Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
File:                     IqsnKH1FJndu9FfIiq4NTcomll8.mft (raw, json)
Hash identifier:          MbH2FtPCod6QO5Xl9pDa3zotnabI2/hk5cy0Jqc7NOc=
Subject key identifier:   90:30:B0:7D:94:B3:8B:F5:31:80:17:8D:C9:9F:DF:E0:6A:E0:44:47
Authority key identifier: 22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
Certificate issuer:       /CN=A919BF94/serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
Manifest number:          18
Signing time:             Thu 23 Jul 2026 11:04:06 +0000
Manifest this update:     Thu 23 Jul 2026 11:04:05 +0000
Manifest next update:     Thu 30 Jul 2026 11:04:05 +0000
Files and hashes:         1: IqsnKH1FJndu9FfIiq4NTcomll8.crl (hash: Nk82tEMnRtJMv/iNeWym8DWvlXAuZBY6erdVA1njrtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
                          rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BF94, serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
        Validity
            Not Before: Jul 23 11:04:05 2026 GMT
            Not After : Jul 30 11:04:05 2026 GMT
        Subject: CN=6a61f526-5604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:01:8c:33:71:d3:81:3a:a7:60:e3:bc:dd:71:
                    f7:34:fa:84:71:1c:30:81:3b:3d:78:3c:36:4d:e9:
                    1a:68:19:ba:55:46:01:66:4a:10:0e:f6:f0:2e:08:
                    84:06:19:10:36:e4:48:8d:18:6e:ce:12:8b:57:c8:
                    cd:ed:3b:95:8e:cd:3a:4d:c0:3e:83:fa:cf:e0:bf:
                    00:03:ee:81:95:88:55:80:58:42:49:07:72:6c:27:
                    79:72:fb:df:fd:d7:b1:72:3f:98:72:a9:b2:83:43:
                    4e:d7:0a:a5:48:a3:ed:e1:df:d2:1a:7c:fc:af:78:
                    7f:36:06:7d:2c:c1:56:5f:d9:0c:db:70:8c:58:fa:
                    8c:89:08:07:58:c1:b8:e1:e3:7d:eb:2a:50:89:f6:
                    d3:8e:41:5b:fd:f9:28:70:35:c2:98:f3:a0:4f:03:
                    c8:c6:dd:ea:35:66:cd:be:03:06:ab:38:b9:9c:da:
                    9c:25:22:33:68:8d:4c:42:98:bd:f2:c5:c1:2d:a7:
                    a5:7e:be:95:c2:54:d5:81:89:41:c2:91:78:c2:c6:
                    df:85:52:98:2c:1a:64:92:66:81:78:49:d0:99:fd:
                    90:ae:15:62:9b:ab:7e:07:88:1e:48:bb:3d:3c:d3:
                    90:de:2a:6e:f8:fe:ba:48:98:69:6c:59:38:e2:89:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:30:B0:7D:94:B3:8B:F5:31:80:17:8D:C9:9F:DF:E0:6A:E0:44:47
            X509v3 Authority Key Identifier:
                keyid:22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:fd:90:89:44:5f:ef:83:ee:5f:3b:8b:89:ee:43:fc:96:
         a9:61:27:6f:21:73:3f:33:d1:08:4d:75:ae:75:2a:09:7b:79:
         86:c5:f8:5b:c4:5b:c1:a7:86:3b:98:77:b6:05:23:d9:08:41:
         72:1c:1f:af:d2:c6:da:34:58:8f:35:50:f6:31:3e:49:a9:a4:
         83:ed:df:0f:28:68:bb:38:8d:f7:9f:f0:1d:5a:76:47:8d:10:
         f5:88:5d:4b:fb:bf:f7:62:e2:7c:2e:2d:89:68:33:7c:e5:dd:
         1e:71:65:88:07:dc:82:cc:af:e4:72:d1:d4:37:42:ac:7f:02:
         aa:0b:6f:ec:30:e1:a2:7b:a5:f8:bf:bc:ac:bd:64:f7:ed:e0:
         94:a4:6b:c7:43:4e:3b:79:12:6f:61:b8:e2:1d:df:86:2f:4d:
         22:04:7a:2c:7f:8e:0e:15:c1:6e:b0:4c:43:67:5b:98:cd:71:
         1a:37:e6:0a:1b:65:00:4b:1c:60:04:39:ba:68:bb:7d:4f:37:
         10:24:66:ed:00:a3:b1:2b:2f:cb:ca:74:7c:05:e7:8b:46:21:
         08:f5:de:ba:2b:b7:07:fe:0b:3f:a7:49:8c:8a:9a:10:1d:e4:
         35:6d:fe:2c:15:ab:33:db:ce:00:a4:f4:fc:34:02:80:71:e3:
         3c:b4:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:12 2026 by rpki-client