Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File:                     It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier:          pMIQR58rmeZLEVGW7KeV8QmB8UsOgd6IbrL0DBdONe0=
Subject key identifier:   18:27:2A:93:6A:75:47:29:38:9D:EC:16:2F:EE:A0:D9:4C:21:1C:87
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer:       /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number:          0167
Signing time:             Thu 23 Jul 2026 06:25:35 +0000
Manifest this update:     Thu 23 Jul 2026 06:25:34 +0000
Manifest next update:     Thu 30 Jul 2026 06:25:34 +0000
Files and hashes:         1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: tP48erIJwTLwas7oVqaQpP0+1kdHYCw1lNOS6GOQ4Ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
        Validity
            Not Before: Jul 23 06:25:34 2026 GMT
            Not After : Jul 30 06:25:34 2026 GMT
        Subject: CN=6a61b3df-44aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:43:a0:86:d7:ce:6a:bf:13:25:28:4c:f7:
                    3b:c0:1a:71:8d:3c:bc:41:64:0d:8f:01:dc:12:08:
                    c2:1d:89:d9:02:6d:ee:3b:68:bb:de:e1:2d:5c:53:
                    6e:fe:dd:71:3d:a7:af:77:22:6b:67:71:08:f4:5b:
                    e7:18:d5:cf:fa:a5:df:28:1d:30:6a:77:20:bd:80:
                    fa:96:1c:0b:da:89:56:69:72:59:83:03:5c:3a:c0:
                    08:ae:32:83:9d:bb:51:3c:4d:12:a0:4f:52:62:1c:
                    04:dc:fa:7f:9d:bd:80:fa:c9:4a:35:b4:45:cd:53:
                    78:fa:a6:66:a6:da:a0:78:28:9b:d5:ab:d6:1e:b8:
                    6d:60:2b:66:c1:53:9d:c4:06:dc:3d:9c:66:ed:f2:
                    09:57:f1:b1:ec:56:c4:9f:c0:de:8f:1b:d3:16:96:
                    d4:01:a3:86:ba:e1:42:73:e0:be:59:d7:17:0f:1e:
                    6b:e8:11:9b:4d:26:8f:68:09:e0:24:65:db:84:29:
                    06:3d:7c:95:40:07:ab:0b:ef:9a:39:ed:d0:86:ee:
                    6d:9b:f5:a9:21:c3:6a:60:df:04:df:4a:70:49:81:
                    2d:6f:01:df:a4:03:3d:5f:37:ef:f6:13:f0:4b:7c:
                    82:56:97:84:dd:8c:db:93:37:40:a3:a2:2b:57:4a:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:2A:93:6A:75:47:29:38:9D:EC:16:2F:EE:A0:D9:4C:21:1C:87
            X509v3 Authority Key Identifier:
                keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:ef:8c:64:73:1d:0f:93:ac:4b:bd:67:fb:5a:3a:3d:f8:
         98:2e:26:3d:bc:ae:ed:ca:2d:ff:6b:31:0e:cb:1f:ab:b4:38:
         59:43:32:6f:f9:81:a5:66:08:72:32:7c:71:40:f3:c0:94:7d:
         7a:cc:1d:03:6e:9b:ee:c9:c4:ff:c6:1b:93:3f:73:fb:ab:36:
         c9:c2:b7:36:f2:4a:8b:ac:bd:2b:b5:59:20:bf:26:10:6d:5c:
         b1:e3:ab:50:36:a0:50:b5:9e:ca:65:e3:a7:35:07:b7:2e:10:
         78:06:81:47:d3:5e:22:a0:ab:27:38:82:a6:9f:a8:c5:68:ff:
         38:0d:28:c6:aa:86:11:b0:b5:1e:2b:54:0b:57:8f:e6:27:d3:
         cc:e3:b1:46:9c:cf:5f:0b:cd:55:70:54:c6:30:b8:05:55:8e:
         90:c6:8d:6f:a3:9c:51:64:0e:6a:be:96:f9:a0:df:8f:e1:4a:
         37:25:1a:b8:f0:fa:e0:b5:a2:03:ca:be:76:f3:04:4d:6f:35:
         03:b6:18:a5:71:19:2b:8a:20:64:d1:06:bc:49:4e:05:b2:43:
         1e:76:34:f9:7d:cc:ba:72:b6:c6:4a:4a:94:fd:65:06:4f:2a:
         ee:f7:c4:1d:da:7a:f4:28:4d:09:e4:53:f4:8f:3c:ec:2e:d1:
         0f:c6:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:27 2026 by rpki-client