Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
File:                     iFALo678aJSTbs3IGvHXp7JyaPE.mft (raw, json)
Hash identifier:          kDd0jQ7VmmgoZmpAw2+c6iBTlSjY1BGJrX1lNPiR5rk=
Subject key identifier:   7B:BD:06:6F:8E:D6:FC:06:55:A8:69:4E:31:96:51:22:78:CC:51:5D
Authority key identifier: 88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1
Certificate issuer:       /CN=A9198560/serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
Manifest number:          25
Signing time:             Mon 21 Sep 2026 08:47:42 +0000
Manifest this update:     Mon 21 Sep 2026 08:47:42 +0000
Manifest next update:     Mon 28 Sep 2026 08:47:42 +0000
Files and hashes:         1: iFALo678aJSTbs3IGvHXp7JyaPE.crl (hash: lfBnMDYLt+rQnp55NvMFlWhQIRC4CFEREI1mGV3tsok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl
                          rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198560, serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1
        Validity
            Not Before: Sep 21 08:47:42 2026 GMT
            Not After : Sep 28 08:47:42 2026 GMT
        Subject: CN=6ab0ef2e-3062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:82:74:9a:26:bd:6a:91:34:ca:a8:2f:5d:
                    c8:45:4a:e1:f5:ca:38:a5:e4:6c:19:21:b2:6f:7c:
                    d2:25:94:f3:bb:27:a2:b1:d6:d2:72:43:a7:cc:74:
                    2a:42:60:76:97:e2:1e:5f:4a:47:87:8e:75:9c:3d:
                    b5:66:28:b5:19:fe:53:ae:a9:df:10:1d:e7:e3:46:
                    4c:ed:fc:3d:d1:34:10:16:9a:1d:40:71:cd:d3:76:
                    b1:e9:0e:08:71:ee:73:06:38:20:8a:2c:b8:d8:99:
                    1f:9f:22:d9:0e:44:91:45:83:1f:cc:b6:e3:19:d4:
                    aa:6d:8b:01:d2:fa:6b:5d:bf:6d:53:98:18:8c:fc:
                    21:3e:fe:d6:9f:a2:25:96:12:84:dd:bd:fa:8b:54:
                    56:64:6b:d1:61:18:59:7c:a5:6f:d8:85:ed:1a:d4:
                    d6:d3:07:db:6a:29:9f:94:f2:01:40:12:85:28:7d:
                    67:05:82:a7:eb:bd:3f:37:73:ad:d9:90:d0:96:fd:
                    97:d2:53:4d:25:a5:4d:b2:bd:e5:11:30:59:74:26:
                    f1:19:cc:96:37:dc:ca:47:e7:33:46:41:11:cd:4b:
                    8a:17:f4:36:53:e9:30:2b:78:3d:50:48:62:67:0e:
                    a5:cc:a7:0c:ce:b7:a4:b3:41:62:db:0a:1a:22:bf:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:06:6F:8E:D6:FC:06:55:A8:69:4E:31:96:51:22:78:CC:51:5D
            X509v3 Authority Key Identifier:
                keyid:88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:b8:ef:57:9c:ff:12:ac:3a:2c:a8:51:72:ae:a9:b9:4c:
         61:8e:1a:b0:61:dc:14:70:78:9b:a3:da:e9:70:95:16:e4:53:
         cb:97:fc:72:f8:90:ae:94:16:06:3a:d3:02:7d:a2:a1:8d:b7:
         20:55:f7:69:29:68:0c:6b:82:fe:92:73:24:21:93:e4:66:1d:
         f3:1e:9a:35:f5:f8:3e:b7:91:d6:f0:f7:b1:a8:7b:bc:8a:ce:
         a6:be:91:d5:e7:35:19:aa:d7:54:76:b7:39:17:67:56:05:b8:
         2e:80:16:18:59:3c:b4:71:e0:67:dd:17:b3:38:ea:12:51:70:
         94:78:5f:02:e9:97:ef:7d:15:db:f7:ef:2b:48:a7:5d:7e:c0:
         16:85:e7:0a:74:5e:20:50:d2:1f:e4:44:93:2e:b5:16:e3:12:
         f2:c8:8d:32:a2:06:62:7a:33:1a:bb:66:a8:c0:75:d5:47:56:
         98:e5:96:92:18:5b:23:28:34:01:08:6c:2a:66:7a:8b:2a:2a:
         c8:8a:59:b3:5a:4a:34:94:ba:7d:90:2e:af:5c:cc:dd:b3:11:
         8e:cd:4b:95:22:e3:96:ac:ab:45:21:33:7b:f8:af:c6:2f:84:
         f4:4d:f5:ba:4d:14:14:34:89:2d:dd:df:2c:c1:d4:3b:0b:2f:
         18:b5:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:46:29 2026 by rpki-client