Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File:                     ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier:          0xEhnml149ahp5QrZiqThLDdFOyV4bSXkKrKFheEWLE=
Subject key identifier:   75:97:5E:F7:65:EF:22:6C:F9:B5:0D:DB:73:BE:33:B0:F7:24:C8:F5
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer:       /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number:          0137
Signing time:             Fri 17 Jul 2026 06:41:07 +0000
Manifest this update:     Fri 17 Jul 2026 06:41:07 +0000
Manifest next update:     Fri 24 Jul 2026 06:41:07 +0000
Files and hashes:         1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: 0N7n870AKcodv93yYB7CQVntI/TwMgWJdE24/DI6i2Q=)
                          2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
                          rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
        Validity
            Not Before: Jul 17 06:41:07 2026 GMT
            Not After : Jul 24 06:41:07 2026 GMT
        Subject: CN=6a59ce83-4503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:6c:a3:16:09:69:50:d4:89:e3:d3:2d:6f:
                    a6:d7:f9:77:a0:b9:27:30:51:30:87:22:fd:bd:e1:
                    a0:5c:e3:d9:4e:fd:02:8c:1e:c6:cc:94:ab:d9:97:
                    f2:83:46:50:df:42:6b:68:a8:35:c1:75:ba:8f:bd:
                    69:2a:25:74:44:c0:ba:b4:d5:8d:72:63:8d:32:f5:
                    71:b2:11:a3:0d:85:ba:ff:ad:b6:2e:b1:69:72:73:
                    e2:a0:bc:94:f5:f0:4e:da:aa:6b:92:6a:7f:6f:2f:
                    74:d3:bd:b5:88:24:71:e7:46:10:f6:d9:fd:ac:19:
                    09:ba:97:d0:85:10:ab:59:13:f5:c3:a4:18:a3:9d:
                    1e:1e:72:1d:e0:96:c2:e2:b0:0c:31:85:16:8e:c1:
                    cd:a5:c8:05:d0:8b:6f:b9:63:19:41:93:19:54:f2:
                    fe:68:5d:7e:83:d1:42:a8:58:98:83:31:54:4e:cb:
                    a9:3a:f1:39:06:e1:7e:ef:43:3b:0c:ac:40:a2:84:
                    f6:d2:b7:80:68:85:08:4f:00:65:6a:aa:09:98:e0:
                    c2:0d:bb:d7:6f:c9:48:89:91:59:ad:49:fa:91:bf:
                    61:bf:b0:3b:e3:73:be:0a:9a:54:0e:1a:02:39:8d:
                    1f:96:b8:f1:ee:48:2b:eb:47:0f:ac:53:be:3c:e4:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:5E:F7:65:EF:22:6C:F9:B5:0D:DB:73:BE:33:B0:F7:24:C8:F5
            X509v3 Authority Key Identifier:
                keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:fc:fb:91:94:31:1a:12:0c:9b:d7:e2:72:45:2a:3e:5d:
         33:b8:22:26:d1:c9:cd:86:5f:b6:80:1e:3d:b1:80:22:18:c5:
         92:5d:60:24:a6:ef:34:1f:c9:c7:82:de:27:89:98:a7:ba:6b:
         79:a2:5f:96:ea:2b:ef:31:d5:f7:ab:1f:5d:f5:1e:eb:2c:d7:
         d0:94:af:5b:50:54:6b:d7:28:98:46:c3:5c:b5:03:62:98:94:
         65:85:c8:4a:30:bc:88:95:25:06:6d:e0:1c:96:3c:58:d3:06:
         11:c7:ae:0d:ce:d4:04:a3:d6:e5:23:c4:40:e3:a4:87:32:a7:
         a4:8d:20:98:4a:83:4b:34:1d:c5:69:39:3b:ba:07:c3:15:20:
         73:9f:b3:cb:6e:b5:1b:9a:3f:bf:54:f1:86:49:61:51:c6:9a:
         51:c0:d9:d3:57:49:a9:17:0f:17:e0:4b:58:f5:ef:d5:0b:47:
         58:3e:57:e0:99:28:f8:c8:67:08:f4:7c:b8:99:e3:1e:b4:ad:
         12:87:99:f3:1f:c5:18:34:80:22:11:db:a1:7a:e2:88:fa:ae:
         9c:75:7a:e8:bd:49:9b:b3:e3:36:1b:f4:6e:9a:24:21:3a:45:
         4a:47:d0:83:c7:f5:c5:09:0c:8d:96:64:eb:37:9a:ba:0c:f2:
         a2:76:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:46 2026 by rpki-client