Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
File:                     iFALo678aJSTbs3IGvHXp7JyaPE.mft (raw, json)
Hash identifier:          psPV9OneMSwpw7EK7ZyZbl9mz5I1ljw3SDItojPxJtw=
Subject key identifier:   08:05:CE:49:9B:F2:29:99:D6:A8:14:A6:16:5E:69:07:BB:3F:17:B5
Authority key identifier: 88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1
Certificate issuer:       /CN=A9198560/serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
Manifest number:          06
Signing time:             Thu 23 Jul 2026 11:18:45 +0000
Manifest this update:     Thu 23 Jul 2026 11:18:44 +0000
Manifest next update:     Thu 30 Jul 2026 11:18:44 +0000
Files and hashes:         1: iFALo678aJSTbs3IGvHXp7JyaPE.crl (hash: kUciyDUvHZY7kGSU2A9jtKd2QQ/6Y6sFbdFZDRA9JUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl
                          rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198560, serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
        Validity
            Not Before: Jul 23 11:18:44 2026 GMT
            Not After : Jul 30 11:18:44 2026 GMT
        Subject: CN=6a61f895-0635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:cc:9c:3e:04:b0:17:ed:54:34:8e:f2:4e:
                    e9:01:22:dd:9b:18:7d:53:03:3b:44:8e:98:2e:d6:
                    bd:34:e1:e8:41:a4:04:60:39:6c:a5:86:aa:2d:09:
                    03:b1:21:32:55:94:d6:d7:81:45:bb:62:e1:05:61:
                    dd:05:c9:37:69:f5:c2:12:3a:90:5e:24:87:34:80:
                    e9:fd:3c:86:7b:7c:73:71:85:56:a2:cb:8b:71:08:
                    a2:b5:a7:55:1d:d2:0e:32:9e:6c:e4:63:26:18:06:
                    c1:35:7c:c0:ac:cc:09:99:a3:1a:ef:b0:fe:08:12:
                    bd:db:42:99:54:5e:31:88:ee:67:01:2a:f5:52:70:
                    cc:39:bf:5b:42:1a:a8:cf:23:5a:1f:1f:10:9b:ea:
                    98:f9:21:a8:1c:27:36:38:0f:bc:48:f9:86:e4:70:
                    3d:b0:48:f2:f7:7b:f7:31:49:14:f9:4d:16:2f:97:
                    be:a5:63:84:f3:18:6f:8c:ba:22:44:f5:07:90:f2:
                    bc:b2:fe:59:de:be:a3:20:d4:1c:19:17:74:7f:99:
                    37:b0:f9:ab:11:19:bd:8f:97:74:91:e2:cd:b2:99:
                    30:e5:7f:9b:da:14:4d:4d:78:b6:e4:94:1f:6e:76:
                    36:0c:df:39:c2:a5:c2:d3:f2:b6:34:88:aa:99:8f:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:05:CE:49:9B:F2:29:99:D6:A8:14:A6:16:5E:69:07:BB:3F:17:B5
            X509v3 Authority Key Identifier:
                keyid:88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:36:65:8a:83:d2:ac:81:4e:47:e3:e7:fe:c0:e4:47:36:
         57:ec:5e:eb:fd:65:34:c2:28:67:cf:25:51:f0:96:e2:bd:7a:
         9b:18:4a:f1:9c:4a:4d:f3:d9:2a:82:4e:8f:4e:8b:fb:86:a0:
         bb:73:7f:bc:59:21:2d:52:1c:64:1e:20:a5:ef:19:6f:fa:a4:
         4e:34:16:03:f9:3f:ce:3d:80:b8:42:a3:8b:11:0b:f0:04:44:
         49:1c:5c:fa:87:61:d7:d2:53:86:7a:72:82:08:6a:bd:f9:e9:
         53:d7:30:be:97:8d:bb:2f:08:93:ad:e1:b5:50:a3:a9:0e:c7:
         85:30:73:29:48:2e:9c:c9:26:b5:ca:a4:6d:41:f8:d8:f1:34:
         48:f5:4b:ee:c6:c9:84:43:22:e6:20:cb:1a:68:a7:ef:84:15:
         b3:72:a4:c8:ab:76:34:d8:5b:e8:e4:64:09:b5:cf:dc:ed:c3:
         b1:57:fe:7f:87:07:1a:eb:7c:b5:f9:ac:76:80:29:28:a7:a2:
         fe:21:96:36:ff:4a:df:8f:7c:5b:b9:e3:b0:2d:96:89:65:29:
         51:26:5e:54:a1:d7:bf:21:c1:16:ae:c9:b2:a5:20:01:f9:d4:
         cd:22:b1:93:96:1e:79:0a:f9:f9:b0:cb:1f:47:88:e4:b8:12:
         d9:24:39:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
ODU2MDExMC8GA1UEBRMoODg1MDBCQTNBRUZDNjg5NDkzNkVDREM4MUFGMUQ3QTdC
MjcyNjhGMTAeFw0yNjA3MjMxMTE4NDRaFw0yNjA3MzAxMTE4NDRaMBgxFjAUBgNV
BAMTDTZhNjFmODk1LTA2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8Q8ycPgSwF+1UNI7yTukBIt2bGH1TAztEjpgu1r004ehBpARgOWylhqotCQOx
ITJVlNbXgUW7YuEFYd0FyTdp9cISOpBeJIc0gOn9PIZ7fHNxhVaiy4txCKK1p1Ud
0g4ynmzkYyYYBsE1fMCszAmZoxrvsP4IEr3bQplUXjGI7mcBKvVScMw5v1tCGqjP
I1ofHxCb6pj5IagcJzY4D7xI+YbkcD2wSPL3e/cxSRT5TRYvl76lY4TzGG+MuiJE
9QeQ8ryy/lnevqMg1BwZF3R/mTew+asRGb2Pl3SR4s2ymTDlf5vaFE1NeLbklB9u
djYM3znCpcLT8rY0iKqZj7htAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCAXOSZvy
KZnWqBSmFl5pB7s/F7UwHwYDVR0jBBgwFoAUiFALo678aJSTbs3IGvHXp7JyaPEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTYwLzM4RTAyNTE4ODBF
NTExRjFCQkYzMzNFMzYwQTMwRkJDL2lGQUxvNjc4YUpTVGJzM0lHdkhYcDdKeWFQ
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaUZBTG82NzhhSlNUYnMzSUd2SFhwN0p5YVBFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
NTYwLzM4RTAyNTE4ODBFNTExRjFCQkYzMzNFMzYwQTMwRkJDL2lGQUxvNjc4YUpT
VGJzM0lHdkhYcDdKeWFQRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbzzZlioPSrIFOR+Pn/sDkRzZX7F7r/WU0wihnzyVR8JbivXqbGErxnEpN89kq
gk6PTov7hqC7c3+8WSEtUhxkHiCl7xlv+qRONBYD+T/OPYC4QqOLEQvwBERJHFz6
h2HX0lOGenKCCGq9+elT1zC+l427LwiTreG1UKOpDseFMHMpSC6cySa1yqRtQfjY
8TRI9UvuxsmEQyLmIMsaaKfvhBWzcqTIq3Y02Fvo5GQJtc/c7cOxV/5/hwca63y1
+ax2gCkop6L+IZY2/0rfj3xbueOwLZaJZSlRJl5Uode/IcEWrsmypSAB+dTNIrGT
lh55Cvn5sMsfR4jkuBLZJDls
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:55 2026 by rpki-client