          IX1ieiClgfcLkPSDFo6szLC9rfs6fHTcyGs3zshsIG0=
Subject key identifier:   5F:FD:39:73:17:4F:39:E8:72:3B:66:70:E9:8A:77:D9:F7:09:FA:02
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer:       /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial:       30F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number:          30D0
Signing time:             Sat 24 Oct 2026 15:25:26 +0000
Manifest this update:     Sat 24 Oct 2026 15:25:26 +0000
Manifest next update:     Sat 31 Oct 2026 15:25:26 +0000
Files and hashes:         1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: X6RWWh92Yxwc7BX9tqvY0e2pY5kMQRN/RSGpq4Yz210=)
                          2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: +Qp6vsqqY646UGgo2jMWEe+cx9g7miXROpVKh+lI0/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
                          rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12536 (0x30f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
        Validity
            Not Before: Oct 24 15:25:26 2026 GMT
            Not After : Oct 31 15:25:26 2026 GMT
        Subject: CN=6adccde6-c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:f5:e6:cb:0a:1a:44:c7:0d:8b:1e:b0:93:
                    b7:52:ec:f4:e7:75:36:06:8d:b2:b0:58:3c:84:e2:
                    44:20:7f:2a:2c:3e:13:04:43:8d:1a:41:89:73:fd:
                    7a:11:64:84:48:52:f3:60:4e:b4:63:18:b3:98:b0:
                    58:ef:21:f2:e0:57:98:87:ff:b1:b4:43:eb:6f:71:
                    41:20:31:e4:16:8f:ac:ea:a8:69:0d:cc:c6:b5:f4:
                    53:0d:5c:79:cf:e9:8e:57:26:1b:87:d2:47:94:49:
                    43:b6:9a:12:8f:fc:40:72:17:bf:ce:95:80:5a:25:
                    e1:86:62:19:62:c1:fd:a0:05:c1:91:c4:4c:a5:17:
                    e9:20:49:98:3b:0c:a2:c7:6e:e2:4b:84:4d:03:96:
                    9b:ac:64:fe:94:ef:9b:39:87:4e:95:cb:d0:d9:4d:
                    ee:86:87:09:93:d5:ae:4c:8c:cf:b9:66:fb:31:dd:
                    7d:42:45:08:24:2f:65:89:d9:4e:98:91:d1:41:bd:
                    b0:98:a7:bb:5b:e1:80:0b:e2:60:42:20:00:86:bf:
                    02:0b:2a:2e:af:88:9f:35:1d:6d:fd:c5:78:ae:6e:
                    07:22:3a:5e:5f:f6:2a:ba:69:52:6f:37:1d:dd:e9:
                    23:65:f2:0a:07:75:25:81:e5:15:62:4e:9a:2d:96:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:39:73:17:4F:39:E8:72:3B:66:70:E9:8A:77:D9:F7:09:FA:02
            X509v3 Authority Key Identifier:
                keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:b6:cb:8d:15:50:de:e6:e2:57:c9:6b:eb:83:14:af:7b:
         0f:07:a2:35:52:92:9d:db:14:df:6d:09:39:b9:a9:f8:cf:ae:
         aa:b4:f5:8f:8f:41:e4:9f:cc:52:94:1e:52:24:3e:e1:65:e8:
         08:e9:a9:9b:f5:8b:bf:bd:4b:6f:4c:cd:ed:54:f5:37:ae:32:
         33:d3:12:d9:2b:ea:55:d6:64:6a:7a:d8:52:f9:02:94:44:6d:
         89:89:32:6c:cd:4e:fa:c1:34:99:7b:79:bf:cf:49:9d:89:09:
         79:75:0a:09:5a:6e:b5:15:e7:c9:60:3a:6e:fd:59:ee:33:a6:
         13:9c:8e:15:4d:10:d5:02:1d:aa:a8:db:1a:ef:16:18:46:3c:
         f4:f4:a9:41:d9:b4:fb:25:fc:fd:9a:65:96:d1:0a:e5:9e:db:
         c6:da:f6:91:85:8e:e3:52:ad:60:40:83:04:9c:92:aa:80:6d:
         b3:8c:bd:ad:f4:bb:86:0e:2f:94:9b:85:29:f3:fb:b5:d7:81:
         40:bd:8e:0c:64:7a:e7:08:38:40:a3:8f:4a:9f:74:ff:2a:db:
         0a:bc:1b:12:03:61:8e:9e:9f:51:18:b4:0c:45:0d:fb:9f:82:
         86:93:dd:b0:b5:12:8f:e2:77:c5:49:eb:0f:9f:68:f2:3c:ab:
         92:62:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:18:51 2026 by rpki-client