Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
File:                     IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json)
Hash identifier:          CBN0V2sbssQkQBIZNv45025vmC4D395xTx3qEaP/ZvU=
Subject key identifier:   24:74:09:1C:E0:70:81:20:3F:2C:A6:66:56:DD:B1:26:89:85:B7:89
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Certificate issuer:       /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
Manifest number:          C7
Signing time:             Wed 22 Jul 2026 22:57:15 +0000
Manifest this update:     Wed 22 Jul 2026 22:57:14 +0000
Manifest next update:     Wed 29 Jul 2026 22:57:14 +0000
Files and hashes:         1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: jWBYjyFEo6+wo4+f2V905dA7ZQNmAQ6aUPujnx7wva8=)
                          2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
        Validity
            Not Before: Jul 22 22:57:14 2026 GMT
            Not After : Jul 29 22:57:14 2026 GMT
        Subject: CN=6a614acb-a99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:68:84:d7:a0:39:61:7e:4f:0a:02:fd:1d:ca:
                    7f:fa:41:b8:18:12:4e:93:b3:cf:67:ca:74:14:39:
                    00:4d:23:6e:c5:21:4a:6e:99:15:6c:c7:67:88:b0:
                    ad:20:68:9e:45:1e:ec:4b:4a:06:fc:eb:a5:2c:c6:
                    4c:86:6e:ba:ab:71:f0:e0:ad:20:c2:a7:9b:34:40:
                    f7:b1:dc:54:52:18:9f:60:b8:b7:6d:2a:1c:4c:04:
                    b5:ce:88:9b:11:0d:6c:80:57:b7:f3:49:78:8b:ad:
                    c7:5a:95:b4:35:77:84:a0:f3:e5:d6:72:1d:d4:cb:
                    1e:de:f9:30:84:8d:d9:7a:60:0e:ad:fd:66:fb:36:
                    56:f9:ae:9a:1a:07:30:78:4c:78:62:e0:a7:60:04:
                    7c:ce:45:5a:a6:b5:32:cb:93:27:f9:2b:43:78:ec:
                    3e:f8:5b:2a:92:c0:4a:9b:3f:82:53:3a:cb:e1:1f:
                    6c:3b:85:e8:d6:c2:fb:a7:75:8a:8c:30:35:fa:d7:
                    20:49:18:81:2b:11:69:3f:e9:7d:88:29:49:91:cf:
                    1c:2c:d7:78:38:e7:d2:20:90:ff:28:e9:3a:37:22:
                    32:e3:c9:9e:28:67:ce:85:68:ce:e8:e8:78:25:e6:
                    0d:df:30:df:77:26:b4:54:60:fc:4e:71:d9:c4:99:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:09:1C:E0:70:81:20:3F:2C:A6:66:56:DD:B1:26:89:85:B7:89
            X509v3 Authority Key Identifier:
                keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:5f:60:39:9e:f9:75:c5:09:a6:cf:5c:35:74:9a:ae:19:
         f3:81:42:aa:13:54:d1:22:0a:38:36:c9:3c:af:eb:47:ac:30:
         2b:45:ce:8e:8d:67:62:27:24:16:0e:56:e0:3b:5e:ca:fb:03:
         68:41:c5:38:44:55:52:bb:f7:19:47:84:f3:c5:ae:a2:37:d1:
         84:6a:9c:8d:94:43:39:34:e9:3e:6f:7d:83:ae:ae:fe:e5:96:
         f5:0b:b6:3a:98:17:ef:91:38:01:14:ef:2d:02:53:6c:89:89:
         47:13:a7:6a:12:24:d4:6b:e7:cc:e8:94:9a:c6:3a:6f:6e:cc:
         98:f3:28:b2:2e:6e:c1:b7:36:85:39:fe:7e:a4:87:5a:4a:a4:
         8b:10:e5:5d:c7:11:70:13:f3:1e:81:73:53:e9:74:f7:29:4e:
         78:98:ad:62:d6:59:1e:71:a3:ca:d4:ec:9b:b8:f9:22:fe:de:
         a3:c5:d5:18:3b:e8:ce:1d:8c:53:f6:92:ac:32:43:4e:36:44:
         2e:40:b7:fc:a0:8b:55:28:74:e6:36:af:59:24:7a:5e:d3:97:
         fc:73:97:ac:1f:7e:c5:94:db:1c:2a:88:f1:9c:b9:0a:47:e1:
         83:df:ee:6c:a4:fe:0e:3b:21:f4:83:97:e0:9f:f7:2f:d0:74:
         a3:57:bd:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw
MTc4RUEzOUQwHhcNMjYwNzIyMjI1NzE0WhcNMjYwNzI5MjI1NzE0WjAYMRYwFAYD
VQQDEw02YTYxNGFjYi1hOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA82iE16A5YX5PCgL9Hcp/+kG4GBJOk7PPZ8p0FDkATSNuxSFKbpkVbMdniLCt
IGieRR7sS0oG/OulLMZMhm66q3Hw4K0gwqebNED3sdxUUhifYLi3bSocTAS1zoib
EQ1sgFe380l4i63HWpW0NXeEoPPl1nId1Mse3vkwhI3ZemAOrf1m+zZW+a6aGgcw
eEx4YuCnYAR8zkVaprUyy5Mn+StDeOw++FsqksBKmz+CUzrL4R9sO4Xo1sL7p3WK
jDA1+tcgSRiBKxFpP+l9iClJkc8cLNd4OOfSIJD/KOk6NyIy48meKGfOhWjO6Oh4
JeYN3zDfdya0VGD8TnHZxJkaswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCR0CRzg
cIEgPyymZlbdsSaJhbeJMB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx
REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEQwMC9GMUFGMTA1MjYxREYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZG
LTNaNmhxWGlIZFlCZU9vNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAigdfYDme+XXFCabPXDV0mq4Z84FCqhNU0SIKODbJPK/rR6wwK0XOjo1nYick
Fg5W4DteyvsDaEHFOERVUrv3GUeE88WuojfRhGqcjZRDOTTpPm99g66u/uWW9Qu2
OpgX75E4ARTvLQJTbImJRxOnahIk1GvnzOiUmsY6b27MmPMosi5uwbc2hTn+fqSH
WkqkixDlXccRcBPzHoFzU+l09ylOeJitYtZZHnGjytTsm7j5Iv7eo8XVGDvozh2M
U/aSrDJDTjZELkC3/KCLVSh05javWSR6XtOX/HOXrB9+xZTbHCqI8Zy5Ckfhg9/u
bKT+Djsh9IOX4J/3L9B0o1e9Bg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:19 2026 by rpki-client