Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
File:                     iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json)
Hash identifier:          FVnJipBqau2VU3Qmrh/3lD/KrjU8gkHl/7RhAFF29NY=
Subject key identifier:   AF:22:FC:FF:5A:79:EB:92:7F:C7:C0:54:AD:C3:18:51:70:16:2A:F4
Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E
Certificate issuer:       /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
Manifest number:          0195
Signing time:             Sun 05 Jul 2026 05:00:23 +0000
Manifest this update:     Sun 05 Jul 2026 05:00:22 +0000
Manifest next update:     Sun 12 Jul 2026 05:00:22 +0000
Files and hashes:         1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: WTeqnZcKIF+fDZvf9oZmISS/ErUHDYJFcreRlPmOEWc=)
                          2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: yzvAAj6059FyJ5YRc3KAkcmbzPNRGzywLIuOLAJMFFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl
                          rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
        Validity
            Not Before: Jul  5 05:00:22 2026 GMT
            Not After : Jul 12 05:00:22 2026 GMT
        Subject: CN=6a49e4e7-9bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:58:8f:12:66:54:b0:b4:6e:8e:2d:45:8c:
                    73:5e:64:88:98:29:9a:20:4f:57:44:f4:10:21:48:
                    0d:08:46:70:7c:ad:79:2c:f7:2a:58:fb:f0:53:9e:
                    0e:f6:08:96:59:91:e8:a3:cb:0e:c2:56:97:86:91:
                    12:b7:9b:33:1c:dd:c0:68:93:98:09:02:2d:78:2d:
                    f2:fe:95:eb:76:8d:d2:af:b4:f8:9d:8b:53:a0:cb:
                    71:b4:f3:f8:0a:f7:62:38:8c:36:5b:23:10:78:fc:
                    ed:ee:47:ab:e7:3d:ec:31:44:13:06:3b:b5:b7:ef:
                    dd:f2:8a:4d:8a:ba:7c:e7:95:66:a8:92:ea:4d:dd:
                    a5:95:e4:87:a7:4a:fd:87:48:ac:2e:1b:41:8d:fa:
                    b1:04:83:1b:1f:46:a1:25:52:68:b1:76:f9:af:64:
                    5c:c0:01:52:5e:cf:ae:83:eb:d6:c0:20:bd:59:f4:
                    32:f8:a7:97:39:f7:2b:fb:73:a8:38:89:08:cf:c8:
                    21:c4:ef:e0:b6:cb:24:37:e2:cc:bc:24:06:9a:e5:
                    ef:58:96:7d:e7:ea:4b:e8:b1:0f:51:a9:3d:ca:c1:
                    b0:f7:c4:6e:60:59:09:74:8b:36:9b:14:da:01:2c:
                    a4:af:44:ed:d5:95:78:01:d4:10:cf:96:38:da:c5:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:22:FC:FF:5A:79:EB:92:7F:C7:C0:54:AD:C3:18:51:70:16:2A:F4
            X509v3 Authority Key Identifier:
                keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:46:22:0d:90:ab:69:db:3b:00:a9:71:65:88:78:c2:29:84:
         d9:29:49:90:9e:7f:a2:65:1b:5e:57:e6:f6:b6:af:45:f5:07:
         f8:a2:86:45:2c:09:f9:54:9f:fd:dc:ae:30:98:8e:af:84:e4:
         63:43:8b:a8:fa:9f:11:7c:90:ba:f0:cf:58:03:d6:8d:3d:10:
         04:2d:f2:7f:ba:7e:8f:03:93:64:e7:70:a7:fa:2d:43:22:f9:
         08:d2:18:c7:03:01:61:a0:86:33:55:78:bc:3e:d9:c7:a4:ea:
         25:98:87:33:a7:ce:b1:b0:42:d2:ea:f5:9e:d9:fa:71:97:62:
         69:86:d4:69:0e:e2:87:9b:26:92:f3:32:5d:c8:4e:2c:e2:86:
         0b:2e:ad:8d:10:aa:53:83:10:bd:92:b1:37:55:4b:97:58:91:
         c1:04:a5:d3:3d:7a:c7:ed:b9:d6:df:5d:5b:5d:07:5b:74:f3:
         49:6a:3d:3f:ea:52:db:5f:25:f2:52:10:6a:1a:77:87:be:fb:
         ae:57:5e:19:6e:c3:1e:66:a6:98:da:2c:5e:b2:91:f0:1b:80:
         b1:fd:dc:43:08:6d:4e:80:7a:61:a6:db:16:02:c0:e8:cd:62:
         14:45:96:d7:e6:44:ab:82:c6:59:6c:68:05:3e:d7:57:e0:6e:
         29:f1:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:52:40 2026 by rpki-client