Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File:                     It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier:          V0m1EB1XzSKRNssuowSWdzICoebT4lsgw2ET0/cOTno=
Subject key identifier:   F5:EE:8D:50:D3:C0:57:1C:CF:08:32:FD:8E:69:9F:4A:E7:C5:0E:22
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer:       /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number:          018A
Signing time:             Tue 29 Sep 2026 04:57:04 +0000
Manifest this update:     Tue 29 Sep 2026 04:57:04 +0000
Manifest next update:     Tue 06 Oct 2026 04:57:04 +0000
Files and hashes:         1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: cUVHi6KBmLwoGh5lT9NOOajBSwgnn9MbgPIaS4CeHOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
        Validity
            Not Before: Sep 29 04:57:04 2026 GMT
            Not After : Oct  6 04:57:04 2026 GMT
        Subject: CN=6abb4520-50b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:61:2c:e2:41:02:9d:f8:a1:4a:ac:d8:27:
                    b2:70:fd:33:15:67:4c:f4:2d:82:fa:be:48:c5:ec:
                    47:57:cc:7b:bc:1b:47:0e:d7:f8:33:03:04:63:c1:
                    bf:ca:67:4b:bc:cd:02:cd:de:f7:6a:06:d4:c9:46:
                    b8:9d:c0:27:ee:6d:e0:24:ab:27:33:42:dc:b1:21:
                    03:31:26:61:9d:12:f6:b5:0f:79:ec:ab:97:d2:45:
                    72:12:41:10:02:4d:31:14:6e:67:2b:ca:a0:67:82:
                    af:5b:ff:0f:76:35:e2:60:02:21:37:e2:66:f7:53:
                    e8:dd:05:37:e7:12:4a:0a:e7:f3:34:ed:25:22:0c:
                    59:65:53:32:6c:b7:f8:ca:fc:3e:52:28:74:98:03:
                    55:b2:6e:71:54:6f:ad:11:ea:f0:66:a9:44:0a:49:
                    43:ad:50:aa:c6:80:37:cb:b3:81:46:c4:f7:cf:1c:
                    96:43:d9:16:c4:ba:87:31:cd:df:da:b9:10:c4:45:
                    14:2b:f2:14:6b:63:87:a0:93:73:e8:6f:2f:e8:21:
                    fa:eb:e5:b6:31:64:b0:14:47:12:7f:37:32:01:c5:
                    52:6f:b9:d2:02:a7:72:4c:3d:56:54:8f:61:45:cf:
                    a7:d4:9e:79:79:bb:33:95:bb:20:b1:a8:ff:5f:7a:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:8D:50:D3:C0:57:1C:CF:08:32:FD:8E:69:9F:4A:E7:C5:0E:22
            X509v3 Authority Key Identifier:
                keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:36:fc:6b:b7:9d:5d:0f:6f:e5:9a:5a:b8:8c:b4:b6:51:93:
         0f:7e:25:07:c3:b0:83:9b:fc:f9:08:b3:da:5d:a4:42:01:8b:
         59:3d:fd:41:30:ed:b8:19:d1:1f:bc:d7:46:a8:cd:e6:15:7b:
         57:76:52:54:26:bb:3a:de:bd:c8:a7:0c:a1:38:86:2e:95:52:
         71:23:a9:4d:ce:a4:e0:9b:f3:a0:5c:37:96:6c:9e:2f:23:98:
         ef:f5:5e:ff:80:f6:5f:a8:40:3e:43:71:d4:88:99:b9:ea:57:
         cc:ec:40:c5:42:ef:4a:9e:6f:05:c4:17:fe:f4:ca:c9:e4:e0:
         d5:e8:50:ff:9a:fa:ca:fa:60:52:80:ab:c2:b6:38:20:64:5f:
         b2:4c:ce:1b:e3:61:85:9e:f1:a6:8e:55:e6:b6:1e:23:93:75:
         1d:7d:a0:96:e7:1c:8f:fe:59:29:5e:fd:ba:1d:05:1b:c4:29:
         d9:b3:9f:3c:be:d4:2f:02:e0:a1:87:d5:10:2b:78:88:11:3d:
         9f:94:26:b4:1b:13:1c:f6:ca:64:7f:15:c7:b6:66:fe:94:9c:
         6f:8d:2e:cb:6a:ff:34:0e:ee:26:84:61:34:3b:47:aa:41:e8:
         74:7a:ca:cc:6b:97:f2:83:1a:87:48:5f:04:56:cc:e3:c1:f1:
         28:f7:16:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw
RUQwRDQ0MzYwHhcNMjYwOTI5MDQ1NzA0WhcNMjYxMDA2MDQ1NzA0WjAYMRYwFAYD
VQQDEw02YWJiNDUyMC01MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6VhLOJBAp34oUqs2CeycP0zFWdM9C2C+r5IxexHV8x7vBtHDtf4MwMEY8G/
ymdLvM0Czd73agbUyUa4ncAn7m3gJKsnM0LcsSEDMSZhnRL2tQ957KuX0kVyEkEQ
Ak0xFG5nK8qgZ4KvW/8PdjXiYAIhN+Jm91Po3QU35xJKCufzNO0lIgxZZVMybLf4
yvw+Uih0mANVsm5xVG+tEerwZqlECklDrVCqxoA3y7OBRsT3zxyWQ9kWxLqHMc3f
2rkQxEUUK/IUa2OHoJNz6G8v6CH66+W2MWSwFEcSfzcyAcVSb7nSAqdyTD1WVI9h
Rc+n1J55ebszlbsgsaj/X3qWDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXujVDT
wFcczwgy/Y5pn0rnxQ4iMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw
NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O
NmlJUi1idkpwMTBPME5SRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvjb8a7edXQ9v5ZpauIy0tlGTD34lB8Owg5v8+Qiz2l2kQgGLWT39QTDtuBnR
H7zXRqjN5hV7V3ZSVCa7Ot69yKcMoTiGLpVScSOpTc6k4JvzoFw3lmyeLyOY7/Ve
/4D2X6hAPkNx1IiZuepXzOxAxULvSp5vBcQX/vTKyeTg1ehQ/5r6yvpgUoCrwrY4
IGRfskzOG+NhhZ7xpo5V5rYeI5N1HX2gluccj/5ZKV79uh0FG8Qp2bOfPL7ULwLg
oYfVECt4iBE9n5QmtBsTHPbKZH8Vx7Zm/pScb40uy2r/NA7uJoRhNDtHqkHodHrK
zGuX8oMah0hfBFbM48HxKPcW2g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:23:06 2026 by rpki-client