Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
File:                     -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json)
Hash identifier:          79DPfBFCrO6sGOP7N1+fMHc5u9lcYtCt0++OPs3+MD0=
Subject key identifier:   3F:53:CB:4F:80:67:51:EA:4A:04:E8:C0:63:BF:08:E1:72:A4:D4:90
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Certificate issuer:       /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
Manifest number:          023A
Signing time:             Sun 09 Aug 2026 02:09:54 +0000
Manifest this update:     Sun 09 Aug 2026 02:09:54 +0000
Manifest next update:     Sun 16 Aug 2026 02:09:54 +0000
Files and hashes:         1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: nM2xhWuemlqJwJdioziyXHwdVQLLSJQvW7YVxGm+Dn0=)
                          2: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: C1isKHDZmIzkrW1TiYpRTnnD0Skdcof9sxD4v3Fd3ts=)
                          3: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: omi8yODClVvhpST+KBM55F9HtZTYK2334qjRcd3W9Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
                          rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 02:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
        Validity
            Not Before: Aug  9 02:09:54 2026 GMT
            Not After : Aug 16 02:09:54 2026 GMT
        Subject: CN=6a77e172-fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:3d:df:79:6f:e8:63:96:27:81:ae:4d:39:
                    ce:5b:15:47:1c:d1:9e:7b:5f:73:28:79:99:c2:44:
                    25:6b:cd:9f:b5:c1:f3:52:2e:8f:5f:38:a7:ba:bf:
                    50:3e:06:04:a0:8d:de:34:4a:58:3f:dd:31:c4:83:
                    d1:e4:53:76:f5:17:5d:7e:0b:36:87:19:3e:87:fa:
                    31:93:6e:10:26:fe:99:2d:0e:6c:ad:1f:1c:ec:1e:
                    16:e4:dc:fd:86:9f:63:06:09:15:1f:55:e7:be:54:
                    2e:12:f2:6c:d6:7f:68:28:24:71:f1:5b:f6:6d:53:
                    d0:9c:ab:50:fa:5f:8a:e2:3b:75:a0:1a:33:3b:39:
                    37:9d:05:f7:e1:93:39:59:be:8f:32:eb:ea:2b:52:
                    70:e2:9d:9f:03:f9:9f:d2:52:8e:57:94:bd:ed:26:
                    4c:3c:ff:63:5e:f3:04:8b:84:78:3d:14:c3:b8:45:
                    e0:18:32:11:77:48:1a:99:56:42:d8:7f:e6:fc:ae:
                    c7:34:04:fd:79:de:39:5e:1d:28:04:02:eb:8c:20:
                    25:86:65:4f:0f:7d:76:2a:09:ff:a0:32:08:75:7a:
                    d5:be:de:24:ff:df:af:86:a8:f1:e4:b4:9f:40:68:
                    46:40:ef:45:d8:6f:29:06:fc:ef:23:17:30:ab:88:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:53:CB:4F:80:67:51:EA:4A:04:E8:C0:63:BF:08:E1:72:A4:D4:90
            X509v3 Authority Key Identifier:
                keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:96:4a:27:95:18:1d:43:c3:34:27:71:e7:95:3d:f2:31:
         91:2b:cd:94:d0:ef:7e:64:d8:e3:63:51:0d:c2:e5:c0:93:c2:
         d1:a7:e4:cc:c3:ac:55:dc:0d:2d:94:95:40:f8:b2:c8:fc:fb:
         56:d0:6e:b8:5f:2c:0c:4d:99:ab:b1:62:30:9a:8d:e2:0f:de:
         63:35:da:cf:a8:e8:1f:c4:53:63:2e:86:6c:c5:22:17:b6:6b:
         83:2a:ca:35:32:89:9b:09:af:62:4f:67:1d:4c:3d:ce:3f:bf:
         3d:2a:6c:da:65:09:6c:d2:9f:2a:87:20:df:7a:13:b0:dd:04:
         6d:f1:48:32:48:83:6e:c8:4d:23:de:06:66:a9:e7:10:eb:3c:
         5c:21:75:9a:64:2c:64:76:36:29:79:6b:f3:3e:4f:ac:09:7c:
         a6:17:9a:a2:37:b0:2e:59:4c:b4:c1:61:52:8c:c2:de:0d:8b:
         42:70:b3:27:6f:36:56:39:b8:f7:67:be:a3:3c:7f:bd:d6:9a:
         a2:76:2e:ed:22:6b:48:2f:a0:5d:2d:cd:15:ce:a1:c2:91:3f:
         ac:16:e8:a3:08:5d:72:23:c6:6f:bd:0f:fb:ab:14:04:92:1f:
         ea:74:90:81:c3:13:89:e1:37:46:b0:c5:3a:75:29:82:76:5a:
         cd:8b:a8:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4
RTc4NjUwMUUwHhcNMjYwODA5MDIwOTU0WhcNMjYwODE2MDIwOTU0WjAYMRYwFAYD
VQQDEw02YTc3ZTE3Mi1mYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdU933lv6GOWJ4GuTTnOWxVHHNGee19zKHmZwkQla82ftcHzUi6PXzinur9Q
PgYEoI3eNEpYP90xxIPR5FN29Rddfgs2hxk+h/oxk24QJv6ZLQ5srR8c7B4W5Nz9
hp9jBgkVH1XnvlQuEvJs1n9oKCRx8Vv2bVPQnKtQ+l+K4jt1oBozOzk3nQX34ZM5
Wb6PMuvqK1Jw4p2fA/mf0lKOV5S97SZMPP9jXvMEi4R4PRTDuEXgGDIRd0gamVZC
2H/m/K7HNAT9ed45Xh0oBALrjCAlhmVPD312Kgn/oDIIdXrVvt4k/9+vhqjx5LSf
QGhGQO9F2G8pBvzvIxcwq4imPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9Ty0+A
Z1HqSgTowGO/COFypNSQMB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE
MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12
YUlTRHBsSFRjNUdPZUdVQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdLCWSieVGB1DwzQnceeVPfIxkSvNlNDvfmTY42NRDcLlwJPC0afkzMOsVdwN
LZSVQPiyyPz7VtBuuF8sDE2Zq7FiMJqN4g/eYzXaz6joH8RTYy6GbMUiF7ZrgyrK
NTKJmwmvYk9nHUw9zj+/PSps2mUJbNKfKocg33oTsN0EbfFIMkiDbshNI94GZqnn
EOs8XCF1mmQsZHY2KXlr8z5PrAl8pheaojewLllMtMFhUozC3g2LQnCzJ282Vjm4
92e+ozx/vdaaonYu7SJrSC+gXS3NFc6hwpE/rBboowhdciPGb70P+6sUBJIf6nSQ
gcMTieE3RrDFOnUpgnZazYuogA==
-----END CERTIFICATE-----
Generated at Mon Aug 10 00:17:10 2026 by rpki-client