Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File:                     Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier:          6Yyhlx59v5ZU3mUBOKlE/JsYAcGt01tZpTILBiLHVJE=
Subject key identifier:   FE:07:5A:CD:32:86:01:00:E2:50:58:92:B2:4D:F3:E2:7E:28:4A:48
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer:       /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number:          01A8
Signing time:             Wed 07 Oct 2026 04:34:10 +0000
Manifest this update:     Wed 07 Oct 2026 04:34:10 +0000
Manifest next update:     Wed 14 Oct 2026 04:34:10 +0000
Files and hashes:         1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: IVO9QScPZP9JmCUGY1pUSsCP2apiwo0DCKfCOn98I/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
        Validity
            Not Before: Oct  7 04:34:10 2026 GMT
            Not After : Oct 14 04:34:10 2026 GMT
        Subject: CN=6ac5cbc2-5bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:10:7d:f7:4e:a7:13:fd:29:45:fe:06:14:f7:
                    dd:32:d9:dc:f4:56:93:b3:49:62:d7:75:ea:84:13:
                    be:8d:b5:ad:03:29:f8:00:d7:16:e8:3e:f1:4c:11:
                    a3:80:5f:75:9f:54:5e:8d:1d:cc:5b:a1:e3:e0:28:
                    51:2e:ef:c6:e4:96:f1:ef:85:e1:57:7e:e5:a3:66:
                    7e:73:ec:95:0d:04:f6:aa:b2:6a:b7:bd:77:6f:aa:
                    56:21:41:e6:b5:02:79:a5:e9:fa:9c:b2:1a:dd:ea:
                    f4:5b:79:c5:bd:b6:df:35:f1:c0:e0:04:3a:e7:ec:
                    a2:04:41:19:4e:ca:c8:6e:09:0b:41:db:2c:79:37:
                    f3:a5:3f:36:61:1f:9f:53:1d:68:0d:67:ea:10:f8:
                    3e:5e:14:b4:69:8c:2c:f3:5b:2a:d0:c1:9b:73:49:
                    01:0b:14:9b:2e:7e:4c:6c:2e:77:9b:8a:33:77:70:
                    12:06:8d:a3:9d:da:cb:6c:50:d9:dd:87:40:19:77:
                    60:f2:e4:7c:8b:53:5c:06:00:79:7a:a9:bb:79:42:
                    9a:03:80:41:4a:d3:6b:12:7d:16:49:40:6b:fe:1c:
                    d7:49:f6:99:15:01:ec:f9:38:f3:6e:82:17:cb:d0:
                    4b:82:ee:6f:d4:95:6a:a8:37:8f:b9:18:59:b9:93:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:5A:CD:32:86:01:00:E2:50:58:92:B2:4D:F3:E2:7E:28:4A:48
            X509v3 Authority Key Identifier:
                keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:f4:13:cf:80:60:63:6c:5c:5d:82:7c:19:bb:83:04:4b:
         3c:40:c2:0b:4c:4c:dd:f5:6c:98:9d:8c:79:57:f3:17:a1:05:
         ac:43:4d:7c:af:96:a3:20:b0:10:91:3e:c6:32:70:23:48:40:
         4d:ad:9c:bd:be:ac:d9:db:b8:73:d2:ac:98:43:e4:8a:2f:dc:
         11:eb:67:e1:4a:f3:3e:52:14:2e:07:92:a6:f0:c8:a5:c6:2f:
         48:81:2e:2f:25:4c:9e:b6:d4:59:6e:ab:74:5d:41:cc:2e:dc:
         c8:26:61:74:9f:ab:44:b6:5f:42:cc:86:2a:c3:3d:1f:3f:fb:
         f6:12:e0:6a:11:c2:f7:d3:c8:b5:18:70:a8:b8:52:e1:dd:d0:
         2e:56:47:cc:d6:d8:b7:57:28:21:3f:68:24:76:c5:3e:b4:31:
         47:57:bf:9b:ea:83:00:6e:3a:a8:8b:f4:6d:73:1f:0e:c2:43:
         a2:c7:c7:a4:d3:93:3d:ca:03:72:73:9d:fc:94:de:f3:c7:ba:
         ea:8a:bc:e1:fe:aa:b0:15:d6:03:aa:6c:16:0e:c8:17:bf:34:
         dd:86:e1:cf:3b:78:b1:8c:de:d0:6e:b3:29:f2:b2:e1:10:f6:
         0e:cd:86:d2:49:05:a4:58:6b:c0:1d:17:0c:82:3b:60:18:cf:
         06:e1:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:20:26 2026 by rpki-client