Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
File:                     iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json)
Hash identifier:          onQFj60QHPy3OuEhgC5Uht+ES2S22JqVlY73bDU0bnY=
Subject key identifier:   9A:F2:41:99:6A:F4:29:0E:CC:0A:8E:8A:46:24:62:FB:A5:3A:86:1C
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Certificate issuer:       /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
Manifest number:          01B4
Signing time:             Wed 23 Sep 2026 03:51:36 +0000
Manifest this update:     Wed 23 Sep 2026 03:51:35 +0000
Manifest next update:     Wed 30 Sep 2026 03:51:35 +0000
Files and hashes:         1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: BFMt12gZhFAyeXRWOds4ZQJVDddUqAJVhdp2bbp4OPQ=)
                          2: DC857BE8843111F09719836AC4F9AE02.roa (hash: 1BOEDBKActw8l6HJnt44UOYL/MfVfznTCP7GMz9bjtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
                          rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
        Validity
            Not Before: Sep 23 03:51:35 2026 GMT
            Not After : Sep 30 03:51:35 2026 GMT
        Subject: CN=6ab34cc7-da1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:ea:f1:77:e1:e7:db:d0:66:be:c2:4c:f6:
                    9a:8d:02:ee:ee:c6:7e:c1:dc:24:0b:28:45:1e:d0:
                    1f:cd:0f:4f:d2:05:5a:fc:e6:6b:2d:6a:2d:30:38:
                    5a:10:0f:05:94:05:f5:f6:37:75:fb:1c:ab:03:e7:
                    48:48:3c:73:20:d4:11:f3:e4:8a:d3:7d:63:d8:64:
                    cc:97:4f:9b:98:54:64:c8:75:cd:15:22:c1:e8:85:
                    f2:99:bf:d8:61:18:1c:22:4b:e2:3b:11:cf:1c:97:
                    82:35:87:12:6d:1d:b3:eb:3e:49:87:f5:a5:e2:7a:
                    53:41:64:30:ad:22:c8:75:76:f7:b8:4e:2e:42:15:
                    13:36:de:c1:57:44:1c:93:3c:45:92:cb:88:0c:fc:
                    58:79:d1:bf:8c:a5:45:d6:b7:3a:82:88:66:45:8e:
                    57:53:3a:0d:af:25:b6:5f:27:b9:19:84:e9:49:9d:
                    6f:9c:54:5b:ed:b0:96:4f:82:42:e5:0e:17:ac:6b:
                    c1:d9:eb:97:90:ac:63:2b:91:a3:d6:bf:40:46:87:
                    44:ba:61:6e:90:8c:1a:d6:15:ab:f3:87:4e:85:b1:
                    5a:1b:0e:03:d3:72:30:98:ee:ca:4a:08:ab:e2:bc:
                    db:21:78:98:62:c5:eb:f0:9c:1d:78:41:ff:72:f4:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:41:99:6A:F4:29:0E:CC:0A:8E:8A:46:24:62:FB:A5:3A:86:1C
            X509v3 Authority Key Identifier:
                keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:40:cc:4e:9d:b9:64:58:68:74:e5:3e:10:c0:9c:4e:39:
         29:45:43:af:07:88:6d:67:57:47:fb:fd:4c:9a:33:e1:70:dc:
         78:45:72:8a:a9:58:b5:fb:e0:f6:d1:1e:66:d1:cf:85:c9:b1:
         91:c9:0b:15:5e:5f:8e:30:52:7b:ae:9c:af:34:ab:f5:59:b6:
         01:fd:1e:93:fc:d4:f8:5f:f2:22:0a:46:82:49:7b:ef:c4:78:
         d9:63:1e:27:28:92:5c:04:6c:6e:b0:bc:ff:38:6e:f4:7e:96:
         81:63:df:49:33:b9:87:a4:e2:c1:65:38:86:37:38:c0:3c:a8:
         0d:95:76:05:e9:67:2f:a4:1d:32:bc:01:ff:6a:bd:bc:84:c0:
         e4:d8:ae:63:86:c8:c3:aa:66:5e:64:c9:d6:c9:69:42:85:11:
         47:47:bc:9f:5a:d3:2b:d1:96:9d:c7:d0:9e:65:1f:3a:67:fb:
         1f:44:35:be:f6:83:a9:2f:a0:f3:1a:c7:14:41:ae:f9:7e:ef:
         0b:20:d2:50:d3:2d:b5:b5:66:7b:e8:66:aa:de:39:a3:d9:f1:
         f8:f0:39:44:62:17:3c:8a:c1:5d:96:da:4a:62:ca:9a:15:2e:
         22:9c:86:44:00:0b:1f:02:a9:27:08:21:70:0e:32:35:71:9f:
         58:9a:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:35:49 2026 by rpki-client