Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
File:                     IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json)
Hash identifier:          yIRcY1pCZ/igUS4I8Bz9VyG78vXuxcESHEldxQr5+lA=
Subject key identifier:   25:9F:04:49:FA:4A:85:FB:48:CE:91:55:60:2E:5A:BD:F7:19:E1:21
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Certificate issuer:       /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial:       111A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
Manifest number:          110A
Signing time:             Thu 24 Sep 2026 17:14:51 +0000
Manifest this update:     Thu 24 Sep 2026 17:14:51 +0000
Manifest next update:     Thu 01 Oct 2026 17:14:51 +0000
Files and hashes:         1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: VKdOT5NdEl5jvBqkL/jW2YYAgERVljPmYlpJ+hxhgbQ=)
                          2: 608836D046B111E98B793856C4F9AE02.roa (hash: CkPn2ZJIX2L7WrIqMPI/SIicfwibPMx/ZU7x2GuJAkw=)
                          3: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: a8kvW6Orzqu3ANz5V7LVYSu6qTioAnb21VQHXAb65ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4378 (0x111a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
        Validity
            Not Before: Sep 24 17:14:51 2026 GMT
            Not After : Oct  1 17:14:51 2026 GMT
        Subject: CN=6ab55a8b-9e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:6f:3c:9c:66:0e:70:34:f3:87:31:f5:c7:
                    0e:97:49:1a:97:55:f0:95:12:ea:01:fe:e4:83:08:
                    a8:2b:53:5b:ba:74:02:84:d1:00:99:ba:b9:6d:5c:
                    3d:ee:28:43:7c:da:75:b7:4b:ef:77:c9:c2:a1:e5:
                    0a:ca:44:33:6e:4f:17:17:28:d1:08:56:95:84:2e:
                    8e:30:5b:38:d5:48:88:43:2c:15:4d:86:6e:45:9f:
                    4e:a3:43:5d:57:61:ed:02:45:fa:57:33:8d:41:39:
                    7f:85:01:c3:f7:e1:bd:c3:79:d8:5c:5e:ae:d5:10:
                    ad:39:58:4f:50:d8:e7:57:99:da:d9:25:10:f3:f0:
                    da:ee:ce:e5:e1:df:99:86:38:b6:60:4a:dc:d4:c7:
                    c6:3b:4b:9d:d5:2a:72:e5:07:9c:c9:0d:ef:46:54:
                    9e:25:ac:b5:fe:ae:27:a4:b1:7d:6a:70:ef:cb:e7:
                    6d:02:7c:85:e8:d5:0d:ae:3f:75:ee:9b:10:0a:b6:
                    b1:a8:03:17:0c:a5:48:e9:7d:35:5e:16:b9:da:f4:
                    92:ed:54:ee:3e:e7:bd:c5:58:f6:22:9e:b7:a9:76:
                    d6:96:2b:36:f9:4e:71:2c:3a:e3:33:a9:6d:7d:63:
                    97:5c:00:3d:9b:55:61:fc:c9:91:69:94:11:15:09:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9F:04:49:FA:4A:85:FB:48:CE:91:55:60:2E:5A:BD:F7:19:E1:21
            X509v3 Authority Key Identifier:
                keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:13:31:4b:0e:ca:5b:34:4a:f4:a2:80:55:8e:ba:d6:81:
         fc:7c:83:dc:fe:f6:84:d8:71:15:66:04:68:13:f1:ab:b1:a0:
         22:d4:6d:ee:3c:33:43:7d:fa:d4:6e:9c:07:d8:7c:ad:af:e9:
         b6:bd:cb:70:8e:7c:97:d7:b8:64:dc:58:79:a0:7d:d8:62:93:
         f4:8f:ec:78:60:e4:c8:0f:1d:d6:51:71:62:73:02:f8:2b:15:
         07:2e:92:a1:55:d8:91:0a:cd:57:30:b4:bf:e8:d8:5a:95:bc:
         29:75:3c:05:b1:b5:2f:d0:1d:8a:46:92:78:da:53:f9:7b:57:
         70:56:81:2c:c6:80:67:3b:2d:52:dc:3c:8e:17:8b:f5:fb:bc:
         9d:da:ef:02:76:84:fb:cb:9b:f7:54:a5:d2:ae:31:6f:70:4d:
         8a:18:a5:bf:43:2f:51:f6:c2:97:d4:0c:e8:7e:f1:e7:39:44:
         57:48:c6:f9:a5:d1:41:79:85:2b:86:ea:49:44:54:25:e1:d2:
         95:9a:2b:74:da:67:41:b0:70:a6:2d:8f:20:1a:48:60:f1:bc:
         8b:ce:3f:1c:52:e3:04:25:f7:2f:bc:c9:5e:e7:ad:43:86:c5:
         90:a0:b7:c6:d7:b5:8a:69:72:11:38:c7:51:9d:72:ac:3e:79:
         f4:ea:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:27:04 2026 by rpki-client