Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
File:                     iFALo678aJSTbs3IGvHXp7JyaPE.mft (raw, json)
Hash identifier:          CHDzHjC3heZAg6WJJxilHNH3fFVrclNbzd7VrhFskOg=
Subject key identifier:   7B:CF:5F:14:16:7D:D0:AE:FF:8C:F2:0D:5D:CE:F3:74:A3:54:05:17
Authority key identifier: 88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1
Certificate issuer:       /CN=A9198560/serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
Manifest number:          03
Signing time:             Fri 17 Jul 2026 10:35:44 +0000
Manifest this update:     Fri 17 Jul 2026 10:35:43 +0000
Manifest next update:     Fri 24 Jul 2026 10:35:43 +0000
Files and hashes:         1: iFALo678aJSTbs3IGvHXp7JyaPE.crl (hash: XPX4lpVTipkIN7Ehsy/Tqz2ehEYfMnPlZ8mlAQaDrII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl
                          rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198560, serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
        Validity
            Not Before: Jul 17 10:35:43 2026 GMT
            Not After : Jul 24 10:35:43 2026 GMT
        Subject: CN=6a5a0580-7f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:00:93:c8:a6:6e:bd:0f:e2:16:6b:c3:fd:
                    cc:e8:42:26:58:21:39:2c:44:bb:e6:23:da:1f:75:
                    84:25:dc:8b:ba:1a:4a:27:d6:25:e0:19:37:0f:ae:
                    8b:f5:f9:98:ab:dc:96:0f:4e:f4:cf:fe:57:a2:43:
                    6c:a6:c3:fb:44:63:a3:6a:86:df:91:57:d7:42:9a:
                    42:22:e3:1c:4c:cc:34:ae:f4:66:3d:15:6a:dc:ff:
                    4b:bf:7c:c4:4f:cf:9d:03:1b:84:e3:ee:21:83:54:
                    0b:9a:cc:7f:21:22:aa:57:da:8f:20:c5:8d:12:2c:
                    d4:7c:ef:25:3c:3b:44:49:05:7e:dd:88:31:b6:fd:
                    34:77:bb:38:f2:5c:0d:13:62:9c:c4:92:cd:08:8c:
                    41:2d:17:2e:0e:22:2d:ab:01:d5:15:4b:0f:82:b9:
                    46:18:a2:12:f8:46:79:9a:6e:21:85:cf:4a:1e:7f:
                    0e:83:ba:4a:8f:8a:d8:df:b3:c7:30:de:07:cf:7e:
                    8d:1b:d0:6f:94:f9:57:2c:b0:dc:3a:51:fd:66:96:
                    07:a8:5d:b8:8b:85:b5:9e:fe:92:dc:10:e8:36:e3:
                    02:de:7b:ca:7b:7f:21:33:44:b9:a1:96:b2:0a:2c:
                    c8:48:f8:db:24:df:ab:56:f5:9a:09:7a:7f:00:51:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:5F:14:16:7D:D0:AE:FF:8C:F2:0D:5D:CE:F3:74:A3:54:05:17
            X509v3 Authority Key Identifier:
                keyid:88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:ff:f4:46:17:17:49:72:58:74:15:71:be:c5:5a:a2:05:
         e9:8b:09:37:32:d0:59:49:6e:59:9c:d5:8a:ea:64:42:58:42:
         25:c1:87:fc:03:1b:5d:3d:69:a8:38:60:c5:a1:6b:ad:9f:cd:
         ef:9c:6a:97:66:b0:72:eb:77:0a:71:e7:08:b0:fe:6c:c4:b7:
         3c:99:85:bb:3a:26:2e:0e:7a:bc:88:e6:eb:67:a2:b8:53:cf:
         4c:0f:18:fd:90:c1:7e:1f:17:c1:2d:f3:a9:bf:eb:55:8c:0a:
         1d:68:74:09:4c:f3:e6:fe:99:98:5f:1c:1f:f6:c0:ce:39:af:
         a9:df:f8:0e:54:3e:ca:08:6f:01:6f:64:35:68:81:2a:15:bc:
         1f:1b:12:64:30:e0:60:bc:a2:56:16:87:40:3e:8c:22:7b:94:
         70:4c:79:1f:ef:62:c0:9d:77:87:53:43:90:ac:34:6d:02:83:
         01:76:db:b5:1f:68:3b:91:ed:c1:1a:3e:4d:3d:1d:fc:ee:f9:
         2a:34:4b:31:5e:3f:a3:5d:38:be:77:0d:c2:b4:62:1f:1b:29:
         07:76:93:af:0b:32:17:19:f7:21:c7:a4:29:20:80:6a:2c:e8:
         a3:e3:ca:11:68:e4:3b:e3:f6:df:d4:99:20:50:c1:7e:59:98:
         e6:ce:8c:a7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
ODU2MDExMC8GA1UEBRMoODg1MDBCQTNBRUZDNjg5NDkzNkVDREM4MUFGMUQ3QTdC
MjcyNjhGMTAeFw0yNjA3MTcxMDM1NDNaFw0yNjA3MjQxMDM1NDNaMBgxFjAUBgNV
BAMTDTZhNWEwNTgwLTdmMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiMACTyKZuvQ/iFmvD/czoQiZYITksRLvmI9ofdYQl3Iu6Gkon1iXgGTcProv1
+Zir3JYPTvTP/leiQ2ymw/tEY6Nqht+RV9dCmkIi4xxMzDSu9GY9FWrc/0u/fMRP
z50DG4Tj7iGDVAuazH8hIqpX2o8gxY0SLNR87yU8O0RJBX7diDG2/TR3uzjyXA0T
YpzEks0IjEEtFy4OIi2rAdUVSw+CuUYYohL4RnmabiGFz0oefw6DukqPitjfs8cw
3gfPfo0b0G+U+VcssNw6Uf1mlgeoXbiLhbWe/pLcEOg24wLee8p7fyEzRLmhlrIK
LMhI+Nsk36tW9ZoJen8AUUUnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe89fFBZ9
0K7/jPINXc7zdKNUBRcwHwYDVR0jBBgwFoAUiFALo678aJSTbs3IGvHXp7JyaPEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTYwLzM4RTAyNTE4ODBF
NTExRjFCQkYzMzNFMzYwQTMwRkJDL2lGQUxvNjc4YUpTVGJzM0lHdkhYcDdKeWFQ
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaUZBTG82NzhhSlNUYnMzSUd2SFhwN0p5YVBFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
NTYwLzM4RTAyNTE4ODBFNTExRjFCQkYzMzNFMzYwQTMwRkJDL2lGQUxvNjc4YUpT
VGJzM0lHdkhYcDdKeWFQRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA7w//0RhcXSXJYdBVxvsVaogXpiwk3MtBZSW5ZnNWK6mRCWEIlwYf8AxtdPWmo
OGDFoWutn83vnGqXZrBy63cKcecIsP5sxLc8mYW7OiYuDnq8iObrZ6K4U89MDxj9
kMF+HxfBLfOpv+tVjAodaHQJTPPm/pmYXxwf9sDOOa+p3/gOVD7KCG8Bb2Q1aIEq
FbwfGxJkMOBgvKJWFodAPowie5RwTHkf72LAnXeHU0OQrDRtAoMBdtu1H2g7ke3B
Gj5NPR387vkqNEsxXj+jXTi+dw3CtGIfGykHdpOvCzIXGfchx6QpIIBqLOij48oR
aOQ74/bf1JkgUMF+WZjmzoyn
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:12 2026 by rpki-client