Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
File:                     IKFf0591NMenolMf7YtaFwipP1I.mft (raw, json)
Hash identifier:          RRlRfheoSGtx+aZeWKJc9bRoTcwI/R9JvsoDwJ1D5PA=
Subject key identifier:   D5:64:8A:03:7C:5B:BD:F8:C0:A6:B1:1A:EC:95:8D:DF:ED:AE:05:7D
Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Certificate issuer:       /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
Manifest number:          24
Signing time:             Thu 23 Jul 2026 10:55:31 +0000
Manifest this update:     Thu 23 Jul 2026 10:55:30 +0000
Manifest next update:     Thu 30 Jul 2026 10:55:30 +0000
Files and hashes:         1: IKFf0591NMenolMf7YtaFwipP1I.crl (hash: RlsZA7H5y+VCTefOUjoHrJOQqRc9kzaGx/c/eK+nbYw=)
                          2: 01A09AD4529A11F1B2F4C97190833773.roa (hash: LeQAKpSHZPhzl/yDoMV2G62pZQxQb0sxO6TIaMOgO10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
                          rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
        Validity
            Not Before: Jul 23 10:55:30 2026 GMT
            Not After : Jul 30 10:55:30 2026 GMT
        Subject: CN=6a61f323-a7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:2e:65:f2:85:68:4d:88:75:41:0c:1a:39:
                    d0:96:53:5f:7c:b2:15:1b:9c:03:d0:ba:cf:a2:86:
                    83:fc:6a:82:ac:57:3a:d5:75:1d:50:98:73:a8:ec:
                    1d:44:c4:f9:4c:40:35:36:43:b4:76:1e:dd:65:26:
                    e4:aa:3a:dd:86:42:18:9d:e1:27:32:07:43:d2:76:
                    7d:c8:2d:39:53:d2:c3:64:a6:fc:a5:55:ce:f5:b1:
                    0e:09:5b:3e:10:91:a2:7f:9f:c7:37:ec:75:a0:2f:
                    5e:10:27:79:0c:b2:fa:5a:f9:31:94:10:6e:13:71:
                    06:37:60:8c:37:7b:69:35:de:87:17:39:a0:10:0d:
                    66:ac:3d:b6:de:04:35:f7:34:df:6d:3a:c9:62:92:
                    30:9c:e3:a7:7d:fb:0e:12:76:67:02:3f:72:e5:06:
                    11:ee:e6:16:4c:f8:62:be:7e:68:71:9b:6d:6f:5b:
                    91:dd:87:71:a7:1c:f0:13:c8:90:9d:b8:92:16:4f:
                    eb:0f:fd:03:75:3d:a3:f7:a8:09:37:b6:12:c4:1d:
                    2d:3e:32:3b:7d:cb:3b:c2:b7:17:d1:2d:0d:ea:1b:
                    91:b1:ec:1c:fa:62:d5:fd:00:a2:b1:aa:3d:1e:32:
                    39:f7:ea:64:87:98:bb:9b:fe:21:c6:38:7d:98:c1:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:8A:03:7C:5B:BD:F8:C0:A6:B1:1A:EC:95:8D:DF:ED:AE:05:7D
            X509v3 Authority Key Identifier:
                keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c9:9d:d6:5d:4b:43:5c:e9:b7:92:c2:64:aa:f1:5b:8f:b4:
         8f:90:e0:da:71:58:ff:b9:79:36:86:a7:bb:6a:25:96:04:78:
         06:fc:e6:62:82:42:18:0b:e2:7a:b8:5e:ec:1c:b8:56:9e:aa:
         18:e0:b6:f9:a8:c9:09:16:17:e0:e8:7d:41:56:d8:6c:30:ce:
         6d:0f:c1:30:35:92:51:46:5d:10:50:d3:80:a2:bf:91:c7:e0:
         7e:4d:1a:7a:32:fb:54:18:36:5c:e4:0c:e9:e0:ad:a5:0d:2a:
         bc:be:87:e9:f9:4f:24:1e:af:8c:98:39:c5:f8:18:3d:5b:5f:
         f5:8a:28:c2:20:e2:a6:9c:d8:58:d8:70:de:27:70:bc:be:cd:
         7d:9a:19:72:8d:52:d0:c3:3f:19:cc:b8:66:bf:6f:87:2d:47:
         0a:4f:a8:d8:6d:a6:81:f4:15:24:eb:dc:99:61:88:72:e4:a2:
         b7:6c:ea:d4:b5:96:1b:bf:eb:81:d1:89:26:48:9f:de:b9:9c:
         e6:cc:00:a8:ac:02:58:d1:fc:20:fc:56:1d:e3:29:4a:49:92:
         fa:29:b2:58:bb:7a:41:7b:1d:b3:03:7e:a7:48:d4:f3:7e:67:
         97:8b:21:06:f2:4b:0b:9f:9d:aa:d2:d2:e7:01:f8:73:a9:3b:
         65:e2:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:41 2026 by rpki-client