Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
File:                     iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json)
Hash identifier:          oUokDKP4uQeDVY6zAdcWF7kcUUkJ9AqCkn4ziwnx56U=
Subject key identifier:   BF:F9:0C:CB:6E:73:2B:74:22:1C:1D:9B:34:A9:95:EE:C4:89:03:1A
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Certificate issuer:       /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
Manifest number:          0173
Signing time:             Thu 23 Jul 2026 06:19:16 +0000
Manifest this update:     Thu 23 Jul 2026 06:19:15 +0000
Manifest next update:     Thu 30 Jul 2026 06:19:15 +0000
Files and hashes:         1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: kMquFXulRR0qH6n+FJr8ecWguUZkZFz95R+u+YM3hw0=)
                          2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: oQRja5kNE1xgzFCqir1541pX0ir8ZOqbUXiW5IO5uBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
        Validity
            Not Before: Jul 23 06:19:15 2026 GMT
            Not After : Jul 30 06:19:15 2026 GMT
        Subject: CN=6a61b263-fdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:79:71:3e:27:47:b7:09:8f:09:56:c5:0e:
                    e4:4a:54:d9:b1:28:a2:9f:31:e5:b3:1d:ae:b6:4a:
                    da:ee:3a:d5:68:13:03:55:b5:ad:79:1a:12:f5:48:
                    47:ae:39:a4:69:4b:34:86:42:95:ae:3d:4f:49:97:
                    9f:62:a6:2e:c2:f7:5a:b0:b9:ff:55:ee:5a:4f:37:
                    c0:b0:da:b5:38:34:6d:5a:33:08:62:c3:ca:92:f3:
                    07:31:e1:9c:2a:7e:66:fe:03:35:16:21:16:9c:34:
                    53:23:62:dd:5c:c5:e3:03:f9:ba:33:84:e8:c6:82:
                    9a:c3:35:0b:7c:61:db:e0:85:22:47:58:c3:c2:ac:
                    3c:76:2f:9b:42:1a:d9:69:b5:34:0c:b0:12:67:cc:
                    72:76:76:f0:b6:67:30:d0:95:11:ba:fc:3c:7f:eb:
                    b8:99:bf:c9:1c:82:93:4c:d2:f2:92:91:74:04:10:
                    11:d2:f4:8b:ef:66:35:01:7b:d9:b9:22:36:73:d4:
                    b1:65:09:27:f9:8d:b4:f3:74:cf:1c:c1:c7:86:95:
                    b2:20:60:d4:24:35:01:17:ae:06:e1:f8:50:b6:c4:
                    3e:96:75:ca:82:e1:51:a8:96:5e:ca:da:55:c6:3f:
                    ca:5a:81:77:49:80:e3:78:32:cf:3a:a7:03:83:81:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F9:0C:CB:6E:73:2B:74:22:1C:1D:9B:34:A9:95:EE:C4:89:03:1A
            X509v3 Authority Key Identifier:
                keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:81:ed:c3:2e:5e:dc:b9:68:05:04:2c:b7:f2:17:26:2a:7f:
         98:fd:ee:83:95:51:c0:bf:2b:63:5e:f5:3e:82:b1:4e:39:2b:
         02:77:68:7c:12:3f:58:04:a8:b6:5a:dc:23:48:9e:37:ad:d4:
         2d:a8:05:44:d8:30:84:7d:1b:c8:b8:83:6a:75:4c:be:54:d8:
         49:b8:0f:1a:4a:7d:d4:af:21:25:b4:74:d4:3c:89:66:f0:82:
         e7:92:c4:bb:a7:bd:22:a6:ce:fb:97:3f:4a:a7:c2:f3:0c:f7:
         c3:93:53:7a:1b:a4:ce:43:f4:96:b2:6c:7b:22:b4:3b:b0:0e:
         00:89:da:e2:69:4b:a1:c6:e1:b6:7f:9e:e1:76:12:d2:d9:ea:
         c0:6c:08:f6:09:0b:e4:cf:8d:b0:f5:73:30:2c:a6:76:c8:e1:
         a3:01:8b:a0:e9:63:52:00:b5:ac:45:d0:08:33:f1:39:08:9b:
         ee:e0:17:e1:4c:ab:38:b4:99:2a:27:8e:4a:5c:b2:6c:48:58:
         cf:de:93:fb:09:d9:f8:6c:60:a0:e1:0f:14:cf:e0:c5:53:66:
         20:69:bd:f8:e1:39:60:d5:d3:0a:45:63:d1:96:af:41:d1:fe:
         35:3e:02:19:87:b4:ab:b5:60:1c:dc:bf:ae:98:ef:bd:aa:07:
         67:ce:8a:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjk3OTAxMTAvBgNVBAUTKDg5NDI4OUFENDBFRTdFNjI2RjVDRDgyRkNFQzU0MDZE
QjkxRTFFNzEwHhcNMjYwNzIzMDYxOTE1WhcNMjYwNzMwMDYxOTE1WjAYMRYwFAYD
VQQDEw02YTYxYjI2My1mZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoB5cT4nR7cJjwlWxQ7kSlTZsSiinzHlsx2utkra7jrVaBMDVbWteRoS9UhH
rjmkaUs0hkKVrj1PSZefYqYuwvdasLn/Ve5aTzfAsNq1ODRtWjMIYsPKkvMHMeGc
Kn5m/gM1FiEWnDRTI2LdXMXjA/m6M4ToxoKawzULfGHb4IUiR1jDwqw8di+bQhrZ
abU0DLASZ8xydnbwtmcw0JURuvw8f+u4mb/JHIKTTNLykpF0BBAR0vSL72Y1AXvZ
uSI2c9SxZQkn+Y2083TPHMHHhpWyIGDUJDUBF64G4fhQtsQ+lnXKguFRqJZeytpV
xj/KWoF3SYDjeDLPOqcDg4Fa2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/5DMtu
cyt0IhwdmzSple7EiQMaMB8GA1UdIwQYMBaAFIlCia1A7n5ib1zYL87FQG25Hh5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc5MC83MTgwNUJBQzVB
RTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZtSnZYTmd2enNWQWJia2VI
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVS0pyVUR1Zm1KdlhOZ3Z6c1ZBYmJrZUhuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTc5MC83MTgwNUJBQzVBRTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZt
SnZYTmd2enNWQWJia2VIbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUoHtwy5e3LloBQQst/IXJip/mP3ug5VRwL8rY171PoKxTjkrAndofBI/WASo
tlrcI0ieN63ULagFRNgwhH0byLiDanVMvlTYSbgPGkp91K8hJbR01DyJZvCC55LE
u6e9IqbO+5c/SqfC8wz3w5NTehukzkP0lrJseyK0O7AOAIna4mlLocbhtn+e4XYS
0tnqwGwI9gkL5M+NsPVzMCymdsjhowGLoOljUgC1rEXQCDPxOQib7uAX4UyrOLSZ
KieOSlyybEhYz96T+wnZ+GxgoOEPFM/gxVNmIGm9+OE5YNXTCkVj0ZavQdH+NT4C
GYe0q7VgHNy/rpjvvaoHZ86KPQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:17 2026 by rpki-client