Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
File:                     IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json)
Hash identifier:          2F/THIv67a9QQbKG7gmM+qSEezBKMzz/hZS5rKN/cSI=
Subject key identifier:   19:98:49:D6:41:20:B8:7A:B1:18:9F:CF:14:A5:60:D6:D0:8B:CC:3E
Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B
Certificate issuer:       /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
Certificate serial:       0884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
Manifest number:          0869
Signing time:             Tue 28 Jul 2026 21:15:08 +0000
Manifest this update:     Tue 28 Jul 2026 21:15:08 +0000
Manifest next update:     Tue 04 Aug 2026 21:15:08 +0000
Files and hashes:         1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: 7w+P1B9y2s7VfYNwsLV5iTg+mtlSozvPxs+vJwIIkLM=)
                          2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=)
                          3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl
                          rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B
        Validity
            Not Before: Jul 28 21:15:08 2026 GMT
            Not After : Aug  4 21:15:08 2026 GMT
        Subject: CN=6a691bdc-db15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:af:7b:d1:b4:4a:60:a5:8a:56:9b:b4:83:
                    97:02:55:aa:ff:e4:3f:bc:53:98:4c:24:3c:02:52:
                    11:05:3a:36:0d:de:d3:48:0a:04:84:e6:fb:06:91:
                    14:f3:f2:4a:7d:b2:94:46:07:e0:c1:d5:26:38:01:
                    da:f8:99:49:54:46:e3:e2:83:75:02:a8:e7:67:dc:
                    d5:60:e9:66:f6:bb:1f:9b:eb:c6:24:af:2f:a0:02:
                    c4:e0:df:3e:87:88:98:74:9d:41:7c:50:b8:34:25:
                    c7:4a:ef:8c:bd:81:bd:c5:a4:55:14:a7:b7:2c:ca:
                    af:49:66:9d:b4:9c:b2:bd:bd:99:84:bc:79:c3:f7:
                    fa:13:a4:ce:dd:e5:b2:4f:84:4b:8f:7c:cb:7e:fd:
                    10:e1:f3:7a:b4:4c:d2:1d:82:df:32:52:ec:25:80:
                    69:70:62:3f:d2:f1:3b:b0:cc:66:e1:84:f8:f2:9b:
                    00:86:22:10:69:4c:0f:62:4a:bb:cf:17:57:3e:49:
                    99:38:27:f6:e9:30:2a:6e:97:83:2f:ed:26:ff:31:
                    9e:91:2f:55:e4:45:dc:74:c6:07:87:fc:df:18:da:
                    16:26:e4:14:04:82:ae:c8:39:e8:00:36:3e:5b:5d:
                    5d:1e:8e:f6:3e:28:90:23:7e:c3:62:8e:42:86:92:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:49:D6:41:20:B8:7A:B1:18:9F:CF:14:A5:60:D6:D0:8B:CC:3E
            X509v3 Authority Key Identifier:
                keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:eb:25:f4:a6:1b:b9:33:53:c5:10:0b:5b:3b:04:9a:44:
         cb:55:26:21:da:f2:8f:93:38:53:f5:cd:95:1f:e9:d0:31:88:
         da:cd:ee:cc:22:04:6c:a3:58:5d:66:81:75:73:d8:fb:f0:38:
         6c:dd:a7:57:7f:ca:6d:42:e6:d5:e7:24:2f:7e:d9:28:65:3a:
         a7:7b:60:bf:d5:11:bf:a4:f8:38:3b:be:64:80:53:f9:13:01:
         24:cf:34:15:98:aa:56:c6:14:95:d3:08:37:32:4a:36:e3:04:
         44:13:c0:29:eb:d0:69:27:a7:d2:4a:c8:f0:ab:fc:1a:6d:af:
         fc:a3:8f:27:18:0b:a4:2e:33:26:c2:cd:6e:8b:e8:22:45:fd:
         4f:59:94:89:ed:d1:9a:7d:3f:30:57:ab:95:41:e1:3c:e7:5b:
         43:8a:e4:70:00:aa:ae:78:13:95:e7:dc:85:33:dd:de:fd:39:
         76:c4:45:e3:eb:39:e8:58:66:28:0e:89:66:b1:64:88:03:7d:
         e1:95:03:b6:ef:bb:57:13:32:f0:b9:4d:85:0b:97:6c:fb:69:
         21:99:83:ed:37:37:42:9d:b8:75:6b:e1:cd:c5:e7:50:0b:bd:
         28:f8:f0:ad:c3:f8:c3:39:7e:a6:0c:0c:eb:ba:26:6d:0a:93:
         79:c1:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:12 2026 by rpki-client