Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
File:                     ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json)
Hash identifier:          XQNhDEd+XXRX8EQfa9h8P1geiM/P1gtOTpnjn8JLHK0=
Subject key identifier:   84:04:2A:DF:81:9B:5C:D2:2F:8C:92:AD:9A:B7:28:2A:58:DE:ED:A3
Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
Certificate issuer:       /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
Manifest number:          0206
Signing time:             Thu 23 Jul 2026 04:36:59 +0000
Manifest this update:     Thu 23 Jul 2026 04:36:58 +0000
Manifest next update:     Thu 30 Jul 2026 04:36:58 +0000
Files and hashes:         1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: LwuHPHvG0UMuvz6/QSV/OzTVCKimAuXpw7tb0gzLUds=)
                          2: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=)
                          3: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
                          rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137
        Validity
            Not Before: Jul 23 04:36:58 2026 GMT
            Not After : Jul 30 04:36:58 2026 GMT
        Subject: CN=6a619a6b-ef38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:24:18:93:5d:ed:ea:85:c7:0c:16:42:e5:
                    c4:52:7a:34:36:37:64:37:ab:9a:ec:6f:02:03:87:
                    e9:d5:90:4e:e1:fb:f9:a1:98:17:d0:9b:19:cf:f6:
                    18:d6:07:bd:af:b5:04:ec:9f:15:eb:e2:b6:ff:75:
                    99:0f:55:fe:5d:bc:98:67:85:e5:7a:d3:68:8d:27:
                    5a:6e:46:2a:f8:5f:51:4c:6a:43:09:de:d1:0d:26:
                    d9:70:a5:c5:75:83:9c:57:44:3b:77:b1:08:41:71:
                    4c:da:04:67:0a:a6:a0:b3:c5:2a:4b:f4:d5:ba:a2:
                    79:ba:7c:fb:52:dc:8a:fb:3b:8a:4a:f6:fa:1a:0f:
                    c4:61:31:01:71:d0:bd:32:76:4f:a9:b8:68:68:20:
                    80:3e:f5:6d:8a:04:4a:54:23:49:f5:e1:9f:72:ed:
                    69:e8:b7:f8:9e:57:28:bf:77:47:b2:df:06:b8:3e:
                    74:98:1d:67:79:43:b3:8a:c4:43:fe:d3:f9:0b:bc:
                    46:e8:0b:0e:41:ff:15:d1:52:a7:8f:e1:b4:bd:84:
                    35:64:68:af:11:07:28:d5:3f:f8:1b:34:58:c3:92:
                    1d:21:64:10:ca:7a:e6:3b:24:6a:8b:e8:9d:0a:b0:
                    3b:18:18:58:15:e7:2d:ac:15:ac:ca:0a:98:61:e6:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:2A:DF:81:9B:5C:D2:2F:8C:92:AD:9A:B7:28:2A:58:DE:ED:A3
            X509v3 Authority Key Identifier:
                keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:a9:d0:7c:f6:3f:8b:4f:cd:57:21:2a:f2:06:00:d9:fa:
         98:df:e6:ea:02:61:22:e1:d6:fc:97:ae:1d:0f:d4:be:ca:43:
         be:c4:01:2b:96:4a:c0:c5:a8:0c:d7:b0:41:33:aa:67:45:17:
         96:4a:ea:86:a0:2c:29:9b:41:e6:1c:c2:5f:5c:cd:af:ff:ab:
         ca:72:03:87:80:c1:d7:8e:19:2b:cc:95:e8:de:72:de:20:23:
         c6:d8:67:7c:f0:b9:52:b5:de:69:29:b9:61:0a:7c:98:07:8f:
         e8:cd:b9:99:12:0e:09:56:4c:9f:8b:3c:f9:fc:81:8a:c6:69:
         bc:49:6e:a7:39:a9:29:05:47:f1:46:b6:67:3a:98:3a:13:e9:
         50:70:b1:77:84:d0:2b:ee:57:14:41:19:5b:9a:ce:31:f6:99:
         03:f3:d7:a9:0e:b2:7f:ee:e2:74:f1:20:93:94:f2:37:98:20:
         37:61:92:f2:46:32:4c:43:4c:71:b3:5a:a1:0b:9e:5c:5c:a3:
         64:a9:48:c6:b3:88:f2:1d:c4:df:dc:b8:3d:e1:5c:fe:7b:b7:
         41:3b:0d:06:8a:98:56:94:43:91:46:9d:b9:39:f0:13:fa:06:
         ac:42:8d:92:39:de:a9:04:25:16:7a:cd:d3:94:a0:25:77:70:
         92:70:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:55 2026 by rpki-client