Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File:                     IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier:          y9u/UhPDc2SQzWEw592n0MpxJvEQXR1Nn+RivzQ/RNg=
Subject key identifier:   1F:CC:36:E7:63:61:84:A2:4D:1B:6C:4F:02:81:29:4B:43:BA:DD:31
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer:       /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number:          EF
Signing time:             Thu 08 Oct 2026 22:20:26 +0000
Manifest this update:     Thu 08 Oct 2026 22:20:26 +0000
Manifest next update:     Thu 15 Oct 2026 22:20:26 +0000
Files and hashes:         1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: PTGfKzWKmO04MF7mYo0c85gy9wMOAiy6tAnJ4DO1SVA=)
                          2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 22:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
        Validity
            Not Before: Oct  8 22:20:26 2026 GMT
            Not After : Oct 15 22:20:26 2026 GMT
        Subject: CN=6ac8172a-d0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:19:42:65:af:fd:00:3d:f3:6f:34:ab:81:
                    bd:de:39:81:38:56:29:52:f5:04:11:71:ee:0f:cd:
                    9e:d6:7d:e3:60:84:2c:9b:27:3a:96:9b:d6:8c:b8:
                    f1:b0:8b:2f:67:99:1a:12:cf:84:1b:cf:fa:5f:6b:
                    c9:a4:70:a9:f5:68:75:68:e4:0f:2f:9b:b2:37:75:
                    df:e1:3f:17:c5:d9:33:6c:c4:04:3e:84:5e:cb:db:
                    28:91:29:73:ba:07:78:5b:41:dd:c5:5e:1e:a5:a2:
                    76:c6:84:cc:3a:03:d7:f0:b7:00:af:b0:24:ef:c4:
                    64:5c:d0:91:bb:af:67:17:67:cc:a8:4d:06:19:cf:
                    83:fc:ed:8f:64:d9:d0:9a:1a:9b:ce:14:07:90:af:
                    77:b9:d7:f2:eb:06:5a:a3:46:43:5d:ad:08:64:94:
                    0b:79:51:35:e9:23:de:f0:4d:80:c5:b2:68:a9:79:
                    1b:88:ac:be:17:16:e4:38:41:b4:a8:ff:cb:34:b7:
                    d3:80:73:ec:1b:2a:77:00:b2:39:a9:2d:57:f7:a2:
                    88:60:c2:e3:78:30:f1:ef:66:14:f5:4a:b8:f7:91:
                    09:4a:19:65:5a:77:8c:b6:9d:09:ca:f0:a0:7c:be:
                    f1:66:14:47:3c:55:11:51:84:3c:03:c8:e1:f9:95:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:36:E7:63:61:84:A2:4D:1B:6C:4F:02:81:29:4B:43:BA:DD:31
            X509v3 Authority Key Identifier:
                keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:be:fe:b1:57:f9:f2:61:c3:2d:96:ed:fd:81:0b:7d:81:
         37:98:4c:60:26:d1:45:4d:78:d7:02:89:87:ed:7b:e8:f0:48:
         52:4d:45:fc:e2:60:d0:f6:7e:ed:cb:0f:e5:78:da:d9:1b:d1:
         83:97:d0:ca:0d:5a:15:de:d6:59:c5:e5:b0:8e:67:2d:99:48:
         28:53:a9:fa:2e:cc:f1:7f:78:de:7e:6e:1e:ff:da:3e:9a:99:
         8d:5e:f8:8d:47:99:39:f3:0a:89:2e:b7:3c:65:80:6b:f9:39:
         e3:a9:17:80:51:0d:59:f6:b8:6f:39:5a:68:8c:4a:dc:98:21:
         d8:3a:b9:9a:58:30:51:e1:ef:91:bb:56:f3:88:9c:f8:92:f9:
         b5:36:16:59:b4:85:1e:3a:92:18:a1:0b:80:2b:5c:7d:4e:b9:
         f5:c3:86:fc:dc:3c:07:75:58:2a:50:a0:e4:77:eb:96:e1:1d:
         a6:c8:74:ad:a1:b7:bd:11:3c:0f:86:ca:55:95:ea:f1:86:67:
         2e:f6:fd:68:73:a5:a3:22:d1:23:72:57:2f:2f:b4:b8:d3:cd:
         0e:05:53:0a:85:81:14:9f:a1:90:52:aa:7f:b1:5c:36:43:d7:
         0d:20:71:34:e6:6d:e4:58:16:e5:5d:82:f0:0a:35:b5:47:d8:
         c7:8f:90:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw
MTc4RUEzOUQwHhcNMjYxMDA4MjIyMDI2WhcNMjYxMDE1MjIyMDI2WjAYMRYwFAYD
VQQDEw02YWM4MTcyYS1kMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05QZQmWv/QA98280q4G93jmBOFYpUvUEEXHuD82e1n3jYIQsmyc6lpvWjLjx
sIsvZ5kaEs+EG8/6X2vJpHCp9Wh1aOQPL5uyN3Xf4T8XxdkzbMQEPoRey9sokSlz
ugd4W0HdxV4epaJ2xoTMOgPX8LcAr7Ak78RkXNCRu69nF2fMqE0GGc+D/O2PZNnQ
mhqbzhQHkK93udfy6wZao0ZDXa0IZJQLeVE16SPe8E2AxbJoqXkbiKy+FxbkOEG0
qP/LNLfTgHPsGyp3ALI5qS1X96KIYMLjeDDx72YU9Uq495EJShllWneMtp0JyvCg
fL7xZhRHPFURUYQ8A8jh+ZUtJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/MNudj
YYSiTRtsTwKBKUtDut0xMB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx
REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEQwMC9GMUFGMTA1MjYxREYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZG
LTNaNmhxWGlIZFlCZU9vNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiMS+/rFX+fJhwy2W7f2BC32BN5hMYCbRRU141wKJh+176PBIUk1F/OJg0PZ+
7csP5Xja2RvRg5fQyg1aFd7WWcXlsI5nLZlIKFOp+i7M8X943n5uHv/aPpqZjV74
jUeZOfMKiS63PGWAa/k546kXgFENWfa4bzlaaIxK3Jgh2Dq5mlgwUeHvkbtW84ic
+JL5tTYWWbSFHjqSGKELgCtcfU659cOG/Nw8B3VYKlCg5HfrluEdpsh0raG3vRE8
D4bKVZXq8YZnLvb9aHOloyLRI3JXLy+0uNPNDgVTCoWBFJ+hkFKqf7FcNkPXDSBx
NOZt5FgW5V2C8Ao1tUfYx4+Q3Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:57:01 2026 by rpki-client