Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File:                     ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier:          /c8fPnOOU9vf/aIwpI9fci+UfPrLQqr8hlze2T7xsaQ=
Subject key identifier:   62:26:8A:9C:1B:32:0D:5A:21:3F:EE:FE:04:FD:53:56:AB:3A:5A:71
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer:       /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number:          015A
Signing time:             Wed 23 Sep 2026 04:58:29 +0000
Manifest this update:     Wed 23 Sep 2026 04:58:28 +0000
Manifest next update:     Wed 30 Sep 2026 04:58:28 +0000
Files and hashes:         1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: gycA0MwSvmgtQpzrpqN9HmkdVO7mvn7eX4hdSNcsBOc=)
                          2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
                          rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
        Validity
            Not Before: Sep 23 04:58:28 2026 GMT
            Not After : Sep 30 04:58:28 2026 GMT
        Subject: CN=6ab35c75-c1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:91:22:2b:68:ca:b1:c2:1d:60:94:ab:9a:
                    ae:86:48:0e:ff:4b:fb:97:f6:df:cf:c1:d5:d0:42:
                    9a:90:b0:b5:4b:e8:0c:b4:b2:e4:76:9f:60:2a:b1:
                    9a:16:1e:1c:55:04:27:a0:bb:74:89:cc:32:ec:c2:
                    cf:d5:dc:75:f6:a8:e0:88:1c:8e:6e:7d:56:9d:27:
                    89:e7:97:26:a5:39:2f:3c:60:02:82:93:a3:b6:fc:
                    62:01:d3:2e:32:22:d5:04:e0:af:ff:f1:d8:dd:16:
                    59:5b:bd:66:41:e7:c7:4a:2a:ab:4d:9c:00:92:56:
                    b6:ee:c0:79:12:da:85:e7:9b:e7:3a:f6:e0:54:75:
                    fe:9e:b3:c0:fd:e3:53:9d:b9:fb:91:5c:37:83:10:
                    ea:d6:f8:5d:d7:15:e1:63:b9:ff:be:61:c2:95:e6:
                    86:0b:7b:67:d2:88:0b:8e:64:1d:ef:05:18:6a:93:
                    e3:9d:92:a7:8c:27:9c:c9:87:2d:65:d9:f0:d1:ed:
                    2d:86:d4:8c:2c:e5:6f:9f:45:fc:f9:72:8a:ed:e3:
                    d6:e6:73:86:b7:6c:1e:6b:39:48:ee:fa:65:62:71:
                    bd:65:56:9f:6a:fa:0d:80:c0:67:ea:88:bf:16:ea:
                    f3:d5:c4:62:13:b9:d0:ae:ad:31:6f:c8:6d:cc:08:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:8A:9C:1B:32:0D:5A:21:3F:EE:FE:04:FD:53:56:AB:3A:5A:71
            X509v3 Authority Key Identifier:
                keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:f7:90:6a:d6:c5:8c:ca:13:b4:42:8b:52:66:1d:fd:22:
         1f:4b:60:0c:ac:92:41:ba:11:00:dd:e5:88:e0:d2:ad:54:f7:
         01:74:2d:2d:1b:73:33:57:9f:da:f5:4b:53:72:be:5b:81:82:
         da:6a:af:3d:6c:98:5f:a6:8d:57:8c:42:bf:0e:52:84:c6:5e:
         2f:e6:fd:14:7f:d0:d1:59:a2:9a:26:5e:ee:23:32:00:36:86:
         07:63:c2:9e:74:62:90:a4:8c:78:a3:a7:a8:71:0f:1a:f9:c4:
         aa:f9:f8:20:2d:f1:fc:03:90:9b:b6:3c:8f:aa:0d:03:61:be:
         9d:42:b4:d8:26:dc:d9:25:f0:db:89:c4:7d:f5:92:47:4e:42:
         56:49:49:a7:36:2d:2c:13:a4:9a:c0:7b:9b:8a:8f:3a:51:07:
         34:3e:64:72:86:d2:c3:53:ac:cb:37:d9:be:87:f6:1b:1c:46:
         21:fb:d8:df:33:6e:a0:a1:25:de:da:a6:f0:63:5d:a1:5c:31:
         32:81:f1:dd:ae:32:b5:76:69:4a:b3:b2:49:37:54:dc:38:d0:
         05:de:f9:3f:b2:72:0c:ed:d5:e2:17:25:a3:85:80:83:78:71:
         c6:a1:eb:68:e5:5a:49:27:f6:3b:dd:ad:82:3a:70:f1:85:97:
         cf:70:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:31 2026 by rpki-client