Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
File:                     IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json)
Hash identifier:          28nEWu3tAXT5sMggKsL5Dm1j4bTR8zaF8Vm3NTWn3wA=
Subject key identifier:   7E:9C:C6:56:DE:59:E4:A7:63:7C:BC:B2:F3:3C:51:8E:74:04:64:AE
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Certificate issuer:       /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
Manifest number:          0171
Signing time:             Sat 13 Jun 2026 04:44:45 +0000
Manifest this update:     Sat 13 Jun 2026 04:44:45 +0000
Manifest next update:     Sat 20 Jun 2026 04:44:45 +0000
Files and hashes:         1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: RE2lKc9kTIB5+BvJG2mKVCUG3oZRSLcvo6U9wgFinnY=)
                          2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: Z9psePfPHTD1JWqFIEMEnQFvkSAfBuwnGTYYVZWeEbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl
                          rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
        Validity
            Not Before: Jun 13 04:44:45 2026 GMT
            Not After : Jun 20 04:44:45 2026 GMT
        Subject: CN=6a2ce03d-4fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:4b:f8:f6:10:32:77:cb:dc:a7:91:8b:d1:
                    0e:aa:67:38:e8:af:43:b2:24:3e:ee:64:71:39:50:
                    1d:33:b4:b8:6f:78:b0:3b:5c:fc:68:93:b5:83:49:
                    3b:f9:2c:cb:16:20:ec:94:85:6a:81:2a:43:46:49:
                    85:e4:5a:20:89:f8:c5:18:98:01:07:d8:9c:16:1b:
                    cb:d1:4d:e5:31:d8:90:b4:69:fd:c4:58:3a:d0:2d:
                    ea:65:c1:fa:7d:e0:53:66:15:83:18:e1:6d:72:27:
                    6b:b4:da:3f:6d:51:31:26:a0:b1:8b:d9:62:98:39:
                    a7:c4:54:57:5e:1d:87:b2:68:4e:61:0a:10:ce:b6:
                    1f:8e:b8:19:02:1f:e6:40:47:b0:d3:4a:46:4b:da:
                    96:02:88:1e:b4:ec:da:de:01:ef:e9:4e:4b:fb:fa:
                    7d:d0:2a:0b:1c:35:e8:89:3a:c7:6c:59:be:85:46:
                    0f:9b:b6:b9:3f:88:72:0d:1a:2e:6d:5d:23:b4:eb:
                    90:de:c6:c8:c9:11:de:dd:e6:d3:d5:59:1b:76:9d:
                    f0:80:ea:3f:fc:32:9a:30:6d:7e:74:7b:a9:3d:c6:
                    a9:9a:7f:72:a5:91:4c:ee:c1:03:4f:1f:dd:bd:ad:
                    9e:1e:4b:27:5a:e9:17:b2:d8:42:8c:33:cb:e1:2a:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:C6:56:DE:59:E4:A7:63:7C:BC:B2:F3:3C:51:8E:74:04:64:AE
            X509v3 Authority Key Identifier:
                keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:3d:87:17:95:74:9e:44:ef:68:2d:5c:8f:84:b8:e1:68:
         84:27:08:d0:39:99:02:63:26:e3:f1:92:ed:72:1f:9d:94:60:
         7f:05:c1:6c:51:43:1a:08:1a:cd:5f:f1:67:d7:d5:ac:8a:a8:
         33:4b:bc:b4:0a:c5:21:f2:63:6f:cc:db:ef:98:6d:24:16:79:
         78:0b:e9:f2:d8:f8:14:7d:bd:b5:32:21:86:66:64:87:b8:10:
         dc:dd:bf:b5:20:88:37:f6:56:26:5c:03:1e:88:a4:cc:61:35:
         c6:f0:b2:36:3e:b2:5b:51:56:68:91:ea:11:70:10:c5:7f:b7:
         28:39:ff:a1:78:f5:14:e1:01:56:9c:5d:82:0b:22:e8:fd:b9:
         35:15:a5:6c:2b:42:fd:0f:a6:7e:7a:23:c6:e7:0a:bb:87:91:
         d5:42:43:f5:3d:d2:eb:6d:6f:73:e7:83:5e:b9:ba:9e:df:e2:
         2c:66:1f:58:57:d9:76:44:b8:30:28:53:ec:6f:6a:1e:64:b4:
         97:62:3c:96:a3:d4:22:0f:b7:99:72:b3:12:aa:cc:d6:a0:ea:
         d7:6b:12:f7:d6:ba:5c:2c:71:f5:14:d2:dc:6e:ae:69:3a:c9:
         fe:22:05:98:76:0e:8d:b8:f0:7b:6f:f7:96:cf:24:18:95:ea:
         be:23:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:22 2026 by rpki-client