Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
File:                     iFALo678aJSTbs3IGvHXp7JyaPE.mft (raw, json)
Hash identifier:          X+kO3iejv/QVv7OJspir3KStF/LDDy8/wK1Kze/FrP8=
Subject key identifier:   9B:C3:FA:26:4F:B6:2D:14:26:51:93:75:26:EF:5B:F3:00:E8:65:5D
Authority key identifier: 88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1
Certificate issuer:       /CN=A9198560/serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
Manifest number:          27
Signing time:             Fri 25 Sep 2026 08:56:30 +0000
Manifest this update:     Fri 25 Sep 2026 08:56:30 +0000
Manifest next update:     Fri 02 Oct 2026 08:56:30 +0000
Files and hashes:         1: iFALo678aJSTbs3IGvHXp7JyaPE.crl (hash: VgP8grgXOMX8wSno1Usqm9pWrsEP8t1LSUy1upz+N9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl
                          rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198560, serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
        Validity
            Not Before: Sep 25 08:56:30 2026 GMT
            Not After : Oct  2 08:56:30 2026 GMT
        Subject: CN=6ab6373e-c42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:00:58:bc:21:86:ed:26:15:7c:77:ad:dd:
                    4c:f3:e1:20:85:04:49:20:17:06:64:e1:da:62:1d:
                    2a:95:df:e3:92:e7:24:7b:75:4a:00:22:0f:96:64:
                    26:83:aa:ee:f5:a2:72:f7:fd:70:d3:25:db:dd:fe:
                    38:24:35:19:f6:04:fc:6a:81:c4:d3:c4:64:7e:2d:
                    39:70:a8:21:26:05:41:63:be:ac:c8:9f:e1:8e:46:
                    66:24:76:51:26:7c:a6:b5:da:af:b3:26:f5:a3:67:
                    42:1d:ce:30:10:ec:79:78:d4:35:c5:99:ef:02:e5:
                    d0:70:4e:50:20:df:a1:66:9d:48:47:12:2e:9a:3c:
                    54:f7:98:c5:b0:a6:fa:99:59:f9:ad:49:06:66:31:
                    88:14:40:4d:77:83:d6:aa:78:c0:58:5d:a9:41:b9:
                    4b:c2:7a:75:e5:2d:91:ac:13:ac:9f:11:6d:34:9d:
                    e0:ef:c4:f7:57:e0:bc:00:53:4d:04:c2:67:40:2e:
                    11:84:b5:29:f7:d8:57:47:64:f6:cd:21:9c:f8:45:
                    e4:e2:f1:d7:03:ae:17:96:71:e8:c9:27:16:57:c0:
                    ab:e8:15:d4:36:9c:ab:ce:40:f9:01:13:80:f4:b4:
                    3a:dd:b4:19:db:59:14:de:b0:7e:93:94:19:39:8d:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C3:FA:26:4F:B6:2D:14:26:51:93:75:26:EF:5B:F3:00:E8:65:5D
            X509v3 Authority Key Identifier:
                keyid:88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:99:0b:2a:a5:c4:fd:79:c0:dc:21:a3:6c:58:75:68:06:1b:
         20:5d:db:d4:68:56:8c:f0:b0:76:f8:da:41:80:00:fb:69:5e:
         2e:12:e8:74:4e:14:fb:07:c9:64:47:1f:df:89:2c:b0:06:df:
         1a:3b:a4:0a:98:39:6f:1a:79:e5:81:9d:23:dd:78:1a:2e:fc:
         2d:57:42:8b:31:62:72:7a:e6:90:f8:9b:7c:75:de:51:e9:37:
         58:3f:70:38:6d:50:c7:83:7e:a3:01:e7:db:c0:52:e1:b2:1b:
         bb:3d:5e:75:19:f5:b2:4a:f9:1b:58:91:0a:4b:6a:c9:5b:64:
         f1:1c:2e:82:a7:a3:1a:13:3d:ab:11:68:3e:f6:17:61:90:99:
         45:95:79:eb:e7:0f:ef:1a:12:f7:ff:99:dd:fc:c0:df:16:f4:
         f7:e8:4a:a3:0e:11:3b:e2:43:21:bf:44:92:e7:09:aa:c5:14:
         05:7e:d3:fb:9e:1e:d0:d6:24:3f:99:2c:cd:eb:53:79:42:cc:
         11:d2:f4:d0:ec:10:f2:09:ac:b9:2d:0a:5d:d5:6c:15:40:44:
         e9:01:9a:45:63:f6:86:8b:61:cd:69:76:27:6d:92:aa:54:9f:
         dd:62:39:f0:18:ad:e4:32:5c:ca:d4:53:50:1c:25:3e:7d:55:
         2b:f0:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:40:05 2026 by rpki-client