Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
File:                     IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft (raw, json)
Hash identifier:          kzeTwIFCgmwdkQqN6NXx0aT1+cpHO9KwlMVJM3dSL7Q=
Subject key identifier:   19:AD:62:16:09:8D:43:EC:9E:E6:55:AE:31:0E:D6:BF:A9:CB:08:44
Authority key identifier: 22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77
Certificate issuer:       /CN=A9183249/serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
Manifest number:          31
Signing time:             Thu 23 Jul 2026 10:41:33 +0000
Manifest this update:     Thu 23 Jul 2026 10:41:32 +0000
Manifest next update:     Thu 30 Jul 2026 10:41:32 +0000
Files and hashes:         1: IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl (hash: SZSq0c7ZXk1O2uNUvgXLWdoJEcIGksv1QrbUYizCA3g=)
                          2: E90334323E1711F1872CBF7AB0833773.roa (hash: gfbEk0OCCthmwoLDtfzliRliBz11gfjCRa7Rca3Cfko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl
                          rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183249, serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877
        Validity
            Not Before: Jul 23 10:41:32 2026 GMT
            Not After : Jul 30 10:41:32 2026 GMT
        Subject: CN=6a61efdd-2d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:01:c9:af:9d:43:c8:01:0b:6d:6b:6a:27:
                    fa:52:b0:c2:35:87:a4:74:85:f6:bd:e6:98:c3:01:
                    44:09:60:c0:f7:16:33:d1:11:22:7f:bf:6f:0d:4d:
                    5f:20:9a:19:ad:10:86:ce:e1:8a:f9:49:74:1a:ef:
                    dd:0a:b8:69:a6:7c:2e:13:4b:62:bc:9b:e4:46:a4:
                    2b:c9:7b:b4:03:33:f3:d3:64:d5:d9:28:85:1b:ba:
                    12:9f:9a:bb:d1:88:7d:d9:5c:a6:79:94:09:b8:ee:
                    5b:70:1d:e7:cc:13:42:eb:06:52:b4:81:50:65:1b:
                    1a:46:e1:8a:58:fb:c3:5e:36:68:c2:9f:97:bd:34:
                    5e:e6:83:38:3a:ec:cd:d0:6b:f9:80:39:3c:ca:fb:
                    b8:a9:db:51:7c:70:67:c2:6c:59:0a:73:bb:57:54:
                    1d:7b:b2:c6:5f:f7:3f:c7:0c:6b:13:35:67:6f:a2:
                    9f:02:56:f2:07:8f:3b:89:ff:9c:eb:82:97:b7:12:
                    e0:26:09:cf:de:83:e1:13:5d:52:d9:31:33:c7:a8:
                    0b:5b:4d:87:c9:a0:f4:01:9d:92:b7:f2:6e:8f:7e:
                    b7:a0:f3:58:0e:bc:ae:8c:65:48:34:61:c2:88:17:
                    a0:e8:3a:2f:64:31:11:ca:18:b8:aa:9f:49:6f:fa:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:62:16:09:8D:43:EC:9E:E6:55:AE:31:0E:D6:BF:A9:CB:08:44
            X509v3 Authority Key Identifier:
                keyid:22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d0:6f:61:15:8f:88:fe:39:d2:c7:af:3a:1a:8d:22:b0:33:
         c2:90:dd:30:af:0f:19:e5:f7:c8:a8:19:ae:f1:cf:a7:8b:f5:
         6e:39:75:10:5e:6d:85:3d:6d:24:0e:ae:28:c1:49:bf:cd:53:
         ba:da:f9:09:27:1b:c7:49:61:d9:42:40:38:81:b4:b4:c6:a6:
         47:2c:aa:be:e2:38:00:b9:16:83:bb:11:68:69:70:58:97:92:
         91:e3:8a:a0:ba:5f:84:98:24:b7:ea:c5:20:78:df:7a:20:13:
         af:3b:d0:c8:07:28:e9:44:2b:8f:23:88:cd:e9:32:6b:64:91:
         16:56:28:52:63:b6:6f:ff:9e:25:41:c2:6f:4a:67:86:2f:c6:
         fd:da:a2:4e:6a:7e:49:58:ad:10:6b:17:ca:3d:07:b9:c8:cb:
         c7:a8:aa:92:ce:bc:68:cb:86:a3:85:56:65:1e:df:d6:6d:4f:
         e8:2e:48:a8:7e:89:a6:c1:c9:91:f6:b9:77:9e:29:b9:c5:2b:
         03:8e:51:86:94:6b:e0:93:7f:c1:28:8f:3b:91:7e:ff:2e:30:
         3a:f8:69:a1:ce:b7:7f:b1:25:9d:e2:68:5e:a0:96:85:ef:22:
         ad:95:bc:16:8e:76:70:4d:b7:54:d4:c2:f2:3e:62:c3:8d:4e:
         74:3d:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:21 2026 by rpki-client