Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File:                     iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier:          XyKpG5J/OQrswJF0g5E/l7DQ9rhzNHeC/LgzQ8ojDmY=
Subject key identifier:   5D:34:A2:7B:51:FC:DE:96:87:5D:94:7A:9B:83:1C:46:92:28:AD:14
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer:       /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial:       0CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number:          0CC7
Signing time:             Mon 20 Jul 2026 18:46:39 +0000
Manifest this update:     Mon 20 Jul 2026 18:46:38 +0000
Manifest next update:     Mon 27 Jul 2026 18:46:38 +0000
Files and hashes:         1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: AQn3Gxyca7I6K/oc2kph3LbnzHoRoKuqwBrfBe8IgaY=)
                          2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
                          rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
        Validity
            Not Before: Jul 20 18:46:38 2026 GMT
            Not After : Jul 27 18:46:38 2026 GMT
        Subject: CN=6a5e6d0e-a29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:0f:af:91:36:7e:4f:c5:04:74:09:a6:c3:
                    5c:fa:df:a9:b9:17:e9:d8:6c:e8:a9:11:0e:8c:43:
                    9a:5f:6d:71:b1:8e:40:22:cf:bf:c1:50:07:5f:57:
                    e9:6c:2f:f2:f0:21:e0:29:33:69:bb:27:55:c0:1a:
                    04:6d:42:6d:71:d9:71:3d:d8:e6:ca:2a:b5:43:a0:
                    3b:03:a0:50:07:3e:c9:5d:c5:fb:6a:cc:09:a9:de:
                    8a:44:b8:ef:b3:f3:fc:78:34:44:e6:a1:ef:22:ad:
                    f9:b2:eb:d4:33:d4:2c:74:07:47:a3:32:8f:48:ae:
                    e1:bf:ae:56:c1:0c:e8:47:fb:97:ef:ac:5b:1f:71:
                    f2:5e:32:b8:ab:6b:cf:c7:0a:fc:a7:21:59:ce:1c:
                    00:72:4f:f0:b7:9e:9e:e8:ba:1b:0b:1b:08:57:e5:
                    4b:61:34:d7:18:21:c1:02:27:e3:cf:cb:4e:14:5f:
                    00:cb:64:cc:bf:ce:f5:0a:9d:b0:20:7f:0b:d1:80:
                    f0:1f:32:ff:7b:fa:12:c9:c8:cf:86:77:25:8a:8b:
                    9e:38:16:1f:ca:04:b3:4c:e9:2b:01:f5:c0:57:99:
                    7c:e9:63:e1:ac:4a:ae:20:0d:58:ac:cf:54:2d:37:
                    5f:64:70:a6:dc:3b:f0:13:8f:56:f3:21:9f:54:1c:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:34:A2:7B:51:FC:DE:96:87:5D:94:7A:9B:83:1C:46:92:28:AD:14
            X509v3 Authority Key Identifier:
                keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:33:9f:02:ea:fc:05:f4:43:28:e1:92:77:07:4f:17:0e:
         05:50:2b:54:6c:09:44:da:83:2d:2c:df:8a:82:34:8d:a8:c5:
         5c:aa:fc:80:44:0f:ff:19:63:4b:c3:04:d0:9a:b4:25:0d:a8:
         b8:ed:03:d4:57:98:a5:0e:a9:ac:ea:f7:79:ff:9c:82:95:14:
         c2:e2:96:fa:60:9d:c7:c7:c1:65:06:a5:e9:ae:77:5c:33:5c:
         f1:4d:d7:07:86:20:fe:79:71:6e:10:84:07:0f:f1:8e:14:d6:
         53:d5:a0:44:bd:74:cb:21:85:97:6f:2e:91:35:e2:83:c5:c2:
         b9:16:bf:3e:65:86:37:e4:0b:80:26:fd:f5:c2:e8:7d:7b:e9:
         ec:26:d2:26:c1:dc:8e:93:96:b3:8d:e8:36:9e:39:1c:0e:a8:
         20:dd:1f:7a:fe:0c:3c:73:f8:e1:11:6e:7d:1e:68:47:83:d5:
         e2:76:f4:2f:f3:07:9e:fe:4a:c6:78:a6:86:11:73:29:60:d8:
         58:9d:23:e5:56:11:93:50:f0:01:a7:cf:c6:83:e0:16:0e:95:
         bd:d2:cb:05:83:f0:73:09:38:a6:e1:59:16:7c:79:95:c1:ee:
         7c:f2:90:7e:fd:d4:17:ce:7c:31:9b:46:5a:18:8a:37:0f:ce:
         7a:fe:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:57 2026 by rpki-client