Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File:                     IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier:          YPHVUNWewPGiCdxb6TUadltESO0kjedKitxWf2eUmpQ=
Subject key identifier:   00:A6:74:63:22:63:16:A8:1E:33:24:DD:B4:15:91:D5:75:51:F8:0D
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       35AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number:          357C
Signing time:             Sun 26 Jul 2026 14:20:17 +0000
Manifest this update:     Sun 26 Jul 2026 14:20:16 +0000
Manifest next update:     Sun 02 Aug 2026 14:20:16 +0000
Files and hashes:         1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: 6uI/9aJD97sK1jWee3Aiz+S8WiTY+CymVYCiA44sGxo=)
                          2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=)
                          3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=)
                          4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13743 (0x35af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Jul 26 14:20:16 2026 GMT
            Not After : Aug  2 14:20:16 2026 GMT
        Subject: CN=6a6617a1-b736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:63:b4:da:f1:16:de:95:c0:84:43:4e:38:
                    ac:63:f7:64:b0:a4:eb:81:58:a7:c5:a1:7a:4f:36:
                    68:9a:b6:54:55:1b:d3:ba:cb:f8:90:2a:34:93:d3:
                    f9:ec:e1:c6:a5:82:6f:bd:cf:c3:ab:bf:9d:44:95:
                    8a:ef:03:26:fd:75:2a:4d:36:87:ce:1a:84:88:9a:
                    22:86:df:9d:3b:46:0a:ab:35:14:40:ed:09:e6:0a:
                    91:69:69:06:c2:1e:a7:2e:49:8b:d7:91:c8:d4:84:
                    e5:ed:1a:6d:c5:7c:9d:de:29:17:8b:32:e0:7c:74:
                    47:a1:24:1b:5a:95:67:69:fa:1a:76:b1:62:87:bd:
                    ab:d1:fe:ed:f5:62:a6:58:5d:7c:68:4e:d6:e9:e1:
                    d9:88:2d:d6:09:0f:6b:9e:2e:aa:b5:dd:83:18:b1:
                    0c:24:e9:e8:c4:26:21:a1:4b:36:69:14:7f:f6:be:
                    c8:9d:76:f9:a7:c4:13:50:40:93:fb:4f:a0:32:b7:
                    25:0d:bf:d9:a5:0f:7c:92:06:bb:0d:9d:24:db:9d:
                    2c:e0:af:d2:2c:fa:84:15:49:15:52:b3:a5:ba:98:
                    47:06:1e:44:c9:d2:20:49:f8:9d:6b:4b:61:4a:ac:
                    78:b9:1c:88:bc:5d:e0:37:fe:c0:9a:b4:84:0a:e8:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:74:63:22:63:16:A8:1E:33:24:DD:B4:15:91:D5:75:51:F8:0D
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c0:49:7a:39:38:c2:63:f7:bb:80:11:62:07:e1:e4:68:7b:
         5c:bd:9d:57:10:ce:5c:9d:34:95:cd:c1:18:ad:56:4f:72:b9:
         5a:0b:e6:6e:cc:35:08:93:1c:32:a8:15:d9:71:92:3a:d3:eb:
         38:92:f1:af:2f:2d:0c:f6:f9:9d:11:4e:fc:85:99:31:6e:85:
         2a:9a:fd:69:cf:62:a6:f0:88:56:0a:e0:58:23:ec:92:f0:ae:
         77:48:e2:94:ad:de:e5:d0:b2:25:5f:f6:11:30:82:60:51:44:
         93:86:dc:be:97:42:dd:b7:bc:69:c8:e6:5a:21:e3:91:1a:85:
         3a:c5:c8:13:30:85:ce:00:c8:10:e2:84:e5:92:c4:f1:7e:0c:
         2d:b9:97:d6:cd:5e:fa:f8:8e:ec:e7:35:e9:d6:6c:10:b9:34:
         63:fe:e3:57:83:c2:f9:6b:e6:e5:ee:53:bc:b2:6c:38:88:69:
         52:5f:f9:88:86:34:fc:94:9d:7f:62:7d:ba:bc:22:89:9b:16:
         d2:c6:df:97:17:19:9e:be:4e:69:6b:5f:d3:5c:f4:90:c3:d4:
         9d:d1:08:16:79:d6:07:fc:b5:a1:aa:11:57:ad:51:cd:7e:f4:
         1e:2c:97:d2:fe:8e:91:0c:a8:de:86:9e:f3:ae:b7:5d:a7:22:
         e6:0e:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:36 2026 by rpki-client