Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File:                     ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier:          mJDQWhUY+xVN015y2WR0jU86zVMjodlK2UyuOf2jZww=
Subject key identifier:   02:2D:32:67:00:B6:4D:46:DC:F6:E7:6D:A0:67:42:C1:F7:88:22:F3
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer:       /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number:          F1
Signing time:             Tue 03 Mar 2026 05:56:43 +0000
Manifest this update:     Tue 03 Mar 2026 05:56:43 +0000
Manifest next update:     Tue 10 Mar 2026 05:56:43 +0000
Files and hashes:         1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: 7eLP5fko/+YQ+ieuLdA8SnT3OSYK5BoKZAA5hckIpiY=)
                          2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: NpfMdIbhsOVnDHFHuWg5bIrLEGDX/gm1pUFVu8n7a6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
                          rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
        Validity
            Not Before: Mar  3 05:56:43 2026 GMT
            Not After : Mar 10 05:56:43 2026 GMT
        Subject: CN=69a6781b-1c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:59:4a:a9:9c:16:6e:f5:e2:f8:5e:42:76:
                    7b:d6:6e:dc:00:42:e9:ef:7a:b9:7c:95:a0:d4:ed:
                    7d:76:0b:ae:08:05:9c:97:6d:09:fe:db:aa:5e:3b:
                    c7:d6:17:70:72:09:59:59:69:a5:66:fd:17:e2:50:
                    0d:c9:5f:43:64:6f:d7:41:5b:65:27:74:76:e5:52:
                    1e:b6:75:78:09:a8:1e:22:ae:65:f1:4c:30:4d:c2:
                    d2:39:f1:70:40:14:fa:49:a7:a4:3f:04:70:6f:56:
                    2b:dd:a5:e9:3d:a0:26:db:15:d6:76:9e:7e:60:c9:
                    7e:5b:57:c2:c1:4a:c6:f8:3c:e0:18:2d:fd:1b:7f:
                    e1:c1:88:cb:0d:34:00:86:a1:3d:f4:26:7d:a6:73:
                    46:02:d6:d0:9b:20:97:91:02:33:0f:71:f4:79:7a:
                    18:72:99:ea:1a:fc:1d:3b:a7:96:b5:2e:48:a6:01:
                    08:1e:f7:a6:15:7d:dd:20:b9:d7:03:3e:17:03:61:
                    42:17:51:05:b4:5f:55:ac:31:20:a5:fa:32:b3:fc:
                    6a:bb:cb:e8:aa:12:6b:8c:bc:25:ab:54:2a:c5:ec:
                    29:b5:5d:29:ee:86:c9:2b:78:08:f9:48:4a:b1:ab:
                    47:5e:83:7b:f1:4d:a5:50:3f:2b:e0:01:25:5f:ba:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:32:67:00:B6:4D:46:DC:F6:E7:6D:A0:67:42:C1:F7:88:22:F3
            X509v3 Authority Key Identifier:
                keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:11:83:05:7b:cd:a0:98:93:ae:e3:58:8c:e4:d7:0f:0f:
         e8:7b:2b:95:6a:a8:52:1c:f8:d4:c1:15:3d:d9:d5:43:94:23:
         fc:91:97:bd:cf:a3:c2:49:d5:28:43:28:68:89:b9:61:28:87:
         04:48:40:60:d1:f7:8d:e8:32:89:29:80:29:f7:96:f6:20:a9:
         6d:fe:2f:29:db:70:97:eb:b2:21:20:16:da:58:45:e8:47:2f:
         ec:f3:1b:2a:09:dd:55:bb:3c:68:3f:81:5b:86:1f:22:6c:c2:
         41:d8:cb:79:f9:43:e9:18:7f:1d:d7:09:98:1d:3f:87:d6:6b:
         fa:8c:a8:ac:68:51:67:91:bf:14:00:5f:27:5d:3e:6c:6b:cc:
         b6:22:7d:e9:e5:44:d3:5c:3d:ec:cb:e6:9d:ea:6b:7a:51:c7:
         2b:7a:ad:39:cd:b8:41:84:56:15:c5:7e:d6:84:a9:e2:55:eb:
         24:f0:b7:7a:24:0a:84:87:1f:4e:e5:00:38:6c:6e:57:70:79:
         18:cf:b9:20:a3:9c:ec:4c:c2:99:bf:a1:36:b3:34:ae:f7:05:
         90:10:eb:17:fd:eb:de:9e:8d:49:6a:69:c7:1c:f7:24:45:c8:
         ff:66:0d:9b:ed:d1:fe:3e:b5:51:df:78:e2:29:47:be:60:b4:
         c5:02:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:30 2026 by rpki-client