Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
File:                     IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json)
Hash identifier:          nUbo5Vrv0RngjATDTY98GtCKMGJaS9PWpHxq/5G1AMw=
Subject key identifier:   1F:FD:60:4C:B8:2F:8B:DB:87:AE:2C:E9:D9:75:93:B6:14:4A:28:49
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       02A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
Manifest number:          029C
Signing time:             Wed 13 May 2026 01:42:03 +0000
Manifest this update:     Wed 13 May 2026 01:42:03 +0000
Manifest next update:     Wed 20 May 2026 01:42:03 +0000
Files and hashes:         1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: i7WvcxIAZPeRIZ/1KLWozkL/X8KR0SH4UcU3eUYHBl8=)
                          2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: q4e7aYH9waKslT9vvJ5LwHeUoX9Y/i5O5m70Jm8iiXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
                          rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: May 13 01:42:03 2026 GMT
            Not After : May 20 01:42:03 2026 GMT
        Subject: CN=6a03d6eb-d11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:04:f7:5a:cb:7e:7d:56:5c:68:44:02:9c:
                    a1:6a:a1:ca:6b:dc:f9:7a:bd:c9:12:f3:70:37:dc:
                    18:fd:d5:9c:30:7e:a0:c7:16:f3:8f:5f:f8:ed:26:
                    dd:2e:59:06:d2:f3:27:8b:98:a6:60:32:f8:97:52:
                    58:62:5b:c3:a3:0d:ec:ca:10:20:c0:83:8d:67:76:
                    30:2f:47:41:74:26:05:61:05:e3:76:83:4f:89:7a:
                    7f:32:dc:5e:13:da:bd:8e:a3:ee:31:e5:11:26:30:
                    2a:9e:87:6a:f9:91:7b:cf:44:3d:26:1d:10:93:f1:
                    fd:f6:1e:a6:89:dd:04:f7:b2:d3:2f:70:3e:01:fc:
                    e1:d2:5c:ef:4a:c9:c5:3e:81:62:6a:31:2b:f0:00:
                    6b:b0:12:7f:49:98:23:0f:d3:3f:a4:8f:5f:87:39:
                    2e:f1:ca:76:f9:bd:28:ca:49:98:21:7f:d8:ac:cd:
                    6c:48:f6:a9:6a:d6:9d:aa:c2:34:07:3e:83:a0:35:
                    b1:52:22:be:a4:65:ba:b3:89:80:59:3f:88:7e:47:
                    c6:f3:34:98:dd:2e:ae:99:0d:72:8a:78:67:25:61:
                    4b:44:28:4a:a7:88:57:21:9d:4c:9f:7c:47:82:90:
                    a8:a4:b1:62:44:45:a8:ba:87:39:ae:a0:de:73:ba:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FD:60:4C:B8:2F:8B:DB:87:AE:2C:E9:D9:75:93:B6:14:4A:28:49
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:28:f7:5a:94:dd:00:bf:62:75:65:58:63:0d:ae:ca:98:
         27:02:4b:00:e0:4a:dc:54:03:92:11:40:ee:5c:ea:50:d2:4a:
         ac:ba:4a:f8:7d:31:0a:a3:f6:73:e0:71:81:f8:f9:60:df:3b:
         bf:99:b1:c7:99:78:b8:b7:37:55:69:75:3e:cf:70:e3:c6:b9:
         26:0e:25:d4:e3:31:66:68:b3:4a:8c:25:2a:0a:f3:95:9d:68:
         09:72:d1:56:5b:74:11:6f:6f:64:56:ee:12:0c:13:c6:36:b1:
         f5:fd:03:cb:b0:90:1f:6b:a8:5e:8f:c3:09:47:92:a9:4a:84:
         ac:ac:4d:4b:f6:76:57:5e:3e:52:dc:49:d5:f2:d8:f4:94:40:
         c1:95:d9:58:0b:39:8c:1c:fd:54:ed:29:c6:91:b5:f0:55:10:
         ce:c6:18:fa:49:cb:0a:2e:27:d9:be:48:b9:bf:51:53:2b:aa:
         c5:47:e0:86:6c:3e:94:7f:36:5e:1a:13:a6:66:be:b0:6b:a1:
         2f:27:57:50:f9:36:2a:44:f0:b7:6e:55:2c:46:f1:00:96:23:
         89:08:67:16:dd:29:09:9b:ca:e2:65:e7:29:24:2d:bc:95:d4:
         f8:bc:ae:52:33:e4:6a:fe:b8:96:cb:0e:ec:9d:34:f7:f4:9e:
         1a:e1:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:11 2026 by rpki-client