Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
File:                     IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json)
Hash identifier:          rzxFbahRW/knFONAZTLjORZhcvt+Ez+Mlm6u9Ax4ORg=
Subject key identifier:   F9:E6:50:44:16:0E:0B:36:7B:3D:A7:E5:8F:65:C1:48:3E:03:E2:0A
Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
Certificate issuer:       /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
Manifest number:          54
Signing time:             Mon 27 Jul 2026 10:34:01 +0000
Manifest this update:     Mon 27 Jul 2026 10:34:00 +0000
Manifest next update:     Mon 03 Aug 2026 10:34:00 +0000
Files and hashes:         1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: cHIj9ViqxLr1cXBfyKu8VfJZaf7uAfUR+6v3xOkiye8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl
                          rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
        Validity
            Not Before: Jul 27 10:34:00 2026 GMT
            Not After : Aug  3 10:34:00 2026 GMT
        Subject: CN=6a673419-544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:70:c0:07:ec:b6:ac:bc:91:c2:3c:85:26:
                    d8:c7:8e:ed:3b:67:ec:a9:e1:16:4b:1a:2c:f1:a9:
                    17:59:f7:da:05:96:ee:95:02:c0:29:eb:d4:10:5d:
                    7c:1e:8e:f8:3f:13:ec:47:d6:36:17:f8:db:7f:be:
                    8a:2a:f0:19:65:db:8a:2c:f2:e6:4d:c5:89:5f:09:
                    c3:15:d5:17:f2:c8:84:64:d2:ba:0e:56:99:e7:1b:
                    a2:0d:e1:e4:44:de:7d:d6:5f:bf:7f:58:a8:79:28:
                    dd:e3:b0:48:a9:16:77:85:42:57:c4:ff:1d:9a:53:
                    6a:cf:0d:37:4d:8d:d9:06:5b:61:71:02:c3:05:aa:
                    d5:c0:66:03:e3:c5:7f:e3:a1:8d:10:4a:91:9e:38:
                    12:06:42:68:b6:2d:cd:91:07:4b:0d:51:10:9d:20:
                    8a:fc:b9:ac:ff:95:52:09:4b:64:54:3d:7a:51:3a:
                    41:85:0b:b4:b8:89:13:9e:5a:d2:3d:b1:1a:18:98:
                    ff:35:8c:88:d4:42:29:20:63:af:59:a6:e4:00:dc:
                    79:83:be:80:7e:20:0d:97:da:ec:b9:50:c3:26:d2:
                    07:78:27:39:e9:83:ff:3a:8e:9e:d3:2a:02:d2:0e:
                    84:dc:16:33:96:41:1d:d8:14:d2:ad:21:55:ec:19:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:50:44:16:0E:0B:36:7B:3D:A7:E5:8F:65:C1:48:3E:03:E2:0A
            X509v3 Authority Key Identifier:
                keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:08:4e:50:76:ca:18:4b:00:b5:cd:bb:d9:45:c5:25:27:
         53:2c:38:68:01:7e:0e:a6:58:5d:8b:9e:90:fa:19:49:7f:3b:
         30:b5:13:f2:79:73:3f:93:f9:a6:3c:44:2d:8d:0d:c9:19:79:
         a1:6e:f1:bf:d9:b2:da:c9:51:de:22:30:35:a6:ae:a5:ae:93:
         8a:3a:a2:fc:15:a1:22:95:af:ca:c9:84:73:b8:ca:bb:f2:c8:
         20:32:92:04:51:ce:aa:9f:96:98:fb:24:b7:54:32:34:ca:bc:
         fb:bf:f2:ab:38:66:6c:01:f5:5b:23:97:58:ba:fd:01:a9:82:
         0f:e6:9d:6f:95:89:68:f9:f5:c3:1a:f0:ca:6d:85:b9:1a:d2:
         e9:c0:32:5e:c6:23:f8:df:27:35:cc:c8:95:9b:75:f0:90:4f:
         20:77:67:4d:60:06:fa:81:6c:f4:17:9f:e3:9b:79:fa:8c:f3:
         7c:89:06:19:d3:f2:77:a8:c6:01:53:2d:33:6e:cf:4c:58:06:
         a7:44:85:eb:39:59:c6:3a:cf:12:f9:0d:49:4f:19:72:c9:ee:
         84:4a:2c:58:bc:9f:8e:52:65:85:4d:d9:6e:e2:81:51:f6:9e:
         7d:b6:b5:1e:05:49:92:da:66:0b:70:5a:d4:40:ee:f6:d1:b6:
         51:54:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:19 2026 by rpki-client