Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          cWSIxByt8t3AKzKuGt9PrC5o+m7iGqOzUsSK8ZxbnTw=
Subject key identifier:   1D:B6:6F:6F:17:B2:DA:8B:F7:F4:1B:4E:4C:33:DB:F9:6C:2A:70:36
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       19AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          1997
Signing time:             Thu 16 Jul 2026 16:27:20 +0000
Manifest this update:     Thu 16 Jul 2026 16:27:20 +0000
Manifest next update:     Thu 23 Jul 2026 16:27:20 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: htN9CpxDge4ECW3UmdK1l8LMfw1IuoLzA3yvy2ldmlk=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: FF3AIYHnenSUuGagUXAW6Yxw88+RVwJAWvdOH/bQVLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
                          rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6571 (0x19ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: Jul 16 16:27:20 2026 GMT
            Not After : Jul 23 16:27:20 2026 GMT
        Subject: CN=6a590668-5b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:2c:46:1d:54:4d:59:d6:e2:f2:98:e6:9e:
                    e9:a9:b4:42:f9:86:45:57:11:c3:8d:b8:cf:e8:e8:
                    00:8c:4b:6b:db:97:6c:40:0c:87:3a:0f:7b:aa:44:
                    fa:7f:2f:a3:d6:7c:00:4c:20:ca:82:c9:aa:19:19:
                    8f:4b:08:7b:0a:12:00:09:72:57:f6:b6:fa:db:e9:
                    0b:9a:b7:9a:a6:d4:6a:e3:ef:ac:6c:86:75:84:b1:
                    79:64:95:57:d4:15:a6:08:6f:36:d8:3b:e8:d3:19:
                    d9:02:49:21:62:b2:4b:d6:d2:29:41:7a:7e:50:8d:
                    9e:90:e9:bf:44:75:a9:14:ac:a3:c2:3c:b2:ea:59:
                    9c:6f:8e:db:f7:75:84:48:96:a8:c7:4f:32:a4:8f:
                    c3:50:6c:6b:84:5b:f8:cf:70:aa:7b:46:c6:82:8a:
                    ee:19:6b:53:73:d6:d2:97:89:45:39:87:b5:66:73:
                    5c:9e:6a:16:ff:16:ae:a5:20:6b:29:ee:a6:58:85:
                    7e:70:04:b7:83:c0:71:48:76:53:a4:4e:0e:48:8c:
                    f1:c9:25:c8:64:b7:15:e5:e7:ce:8e:74:15:5c:3c:
                    24:51:82:e1:7d:92:f2:be:32:6d:b4:50:cd:e2:32:
                    da:26:8c:49:01:4c:d1:00:c6:ee:e1:28:5d:e9:09:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B6:6F:6F:17:B2:DA:8B:F7:F4:1B:4E:4C:33:DB:F9:6C:2A:70:36
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:58:18:dc:65:95:f3:88:90:c1:4b:02:fc:47:c6:9c:bc:
         a0:fb:0c:21:3d:e6:5f:98:62:1f:17:9b:13:de:2a:ad:c9:b9:
         47:ce:e8:91:07:0f:30:8c:8a:b6:9a:17:56:94:1a:a6:91:5b:
         f2:19:bd:37:bd:83:81:63:9f:4a:67:1f:32:bf:c1:fe:ab:74:
         10:11:44:9d:70:9b:d5:0b:fb:6d:1d:0e:7c:b4:5c:83:b3:9f:
         79:65:45:a1:de:f1:cd:fa:87:03:7a:ea:51:dc:84:df:41:46:
         5e:fd:23:78:ab:95:3d:bf:b6:90:e6:3b:47:4b:9d:2f:5f:d1:
         fb:25:6f:e2:b7:86:0d:46:be:db:b7:c4:dc:2c:28:97:90:14:
         e3:1b:1e:94:24:6d:94:00:ca:de:7c:1f:c9:aa:a4:0d:70:fe:
         77:5a:85:f2:8c:88:6d:8f:d3:e7:cd:f8:91:cf:48:d7:5b:89:
         90:e3:95:83:36:cd:fc:88:11:74:dc:a4:6a:84:92:69:0c:67:
         95:45:00:cc:5c:89:e4:8f:f4:e2:ba:66:30:e8:bf:0c:62:1c:
         f8:81:be:d3:2e:d1:a5:e4:fb:17:88:7e:e6:f3:05:20:5b:ed:
         5f:64:f7:99:81:6b:c3:af:6e:cc:0c:b2:55:03:3d:c2:c2:58:
         35:5e:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:29:14 2026 by rpki-client