Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
File:                     7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json)
Hash identifier:          yH2WfSo0WeIsm+dQYQKfL0HKk0i/xaTViP4TZxKF1lw=
Subject key identifier:   CE:FE:15:D4:43:88:84:66:7C:3C:DD:8F:74:5D:14:E0:BE:E0:4D:59
Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
Certificate issuer:       /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Certificate serial:       2222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
Manifest number:          2222
Signing time:             Tue 22 Sep 2026 15:49:21 +0000
Manifest this update:     Tue 22 Sep 2026 15:49:20 +0000
Manifest next update:     Tue 29 Sep 2026 15:49:20 +0000
Files and hashes:         1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: PME9b5xt+pdvm3LGZR7fBLv5Fn7T6kw8KaSekmymvV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
                          rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8738 (0x2222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
        Validity
            Not Before: Sep 22 15:49:20 2026 GMT
            Not After : Sep 29 15:49:20 2026 GMT
        Subject: CN=6ab2a381-2648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:22:f6:89:4a:4b:3f:5a:ad:79:56:35:68:
                    54:74:6c:57:18:54:fb:51:e4:72:1e:e1:9a:5a:11:
                    49:fd:2e:13:74:7a:0e:73:b5:f8:97:a9:02:7e:93:
                    9f:ca:57:22:77:08:c2:d8:cd:f4:23:fb:a5:ce:9f:
                    27:18:85:b9:d6:ff:59:c4:f3:49:3a:b8:cc:0b:97:
                    8f:1e:4e:f3:ee:22:94:13:aa:55:9a:62:21:59:91:
                    09:0c:66:75:db:33:6a:a3:5b:79:f8:ed:d7:0c:57:
                    55:21:c3:7d:b5:15:02:22:f1:bd:68:ae:ac:31:d1:
                    8a:8d:1b:3c:0f:e9:0f:dd:3f:74:01:b9:fa:3d:40:
                    47:ca:cd:9d:73:52:74:bc:56:c5:58:41:9d:5a:1c:
                    10:95:ad:ac:f7:38:a2:d4:28:a4:7d:fd:10:4c:f1:
                    07:f4:f3:89:af:29:9f:2d:0f:93:f1:af:35:04:ba:
                    83:e2:f0:a8:d5:03:70:c5:61:01:85:e6:25:d2:1c:
                    16:5e:67:f6:16:5e:17:a5:12:18:98:77:f6:89:eb:
                    12:aa:60:c3:1b:7b:ef:44:b3:13:b6:21:af:37:28:
                    48:ed:f2:4b:56:17:e2:24:43:59:a6:86:d2:85:5a:
                    76:61:bd:03:c8:1b:94:c7:72:87:ec:26:9b:ca:50:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:15:D4:43:88:84:66:7C:3C:DD:8F:74:5D:14:E0:BE:E0:4D:59
            X509v3 Authority Key Identifier:
                keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:af:0f:a4:54:d7:20:41:44:60:03:c5:fe:36:81:55:fd:74:
         87:64:85:ad:37:0c:58:84:aa:bd:59:30:96:8a:3f:0a:f2:95:
         06:cf:07:b4:b1:a8:b5:25:e8:06:1f:fa:fb:e3:74:f2:87:f6:
         4c:f1:77:dd:91:c0:34:6c:6e:d8:00:18:f1:b2:41:1d:e5:e3:
         33:c4:ff:0a:d1:05:2f:4d:92:d8:7b:16:1d:d0:81:ed:11:bd:
         28:cb:a5:2b:0d:f8:69:5b:20:6b:a1:25:a1:eb:9f:21:2b:20:
         e6:55:1b:4e:04:14:7b:9b:8a:96:8a:a1:f8:95:ba:19:2f:7e:
         e7:28:3e:09:d2:8a:54:8e:7b:d4:24:5f:59:03:38:04:95:23:
         f2:6c:17:27:a3:8f:dc:39:a7:97:a6:5e:9d:17:7e:14:4f:47:
         b8:81:f7:5f:6b:ca:55:ef:9e:83:13:0f:90:3b:ab:cc:0c:42:
         3b:c7:26:9f:22:28:da:51:7c:14:e8:51:2b:bb:e6:6c:99:0d:
         e3:ed:bd:47:4d:45:17:47:6f:44:73:00:ec:8f:04:3a:72:b6:
         8e:98:99:03:04:c3:a9:bd:cf:e3:eb:65:d5:6d:67:51:fe:b2:
         f4:3f:b2:87:0b:cd:61:c5:51:d0:d3:54:8c:02:bb:6b:af:d9:
         21:ce:bb:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw
RkRFMTY3NUYwHhcNMjYwOTIyMTU0OTIwWhcNMjYwOTI5MTU0OTIwWjAYMRYwFAYD
VQQDEw02YWIyYTM4MS0yNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlUi9olKSz9arXlWNWhUdGxXGFT7UeRyHuGaWhFJ/S4TdHoOc7X4l6kCfpOf
ylcidwjC2M30I/ulzp8nGIW51v9ZxPNJOrjMC5ePHk7z7iKUE6pVmmIhWZEJDGZ1
2zNqo1t5+O3XDFdVIcN9tRUCIvG9aK6sMdGKjRs8D+kP3T90Abn6PUBHys2dc1J0
vFbFWEGdWhwQla2s9zii1Cikff0QTPEH9POJrymfLQ+T8a81BLqD4vCo1QNwxWEB
heYl0hwWXmf2Fl4XpRIYmHf2iesSqmDDG3vvRLMTtiGvNyhI7fJLVhfiJENZpobS
hVp2Yb0DyBuUx3KH7CabylDVpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7+FdRD
iIRmfDzdj3RdFOC+4E1ZMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5
QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh
QkdBSEpSZy1QRThQM2haMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFq8PpFTXIEFEYAPF/jaBVf10h2SFrTcMWISqvVkwloo/CvKVBs8HtLGotSXo
Bh/6++N08of2TPF33ZHANGxu2AAY8bJBHeXjM8T/CtEFL02S2HsWHdCB7RG9KMul
Kw34aVsga6EloeufISsg5lUbTgQUe5uKloqh+JW6GS9+5yg+CdKKVI571CRfWQM4
BJUj8mwXJ6OP3Dmnl6ZenRd+FE9HuIH3X2vKVe+egxMPkDurzAxCO8cmnyIo2lF8
FOhRK7vmbJkN4+29R01FF0dvRHMA7I8EOnK2jpiZAwTDqb3P4+tl1W1nUf6y9D+y
hwvNYcVR0NNUjAK7a6/ZIc67pg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:01:17 2026 by rpki-client