Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File:                     ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier:          GGit5LEYRkOmxDcAXoJzhCMfqQNQ0ZT0RuKWPSgy9z4=
Subject key identifier:   98:CD:69:07:62:7A:75:B1:DF:9C:8D:FF:B3:10:1B:9F:CF:90:E6:6D
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer:       /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number:          EE
Signing time:             Sun 01 Mar 2026 07:28:40 +0000
Manifest this update:     Sun 01 Mar 2026 07:28:40 +0000
Manifest next update:     Sun 08 Mar 2026 07:28:40 +0000
Files and hashes:         1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: 0zDa2HIYaGoOPVLsF3nnDM41ZupBJZchf1BfN1V/VKc=)
                          2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: H5cfxoLL862cb5gfNbu7rXxwWCXmbFUjKDm2O6hUwkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
                          rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
        Validity
            Not Before: Mar  1 07:28:40 2026 GMT
            Not After : Mar  8 07:28:40 2026 GMT
        Subject: CN=69a3eaa8-436e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:a0:a4:e6:e7:45:c0:5a:28:19:b7:83:87:
                    e0:09:b7:6c:46:e6:02:31:d0:94:1b:c0:26:1e:86:
                    42:f4:46:1e:ef:17:79:dc:02:ed:4e:49:95:03:42:
                    8c:9c:2c:af:32:f2:b8:23:4c:79:99:28:ab:59:b5:
                    19:27:80:09:6d:ed:ed:72:ba:3b:20:1a:22:fe:65:
                    d8:56:ce:ad:c3:e3:d2:8a:5f:24:23:c4:17:48:02:
                    54:b2:9e:4d:55:54:8d:17:e1:63:7a:ad:8f:da:4b:
                    52:a0:8a:4b:e9:15:66:79:ec:ad:96:ea:07:31:4b:
                    c0:bb:52:e6:1f:43:1a:b7:a3:d2:0d:f1:b2:68:ca:
                    ef:9e:3f:7b:b0:e2:0f:7c:a6:60:0c:de:e2:ed:c6:
                    02:88:22:3a:ba:6d:b1:6d:d8:48:6d:9c:8f:bb:3e:
                    9f:47:73:d4:49:d5:36:c5:9c:ef:3a:94:21:41:ad:
                    5f:47:07:ed:cc:d1:e6:38:25:3a:e8:eb:93:7d:df:
                    ac:ea:4c:3a:0d:cc:9f:00:8e:7f:06:6a:a3:84:85:
                    59:2d:07:5d:a3:cb:10:3a:ba:1a:b8:72:a2:84:5f:
                    77:24:b0:eb:26:a0:d6:4f:9b:6f:c2:00:15:f2:8e:
                    21:8d:22:e3:6d:f1:78:da:fe:c6:af:5c:8f:0f:b5:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:69:07:62:7A:75:B1:DF:9C:8D:FF:B3:10:1B:9F:CF:90:E6:6D
            X509v3 Authority Key Identifier:
                keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:95:d4:5b:7f:c2:6d:62:53:a4:28:32:7d:16:b7:c9:d5:
         94:d0:a6:59:f9:9b:54:e1:94:44:94:ab:a6:e4:d7:53:e8:6f:
         5f:0c:82:2b:1d:82:73:64:71:46:eb:30:d4:37:0b:2c:71:e3:
         92:46:48:17:c9:42:01:5e:14:81:ef:46:f3:1c:7b:89:b5:0b:
         be:9e:52:fb:46:a6:25:78:b6:11:0d:30:53:f7:ec:c2:b1:1b:
         35:b0:dc:40:39:29:1b:46:79:32:6f:32:24:83:8c:c4:86:eb:
         31:ff:22:85:b4:af:c4:55:c3:e5:ec:ca:8a:6f:00:0a:92:a7:
         68:fc:1d:18:7d:5b:c0:3d:f7:08:35:aa:da:21:dd:80:4d:0b:
         a4:7a:0a:87:dd:04:1c:0a:86:f5:4f:0a:06:43:85:54:e8:cb:
         c3:18:3b:bf:82:5e:b9:60:11:66:27:dd:44:8a:66:3b:5d:c3:
         91:f9:d2:6b:ef:fb:56:98:d5:e8:dc:52:57:11:65:64:87:47:
         e7:bf:61:41:5d:9c:b5:70:d9:3f:93:42:cb:bc:c5:56:5b:f0:
         0a:5b:3a:50:23:27:66:68:bf:8b:40:dc:65:19:7e:25:50:1c:
         f0:af:09:f8:dd:8d:65:3a:ef:1c:d9:c3:c0:1c:3f:c8:21:95:
         a7:f0:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:28 2026 by rpki-client