Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File:                     IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier:          x5fjP7I9yPG6DBhfnMTIe/mljN4W66DmWasAyqWbc8A=
Subject key identifier:   5E:29:9A:8E:41:A4:6D:92:00:43:5C:29:91:4B:CE:75:44:44:8E:83
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer:       /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number:          C4
Signing time:             Thu 16 Jul 2026 22:44:09 +0000
Manifest this update:     Thu 16 Jul 2026 22:44:09 +0000
Manifest next update:     Thu 23 Jul 2026 22:44:09 +0000
Files and hashes:         1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: 2sULRJJ+GtquT11ZegsXtwMl9aj30OVFXWxQOlvVR4M=)
                          2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 22:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
        Validity
            Not Before: Jul 16 22:44:09 2026 GMT
            Not After : Jul 23 22:44:09 2026 GMT
        Subject: CN=6a595eb9-dfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:d7:71:8c:fd:ec:cc:71:56:43:99:7d:e2:
                    d0:21:a2:1b:38:5a:39:27:e7:67:74:08:44:ec:a9:
                    5f:c6:ae:69:d5:79:65:a0:25:97:08:dc:97:e3:43:
                    6b:1d:ac:9d:53:67:a8:d2:7c:74:a6:1c:9c:ab:ea:
                    93:8f:98:14:78:78:f4:24:53:f6:ca:00:b9:3a:63:
                    5e:87:60:1a:e3:ae:f2:28:2a:5d:04:61:4f:b0:99:
                    7b:0b:16:93:2a:0a:e5:03:f8:6f:04:12:62:92:bb:
                    57:1e:56:f1:28:da:3c:50:8d:27:e5:3e:db:c1:f5:
                    41:d1:98:5a:1c:1c:f2:b9:d0:3e:c8:bd:70:c6:b0:
                    d3:d2:6d:5b:49:d1:5a:fe:29:3d:db:72:ea:65:b1:
                    46:ee:5d:f4:90:fd:17:30:d5:44:78:e9:40:f3:bc:
                    dc:9d:2d:6e:7e:65:51:cb:81:0b:7c:97:a5:b6:71:
                    dc:22:81:03:9b:85:cf:bc:e1:7a:17:7b:6b:13:f9:
                    8a:bc:66:b2:bc:79:cc:fd:48:55:95:31:a9:0f:c1:
                    77:ba:5a:28:9e:00:b5:3f:25:cc:54:55:ca:79:43:
                    1f:2a:ea:6d:ca:2a:d4:29:dc:47:48:0a:9e:af:4c:
                    5a:53:af:f0:56:ba:7a:c4:eb:2c:4f:23:fd:30:37:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:9A:8E:41:A4:6D:92:00:43:5C:29:91:4B:CE:75:44:44:8E:83
            X509v3 Authority Key Identifier:
                keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:ac:91:54:2a:f0:03:14:7b:d1:15:0c:39:4f:0d:d9:a2:
         20:60:d4:d1:a4:61:a9:24:92:cc:57:e0:4a:3b:37:f3:c8:35:
         b3:76:2c:d1:ce:e8:67:c8:7d:9c:f0:46:17:79:68:cb:17:03:
         70:f6:86:19:a4:df:2d:24:05:bf:fa:a5:ea:7d:ac:e5:41:12:
         27:87:d1:58:89:bf:c8:9d:3b:d5:c7:8a:60:34:72:24:ca:4d:
         1b:d7:56:78:a9:3a:db:66:d3:40:64:37:20:51:b5:c3:63:31:
         4f:aa:90:8e:22:a9:e2:10:eb:dd:ef:7b:be:a3:a7:41:91:ec:
         b7:47:31:69:24:4f:65:a3:b5:bb:ce:da:83:4c:c7:4e:03:f3:
         77:67:64:db:76:75:04:df:a7:e9:b4:64:b4:35:25:c2:5a:9b:
         17:0f:ab:e3:e5:66:7a:37:e6:d3:72:cd:34:de:1e:72:82:f4:
         d2:d8:65:8e:d8:86:46:96:15:1f:bd:15:57:8e:ce:95:0f:f3:
         37:59:71:f6:57:43:09:fc:be:d7:79:b4:40:7e:1c:8a:41:51:
         d5:98:49:f1:e8:d7:72:a3:62:e6:ce:eb:da:3a:eb:93:cf:2c:
         2b:89:41:e4:20:95:95:0b:aa:d5:37:31:73:97:73:83:25:cf:
         a5:59:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:10 2026 by rpki-client