Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File:                     I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier:          sBG8zeT8g5BKiw3hJFbhBhWcYyMZHpYjkjjAMyasoSo=
Subject key identifier:   47:A3:56:F8:C2:C2:D3:18:14:02:FC:11:CC:8A:54:68:74:CA:FF:5A
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer:       /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number:          016E
Signing time:             Thu 23 Jul 2026 06:21:48 +0000
Manifest this update:     Thu 23 Jul 2026 06:21:48 +0000
Manifest next update:     Thu 30 Jul 2026 06:21:48 +0000
Files and hashes:         1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: jLU/FOXNtFU9kAmwN1xHs4i/tXBAc3XLHsbTEPfsibw=)
                          2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: EDFQEdiEmOIwcAFLSsj8eYAZyjqk/sVRS9qA9gJE9Ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
        Validity
            Not Before: Jul 23 06:21:48 2026 GMT
            Not After : Jul 30 06:21:48 2026 GMT
        Subject: CN=6a61b2fc-5650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:f2:3f:f2:dd:62:3d:8b:a4:70:85:ee:73:
                    3c:33:8b:8b:19:d1:b7:07:12:ad:06:68:3c:1f:54:
                    6d:26:a6:32:a0:16:13:9d:a6:f6:56:14:bf:4b:1f:
                    30:06:eb:ba:66:ec:22:7f:36:57:b8:1d:21:59:a2:
                    91:34:26:57:94:f0:1c:b2:76:ee:8d:ff:39:dd:12:
                    f4:29:b5:e7:53:ad:21:1a:8d:4f:79:76:1f:ea:56:
                    07:ab:8d:19:5d:5e:76:9f:23:9f:0b:ac:f9:85:1e:
                    1e:9a:d2:4e:17:7c:f3:e0:86:9c:bb:e6:89:33:26:
                    cf:d5:a1:3a:a7:84:32:c4:c0:2b:ec:12:54:f7:6e:
                    9b:d4:24:62:51:04:03:7b:96:40:81:ca:01:46:e5:
                    7e:27:1d:37:dd:d4:2a:e6:90:8d:98:fe:11:59:84:
                    cf:9c:71:ee:9d:0b:6f:bc:a3:a5:fc:b4:65:96:f4:
                    c1:70:f1:8b:ca:58:bf:f4:a1:6e:ad:72:cc:49:6f:
                    d0:23:7e:fa:5b:6f:12:81:4a:96:4e:38:67:c5:01:
                    ab:9e:68:da:60:c0:e7:01:03:a5:77:df:93:a0:48:
                    46:ad:1e:07:d5:01:9e:d4:b9:85:4a:14:e0:22:81:
                    71:7b:d4:a7:13:77:71:bc:22:c1:3a:d4:ef:d7:ca:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:56:F8:C2:C2:D3:18:14:02:FC:11:CC:8A:54:68:74:CA:FF:5A
            X509v3 Authority Key Identifier:
                keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:61:07:a6:28:8a:69:31:82:9c:8a:3a:11:87:29:5b:e3:ce:
         55:30:de:4f:fd:9c:94:d9:67:f8:a2:d0:9e:51:25:7e:43:58:
         6a:3c:94:63:f9:17:c2:a1:a0:a9:75:0f:33:5a:1c:21:63:76:
         80:ae:33:97:ac:76:c8:b0:da:95:35:23:45:b3:26:25:33:8b:
         6c:da:2a:f5:f8:c2:02:c1:0c:b2:99:bc:a0:b8:21:0a:29:d3:
         84:84:c5:4f:44:97:83:c5:7f:18:f2:92:df:59:0a:bb:fc:18:
         18:95:f7:67:00:34:a0:ef:9c:d1:0b:51:83:d4:c7:db:43:74:
         80:d7:8e:e4:75:74:91:30:18:27:18:a8:81:d4:e7:eb:f5:44:
         77:c8:06:05:9f:4a:21:66:f6:da:cc:da:12:1d:43:84:8f:8f:
         d0:05:90:2b:3d:44:c9:63:d2:33:9d:48:c9:f2:9a:0d:7d:e8:
         db:92:04:19:12:1a:fd:08:1c:b0:78:09:c3:bd:8e:46:cb:60:
         61:9a:05:fa:b5:4d:f5:89:5d:36:0b:1b:30:62:a6:17:0c:34:
         d4:9a:1a:09:b5:ee:b8:ea:b8:07:df:6e:24:bf:f9:aa:08:6f:
         46:6b:2c:b9:40:df:e5:44:e4:ea:58:cb:1f:32:f9:a6:b6:d9:
         9d:1d:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:36 2026 by rpki-client