Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File:                     iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier:          NCQyEvcKonaFjT3sO8l9jRBredV4KigBZUuh62CJGBs=
Subject key identifier:   85:C7:A2:EF:F1:38:01:D6:61:32:3D:D4:D7:25:3F:9C:4E:6D:92:CF
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer:       /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number:          01CD
Signing time:             Tue 29 Sep 2026 04:11:22 +0000
Manifest this update:     Tue 29 Sep 2026 04:11:21 +0000
Manifest next update:     Tue 06 Oct 2026 04:11:21 +0000
Files and hashes:         1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: WXqZh9xesMhDWtc+1991I9OjdytSh4QDOEceSOU1+Cw=)
                          2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 73ivG8eex7LmjOrNpv37VdMFlLl7/CFLhIGgaTnXkdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
                          rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
        Validity
            Not Before: Sep 29 04:11:21 2026 GMT
            Not After : Oct  6 04:11:21 2026 GMT
        Subject: CN=6abb3a6a-ab0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:99:94:bd:08:f5:4d:56:16:ca:a1:41:7d:
                    d4:f0:ab:95:e3:5b:2c:40:06:5e:12:bd:e3:ac:c1:
                    0f:6f:ac:10:73:cf:45:a9:c4:da:00:5f:76:84:92:
                    cd:89:26:d3:15:d7:04:81:db:b9:d9:f0:fa:fe:7a:
                    c2:80:01:ad:d8:44:a8:5d:8b:21:48:30:30:72:55:
                    09:40:58:23:cb:cb:72:5e:f8:dc:bb:52:9e:5b:8c:
                    b6:c4:25:03:98:8c:6e:12:4c:7c:06:ae:7d:8a:93:
                    6c:16:7a:46:ff:8d:da:b4:51:04:14:20:c8:7e:e2:
                    7b:5a:d5:4e:4a:37:d3:a7:03:ab:5c:7b:b5:92:fe:
                    a6:2e:ce:2f:6a:cb:dc:c6:fa:34:ba:26:67:da:16:
                    50:31:51:13:95:2d:1a:c2:4a:c0:79:9d:3f:43:04:
                    fd:e8:65:8a:9e:50:6b:63:9d:cb:b5:96:0e:d5:c3:
                    87:8b:e5:45:27:9c:bd:c0:51:63:ec:33:02:14:f4:
                    84:d6:b0:7d:5a:23:f4:f4:2a:24:13:21:b4:f1:03:
                    6c:fc:20:18:dd:8c:ee:74:35:e3:f8:67:b3:fc:9d:
                    37:80:60:25:c5:3b:de:45:58:df:78:86:4d:f8:c6:
                    60:7c:c2:3a:d3:44:1b:d9:88:9b:51:e6:b0:bb:e5:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:A2:EF:F1:38:01:D6:61:32:3D:D4:D7:25:3F:9C:4E:6D:92:CF
            X509v3 Authority Key Identifier:
                keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:48:b0:a7:27:9a:47:25:0c:72:2c:9c:8c:5d:e5:21:1f:
         a1:49:aa:6f:15:0d:ac:9f:4f:cf:ce:1f:06:39:9d:b7:4b:17:
         b8:f0:3e:c9:d8:d9:85:1d:43:77:77:ed:52:70:e0:ae:74:3f:
         5b:f4:24:3d:3f:86:2a:af:41:55:09:ef:99:d6:ce:94:b8:ca:
         e4:c9:a6:bf:83:d9:5a:88:c3:a9:2a:50:a4:af:04:8c:ea:23:
         c4:d7:bc:dd:eb:2f:ed:3d:7c:e0:2e:f5:c6:b3:67:24:c7:d1:
         46:02:ca:39:f6:d5:f4:c6:16:f5:93:73:d9:71:d9:47:e3:22:
         34:b0:a9:68:97:fb:a2:ae:36:d6:ef:a1:70:f0:43:dd:8a:73:
         a4:0d:54:df:55:a5:7f:2c:e9:a4:0b:06:d2:c9:5f:f7:de:fe:
         ce:fb:8a:14:34:29:64:11:1e:70:4e:d8:63:15:a1:65:6e:f8:
         86:b9:d7:23:02:2a:2d:77:48:64:a5:31:eb:0a:03:d8:e4:98:
         7a:a1:c9:c6:74:7c:71:52:d0:d8:38:a5:a7:ec:a1:11:15:4f:
         76:f7:de:ab:a0:93:35:33:9a:b0:04:eb:85:5b:cf:ac:54:7c:
         b4:5c:0b:06:0a:4e:c4:a1:28:61:f5:a1:59:4a:45:39:c6:f3:
         b0:ef:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:38:47 2026 by rpki-client