Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
File:                     IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json)
Hash identifier:          zYJHOnCQqm0y+jS+kdbm4QzStmQd67UGVz3uM50+OVw=
Subject key identifier:   E5:83:F0:73:27:23:13:EA:F1:17:EA:79:D3:7D:5B:26:60:D8:F1:47
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Certificate issuer:       /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
Manifest number:          0161
Signing time:             Mon 11 May 2026 05:00:19 +0000
Manifest this update:     Mon 11 May 2026 05:00:19 +0000
Manifest next update:     Mon 18 May 2026 05:00:19 +0000
Files and hashes:         1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: oed1fSNx8jtOaSf+zFjk1hsiatbR5UMNGzzU1t8OhTw=)
                          2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: Z9psePfPHTD1JWqFIEMEnQFvkSAfBuwnGTYYVZWeEbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
                          rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
        Validity
            Not Before: May 11 05:00:19 2026 GMT
            Not After : May 18 05:00:19 2026 GMT
        Subject: CN=6a016263-8264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:44:cf:52:70:32:82:a5:63:1e:6f:1c:44:
                    4b:bb:5c:9d:e3:44:ce:34:2f:f7:69:39:60:3c:61:
                    ea:ee:e4:04:d3:25:9e:d3:e3:73:01:79:2a:36:f3:
                    dd:42:d6:76:cd:2a:f7:6c:bb:0f:ec:34:25:c6:98:
                    71:26:5d:f7:8f:4c:91:81:4f:1e:99:c4:ff:37:d8:
                    b9:d3:da:3b:2d:9e:eb:d6:99:e5:66:b3:0a:a6:8e:
                    dc:a1:a6:a0:15:08:92:d6:1e:7a:ed:69:17:9b:b2:
                    5a:45:9e:64:87:9f:0b:52:30:b0:d8:2c:4f:f5:7d:
                    0d:31:c7:5e:6a:8c:d4:ed:cd:63:02:e6:99:52:4e:
                    31:43:4b:10:4a:10:ea:3b:56:82:12:06:ab:c2:de:
                    e8:1d:74:13:57:77:87:78:c2:68:4a:5c:ac:00:ee:
                    49:19:c0:8f:b7:41:9a:23:20:9a:bc:08:23:14:5f:
                    11:7f:60:92:32:40:ea:df:e5:e1:be:85:a0:2d:1e:
                    be:0d:16:58:cc:ee:bc:18:e3:37:c0:8f:ab:a1:db:
                    0a:ad:27:c4:bb:d4:96:84:51:bd:72:18:02:02:b7:
                    ac:17:5b:90:93:13:03:6f:71:6e:f5:af:90:ec:a7:
                    35:ec:4c:a0:0a:a1:ac:3b:6d:1a:23:27:98:dd:bb:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:83:F0:73:27:23:13:EA:F1:17:EA:79:D3:7D:5B:26:60:D8:F1:47
            X509v3 Authority Key Identifier:
                keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:93:2b:a5:9a:46:4a:eb:ad:ff:f2:74:13:e5:91:e3:9a:
         f7:d1:4e:c9:c5:da:6d:65:d5:7a:0e:8e:7d:1f:93:43:68:39:
         23:f2:34:c6:c1:8f:6a:d9:a0:77:4a:9d:1f:6f:de:74:b1:2e:
         79:2a:52:dd:74:7f:c5:1a:47:41:db:d4:5f:d2:e1:90:01:7d:
         3f:7d:92:81:fc:00:37:89:8f:69:1d:58:eb:df:49:2e:64:56:
         54:d1:e2:ef:fc:a4:eb:bc:f8:ba:86:dd:f9:cc:cf:44:fc:da:
         bb:44:2b:28:c3:9a:83:4f:92:b6:ec:19:0e:54:51:d3:74:7f:
         44:f1:4c:38:bf:e2:29:41:1a:3e:5e:2e:c6:a4:1e:60:6c:65:
         2f:b8:0f:52:e1:2c:b9:5e:24:b3:2d:3a:f5:74:1b:b4:75:bd:
         89:ae:b0:05:f5:8d:10:fb:5f:ff:fe:f0:ec:f6:cf:12:60:f4:
         4e:a5:28:b2:dd:eb:1e:01:8a:74:0b:88:da:3b:8c:35:ee:86:
         e9:ea:59:a6:18:94:a4:39:f9:37:4b:c0:ed:76:51:34:b4:5c:
         eb:55:72:dd:43:67:46:dc:e9:4a:f0:63:57:75:27:ee:a9:6b:
         c5:01:b3:4b:ca:fd:cc:70:d3:b6:0f:32:78:1d:45:e0:ec:e4:
         ad:37:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:57 2026 by rpki-client