Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File:                     iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier:          c3+xPmsexJJCvrqF4vSYjq49kLZgbU6LrHELqnFwINI=
Subject key identifier:   6D:40:17:F4:84:51:59:A5:7B:33:DC:E6:CE:1C:AF:18:06:0E:A9:93
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer:       /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number:          0169
Signing time:             Mon 27 Jul 2026 06:50:59 +0000
Manifest this update:     Mon 27 Jul 2026 06:50:58 +0000
Manifest next update:     Mon 03 Aug 2026 06:50:58 +0000
Files and hashes:         1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: NtwMlcf/1DvcTkANgtqbisbNZaixKRjXRzP8iala8TI=)
                          2: 10435EE8740511EF93658977C4F9AE02.roa (hash: 6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
        Validity
            Not Before: Jul 27 06:50:58 2026 GMT
            Not After : Aug  3 06:50:58 2026 GMT
        Subject: CN=6a66ffd2-ab1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:bc:fa:86:8d:c1:3e:24:20:04:87:13:c7:
                    e1:12:d3:3a:53:a5:17:27:dd:59:c3:c7:d2:b3:d7:
                    5d:78:61:75:7a:58:46:3e:5d:42:ab:ba:91:3d:4b:
                    32:da:1f:9b:fb:9f:f3:25:ca:1c:3a:90:ce:b0:aa:
                    f8:4e:da:5a:eb:55:b7:b1:44:e6:4a:85:d6:71:f9:
                    48:93:34:32:4e:18:64:be:0b:fb:5a:c4:60:b4:c2:
                    74:c8:f9:07:8d:51:31:7c:91:b2:ad:ef:0d:35:da:
                    4f:6e:be:99:03:8d:67:d0:ed:69:a5:65:60:5a:49:
                    3a:47:80:21:ba:46:4e:99:fa:ac:ca:f1:45:b8:49:
                    9e:a4:33:4f:c5:4d:f4:b5:fb:80:fc:21:86:b2:91:
                    af:01:d7:d9:0d:64:02:a6:e5:b0:1e:ce:d7:e1:bc:
                    e5:fe:4f:96:b1:68:5e:cb:87:1f:01:6a:99:98:ab:
                    d7:fe:13:20:ef:36:45:f4:15:ab:5b:9e:94:46:dc:
                    64:a8:12:5d:2c:2f:a0:0d:5e:ba:82:1a:b3:fb:74:
                    45:0e:d9:43:33:69:2a:2a:ad:4e:f3:72:7c:6d:65:
                    b0:86:34:c5:3e:30:a3:a9:dd:13:d5:dc:aa:19:59:
                    dc:6b:76:38:9a:15:8c:16:0c:d5:5f:8f:c2:f5:04:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:17:F4:84:51:59:A5:7B:33:DC:E6:CE:1C:AF:18:06:0E:A9:93
            X509v3 Authority Key Identifier:
                keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:ce:b4:c9:5c:b0:78:71:55:33:e1:80:62:19:3b:0e:67:
         32:c3:08:83:9d:09:df:61:88:65:80:8c:f9:e4:a9:22:1a:d3:
         a5:ff:b7:bc:b9:64:a6:5a:0c:b1:a7:48:8a:cb:a7:d7:a2:ed:
         5e:c4:63:5d:a9:87:a6:d8:04:c6:84:30:fe:56:c5:6d:de:5f:
         5c:79:f5:fd:2b:13:28:83:0a:4b:33:5c:05:d0:28:cc:27:20:
         ad:f0:db:3d:dd:09:be:2c:f1:6a:1a:0e:ce:70:9c:31:ea:8f:
         bf:ce:2f:d9:7e:25:a0:10:48:21:9c:9f:51:03:3a:0a:a3:f7:
         04:b0:8d:46:2d:e0:e4:47:99:9d:2e:37:be:02:7e:a6:52:17:
         3d:8b:29:37:db:47:b1:f6:9a:6c:7f:84:82:ed:14:e3:3f:ec:
         da:b1:13:ac:f8:31:fc:e5:05:67:82:44:5a:a3:c2:7a:d7:d1:
         79:0e:1d:a3:3c:91:0b:cb:ab:bb:c4:6f:a1:ba:44:c7:8e:d4:
         4a:f5:a3:56:c5:9b:65:4f:51:ce:0f:fc:c9:36:68:dc:9c:81:
         8a:bb:33:e7:85:88:bc:ac:74:d1:97:e7:b8:2d:19:66:3a:bf:
         a9:a9:f5:fc:00:79:87:35:e0:b4:23:d6:41:25:1b:9e:d3:ae:
         65:26:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:22 2026 by rpki-client