Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
File:                     IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json)
Hash identifier:          9A3+AvsQ5KHJq9zb5hBcteMVLjPnxnFeSMgd3msfqLw=
Subject key identifier:   87:AD:7D:07:09:44:7C:8E:DB:60:41:0F:D9:88:A0:28:81:CB:09:83
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Certificate issuer:       /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
Manifest number:          018C
Signing time:             Wed 05 Aug 2026 05:42:47 +0000
Manifest this update:     Wed 05 Aug 2026 05:42:46 +0000
Manifest next update:     Wed 12 Aug 2026 05:42:46 +0000
Files and hashes:         1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: kC0T5l5tcpDK+1Pc4sVUlmgg2WbwCWiNkYLYjyO5ngA=)
                          2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: Z9psePfPHTD1JWqFIEMEnQFvkSAfBuwnGTYYVZWeEbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
                          rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 05:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
        Validity
            Not Before: Aug  5 05:42:46 2026 GMT
            Not After : Aug 12 05:42:46 2026 GMT
        Subject: CN=6a72cd56-04c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:6c:a6:c6:38:7d:da:2e:67:29:16:a5:5d:
                    59:c3:1f:86:95:8b:88:01:da:ef:f3:09:45:4f:d6:
                    ba:b2:8e:be:4f:93:e5:8e:d6:9a:d2:5f:4b:88:5b:
                    73:5a:7d:4f:d2:50:ea:32:23:a7:c6:14:72:ea:01:
                    d2:c7:45:d0:9a:13:35:f5:73:a4:4f:b4:a3:4c:70:
                    39:2e:ab:09:41:71:01:cf:73:95:1f:45:5a:d7:23:
                    e7:14:20:f5:b6:b7:ce:d5:30:a2:c5:3c:75:af:be:
                    c8:12:6b:4b:44:36:da:cc:92:95:6c:c0:2d:f9:fa:
                    80:e0:e1:08:1c:dc:db:90:91:42:b7:ef:c7:7c:03:
                    0b:a1:92:c8:20:c1:d5:d9:24:c1:34:e8:e8:2f:1d:
                    00:c1:c8:d0:69:36:d1:94:28:87:56:a9:c7:09:26:
                    0c:a7:5e:24:38:8b:65:5f:b4:fc:58:68:90:f7:c9:
                    f5:54:73:7b:23:7d:31:7e:38:61:e2:a6:d0:90:a5:
                    bc:11:24:08:5c:c8:ea:6c:6e:3a:c5:2b:81:46:20:
                    e2:8f:18:c1:c0:51:e8:ad:1b:15:a6:04:94:23:bd:
                    99:47:55:39:3b:71:0c:d6:f5:31:64:95:33:fc:49:
                    16:73:a8:15:44:c2:67:a1:5d:d7:74:eb:2b:fb:fd:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:7D:07:09:44:7C:8E:DB:60:41:0F:D9:88:A0:28:81:CB:09:83
            X509v3 Authority Key Identifier:
                keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:f4:0d:ec:c4:88:31:e1:c7:39:eb:b5:71:0e:0b:15:2f:
         60:ab:82:95:d4:4d:e2:0a:37:b8:10:a3:33:17:50:3d:91:ae:
         8f:5e:e6:26:f6:e2:97:ee:7b:c2:65:80:44:46:d9:7b:65:d6:
         7f:bb:4c:09:bf:e5:c4:8d:2c:39:63:8a:8f:ac:03:fb:6c:33:
         07:e0:a9:7f:a4:b5:88:07:80:93:eb:f7:0b:87:fa:1f:6e:be:
         48:6a:ee:4e:dc:1d:6b:d4:3f:a0:22:61:ff:bb:08:a2:b3:e2:
         db:af:3e:8c:0c:d8:fc:e1:43:f1:16:97:04:4c:d5:28:1a:c6:
         aa:49:59:26:1e:be:65:46:c8:b1:02:6c:ce:02:58:d8:fd:68:
         d6:5a:eb:59:98:e2:2b:87:52:b8:02:e7:1e:b0:83:21:b9:ec:
         15:0a:81:dd:1a:83:f5:9f:df:bc:86:b3:3d:8c:bc:3b:0a:a0:
         bd:3f:f4:db:31:93:f2:41:f2:00:ab:4b:80:35:43:68:f6:39:
         4b:74:fa:80:e4:0f:8f:e5:8d:18:b0:c3:d3:49:98:6f:9a:e3:
         85:7c:e4:10:2b:07:f1:c2:54:03:d5:06:6a:8d:82:64:57:9a:
         07:1d:bc:b8:ae:d2:a5:68:e3:3b:c2:44:cf:b2:fd:f9:1a:c7:
         26:9c:45:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 01:30:02 2026 by rpki-client