Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
File:                     IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json)
Hash identifier:          dxQ1bNVWhnxirUnV63DGjYUUF/3BiB8l1vg61s2q/5I=
Subject key identifier:   51:1E:E6:32:17:62:BC:4C:C9:B4:17:8C:E9:72:20:C4:63:8C:A9:51
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       35AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
Manifest number:          357A
Signing time:             Wed 22 Jul 2026 14:20:03 +0000
Manifest this update:     Wed 22 Jul 2026 14:20:03 +0000
Manifest next update:     Wed 29 Jul 2026 14:20:03 +0000
Files and hashes:         1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: fUm2ZjleuuO4zBgihhQwv+9Zpj+qp4qdUMg7QZvac4E=)
                          2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=)
                          3: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=)
                          4: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13741 (0x35ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Jul 22 14:20:03 2026 GMT
            Not After : Jul 29 14:20:03 2026 GMT
        Subject: CN=6a60d193-38b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:5d:48:81:03:70:5f:40:fa:76:3c:2a:05:
                    1e:cf:51:cb:1e:81:0c:f5:5f:c1:19:a0:ce:2f:f6:
                    8f:19:64:98:05:e9:89:cb:9c:40:b3:2b:eb:2d:68:
                    4c:ed:50:5f:18:fe:d5:ef:39:52:5f:be:a3:f7:5d:
                    e9:df:20:15:7b:13:cd:34:5e:c6:5a:a6:69:0b:35:
                    49:eb:c3:ed:e3:b7:27:c6:19:b2:91:05:95:cc:49:
                    e2:88:df:69:5c:44:b2:c3:4a:8a:95:76:f8:90:1b:
                    a2:9d:aa:1d:cb:2d:d2:76:12:4f:77:a2:56:f5:ab:
                    70:d0:d0:4b:77:5f:f8:84:ca:4b:75:dd:6a:95:c3:
                    6d:19:96:02:d8:a6:63:9b:51:28:ec:3c:47:81:d8:
                    45:a0:9d:3c:b4:6e:44:08:58:50:0b:3a:f4:ad:f4:
                    e8:26:cc:77:93:e1:5a:fd:78:f6:41:7e:55:c1:87:
                    64:a9:c1:f6:9b:1c:46:69:54:95:15:71:84:c4:41:
                    0f:ed:ad:32:44:e5:32:8c:a6:fd:d8:54:98:c2:b9:
                    2b:23:88:52:80:d9:97:63:ef:90:ba:23:60:0d:7c:
                    ea:32:6d:99:83:49:02:eb:7e:45:2e:7e:7e:2a:41:
                    86:45:07:f7:e0:81:dc:e9:63:49:0b:bf:18:9a:8f:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:E6:32:17:62:BC:4C:C9:B4:17:8C:E9:72:20:C4:63:8C:A9:51
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:43:78:a6:2a:b6:08:a7:99:4c:33:75:cf:73:1e:64:4b:
         b5:d7:7d:c4:7f:86:a6:30:63:4d:4c:9d:06:64:9b:58:f5:df:
         02:e7:1e:1d:6f:69:9b:80:b0:1f:fb:30:f5:82:cc:75:a8:d8:
         7d:66:e0:6e:bb:7d:ae:ca:54:37:e5:2c:90:11:e2:f5:6b:b6:
         db:37:30:c2:52:39:67:d9:b1:50:b0:0b:64:5a:c4:79:24:85:
         f0:49:8c:1f:c3:ff:db:11:86:be:26:d9:4e:5e:f6:84:33:4e:
         96:71:26:61:b2:bf:6e:20:58:ff:48:a7:d7:93:bf:14:14:43:
         8e:de:2e:e3:b7:1c:7e:39:c4:8d:fe:80:f8:36:60:6d:3b:26:
         2b:c7:f8:1f:e5:cf:3a:a8:da:af:25:09:d7:ae:f3:8b:09:04:
         dc:5f:1a:3f:ee:8b:f9:93:92:fa:d2:91:96:0f:20:06:c8:72:
         07:f1:36:36:02:0a:44:b1:46:df:c1:0f:42:54:c5:c7:24:b6:
         30:a8:86:17:81:71:e9:1c:be:92:a1:29:b5:af:df:57:5b:78:
         5a:d1:ff:0f:03:6c:89:a7:68:ce:3e:a6:be:a5:63:47:cc:53:
         9c:8d:2e:8b:96:1a:e7:93:88:c1:c1:19:8f:50:15:22:48:e0:
         df:ca:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:52 2026 by rpki-client