Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
File:                     IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json)
Hash identifier:          auRTK/b2uuMddEwkFrC61ovOwetCQ7dLeW2z36UAmhs=
Subject key identifier:   6B:40:9F:BF:2A:E6:F4:FD:04:96:E9:EB:3B:C3:D1:09:00:3E:20:BD
Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E
Certificate issuer:       /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
Certificate serial:       0D24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
Manifest number:          0D19
Signing time:             Wed 22 Jul 2026 18:28:08 +0000
Manifest this update:     Wed 22 Jul 2026 18:28:07 +0000
Manifest next update:     Wed 29 Jul 2026 18:28:07 +0000
Files and hashes:         1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: 0YW5r7ed6ruj0VYZrELbyAJB1JcY8OKDqA6m0QxJ9uw=)
                          2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl
                          rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E
        Validity
            Not Before: Jul 22 18:28:07 2026 GMT
            Not After : Jul 29 18:28:07 2026 GMT
        Subject: CN=6a610bb7-3e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:e4:d0:dc:ac:d7:17:ce:63:e7:1c:f4:48:
                    ff:f7:94:1c:8e:7e:e1:a8:3d:ec:da:a9:5c:25:23:
                    c3:41:db:2e:3d:82:cc:cc:67:50:d1:f4:71:b0:a5:
                    ee:4a:42:39:6d:20:d8:87:54:10:7f:06:24:c6:c4:
                    a1:25:04:dc:3e:ad:67:8e:eb:16:51:a8:16:81:82:
                    91:19:81:b7:fd:6b:7c:ef:b6:ae:24:e0:6d:6d:f0:
                    8a:71:32:36:95:ec:44:a6:51:c7:75:26:a0:32:5e:
                    5f:75:da:65:b8:53:17:d4:82:5e:d0:1c:61:81:42:
                    a2:c3:9a:2b:c4:f8:62:8b:a0:4f:2b:6e:c8:f7:72:
                    aa:78:df:48:68:22:16:c2:d7:c3:bf:a6:28:fd:f7:
                    79:c0:6d:b0:c8:29:3e:fb:10:e0:c3:b1:cc:99:76:
                    6b:bf:64:bb:b7:74:3c:cf:5b:71:80:d6:85:7d:1c:
                    dc:26:75:73:76:50:64:e2:a1:7b:ea:ab:58:9b:79:
                    71:6f:e0:d5:40:15:df:aa:d9:2d:bb:23:d2:cd:f0:
                    57:50:1d:00:c4:62:24:97:4c:16:a9:b7:0e:35:f9:
                    18:c5:19:42:63:31:d2:c1:ea:2e:4b:c1:ba:95:19:
                    fd:46:d9:56:16:4a:99:5a:9d:87:01:55:69:6d:98:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:40:9F:BF:2A:E6:F4:FD:04:96:E9:EB:3B:C3:D1:09:00:3E:20:BD
            X509v3 Authority Key Identifier:
                keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a4:7e:fc:88:aa:2e:df:a4:8b:c5:ed:41:2e:79:5c:1b:95:
         fc:65:34:d5:29:2c:33:56:07:2b:2e:98:c7:00:c9:7a:0e:00:
         14:82:ce:74:70:7d:f7:12:84:96:20:4c:a5:01:3b:e1:13:90:
         0a:67:bf:e7:61:5c:af:60:f2:c0:ca:03:6c:5b:24:e9:9c:78:
         5e:08:54:3f:5f:a5:c5:40:81:6c:cf:99:7c:d3:ed:11:a7:3c:
         61:70:48:d2:de:34:2f:aa:96:97:55:ea:ca:a7:53:8f:8a:47:
         44:81:d6:26:71:6e:3a:fb:5c:61:be:97:10:a1:e4:d7:64:8c:
         19:b9:8f:0a:62:04:b2:e3:cd:41:60:5a:7c:92:c8:68:e8:a2:
         f4:9a:a4:92:cf:34:e7:55:c8:39:38:86:ea:66:e6:1e:ee:a5:
         9e:d0:62:7e:03:ed:c1:67:c0:e6:65:5c:25:24:4c:f1:9b:a5:
         67:11:82:2f:b1:a8:81:31:82:c2:66:7d:3d:8f:91:a8:55:00:
         df:c9:2e:ea:46:71:7a:e1:96:fe:c9:e6:d5:80:29:b0:09:6f:
         ef:41:0c:52:84:54:03:29:2b:24:7a:3d:bd:cc:8b:bd:12:de:
         6e:db:f8:10:85:bc:01:f9:ad:9f:9f:19:bf:93:12:b9:54:96:
         fb:be:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:53 2026 by rpki-client