Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
File:                     iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json)
Hash identifier:          oDwZNv5TKrBhLjAfiEYoYYeBgMe5h2pHx9ETwKioKbA=
Subject key identifier:   4D:9A:45:6D:E2:60:6E:5A:DD:7E:60:98:35:23:6C:A3:82:26:CF:AC
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Certificate issuer:       /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
Manifest number:          33
Signing time:             Fri 03 Jul 2026 09:38:11 +0000
Manifest this update:     Fri 03 Jul 2026 09:38:11 +0000
Manifest next update:     Fri 10 Jul 2026 09:38:11 +0000
Files and hashes:         1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: U+76YkV/y2CKF5zYZEJj3KuDTTLXZz0SEIrLTiRoxvc=)
                          2: 52E7D8963D6711F19B0B1A66AE833773.roa (hash: D4eeMtM0vlvOieXn6mH3kJIRvN6LTz+MNbPoGWUcWyw=)
                          3: 30C6735E371C11F1AB220340C9833773.roa (hash: r1zttv5Tg4fvomOU2T9kTIcd0o8O/m74nqkwAFCr7V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
                          rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 09:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
        Validity
            Not Before: Jul  3 09:38:11 2026 GMT
            Not After : Jul 10 09:38:11 2026 GMT
        Subject: CN=6a478303-335e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:5b:7e:e8:66:54:7b:49:d7:ef:3f:01:24:
                    2c:b6:fe:4d:3c:df:41:e6:e8:23:21:af:8a:a8:1e:
                    3f:d4:0c:cb:e3:4d:b5:db:17:ed:95:88:4c:df:8f:
                    f6:b8:8c:9d:78:13:5f:78:f7:8a:7e:68:73:b7:18:
                    9b:2a:85:c9:c4:ac:22:84:77:33:a7:c8:b1:69:4a:
                    7e:c8:8a:85:02:9a:b4:5b:99:30:db:ea:a2:65:89:
                    bc:b2:9c:e2:ab:c4:77:77:84:67:af:ef:a9:8d:ce:
                    4e:91:17:01:24:63:01:58:71:a8:df:34:98:d1:e6:
                    24:3d:b0:11:65:81:27:02:06:8c:1e:ec:dc:35:0e:
                    84:e5:2d:5f:f2:b8:de:2f:37:af:54:79:aa:95:4d:
                    43:08:69:37:48:00:7c:d4:1e:0c:ab:3f:e8:1f:c2:
                    3c:5d:25:46:09:96:a0:a8:2f:e6:c6:9e:63:d9:66:
                    5f:49:c5:71:af:43:43:ca:73:69:74:ae:b3:96:9d:
                    c5:f6:97:15:35:89:a9:2c:a7:82:f2:03:d0:88:44:
                    86:56:0a:05:c8:e9:7c:15:ca:eb:79:bd:4d:fa:03:
                    d7:31:1e:77:e2:53:46:39:5b:ec:08:54:14:83:3b:
                    c6:a6:17:fa:fd:7f:d1:50:bc:05:4f:f2:4f:c3:12:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9A:45:6D:E2:60:6E:5A:DD:7E:60:98:35:23:6C:A3:82:26:CF:AC
            X509v3 Authority Key Identifier:
                keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:e9:d9:c8:52:a6:d0:3e:77:4f:4c:0f:bf:21:da:51:b6:
         dc:d4:3b:78:5f:fe:09:0e:fb:38:6a:66:50:ec:eb:e0:a6:3f:
         03:c5:44:d7:48:7d:56:fc:a5:89:87:b3:3e:65:a7:6f:34:fd:
         3f:2a:68:a1:ff:fa:84:3b:5b:b7:95:cb:2d:a5:69:87:97:00:
         11:0f:53:c9:c1:66:01:59:41:33:2c:34:d8:3d:d9:66:30:1c:
         f9:64:cb:74:3a:e0:27:39:5a:dd:c3:41:64:50:42:b1:49:82:
         2e:2e:05:bb:30:0a:a9:ee:0a:c8:1f:fc:7d:e9:07:26:86:c0:
         cb:94:69:60:05:84:12:4c:67:d0:32:f2:f0:6d:8e:5f:b7:10:
         1a:e2:8a:f5:3a:a9:20:07:ed:93:94:f9:0b:74:09:1f:b8:28:
         c2:77:c3:3e:3e:e6:e7:57:5c:8c:1f:e0:06:3e:e7:af:1d:6c:
         cc:95:bc:a3:2f:68:be:93:06:4b:eb:eb:ee:7e:b2:24:ad:6a:
         ce:e8:90:d5:52:f4:7c:fb:70:32:98:fa:a3:f9:24:99:5f:94:
         37:46:19:cd:a6:b5:3f:f2:e6:91:36:8a:33:2e:ca:6b:e2:fc:
         21:94:08:46:c9:3b:b3:43:f3:41:36:af:eb:d7:1e:91:b3:43:
         3d:9a:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:42:26 2026 by rpki-client