Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File:                     i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier:          g5bhA1dEJBbJ8L25LcRTtHHT1GFVmzB6+yqJwsPs0mI=
Subject key identifier:   83:00:A7:07:36:2A:78:56:EB:16:6B:93:36:2B:1C:38:6A:CF:27:49
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       0876
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number:          07CF
Signing time:             Fri 04 Sep 2026 21:42:28 +0000
Manifest this update:     Fri 04 Sep 2026 21:42:28 +0000
Manifest next update:     Fri 11 Sep 2026 21:42:28 +0000
Files and hashes:         1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: rgZXo7LpGjY8SJat1xJ0W6hJlDVF8AwvYlXEutI0jtM=)
                          2: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
                          3: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
                          4: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
                          5: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
                          6: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
                          7: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
                          8: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
                          9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Sep  4 21:42:28 2026 GMT
            Not After : Sep 11 21:42:28 2026 GMT
        Subject: CN=6a9b3b44-274d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:c9:fd:05:23:6f:35:b5:40:f7:f4:ca:71:
                    3f:e7:ad:40:08:d8:5c:9b:6d:a6:47:27:47:d4:1e:
                    5c:a5:c5:c9:6c:32:d2:a3:83:82:0e:ef:8f:7d:1c:
                    b5:aa:5a:07:bb:0e:e1:b9:28:f8:93:0d:6e:40:28:
                    fd:e5:af:3a:25:9a:30:19:8a:18:8a:b2:67:3d:86:
                    b2:d5:89:f1:19:21:78:08:24:e8:94:d0:68:f0:dd:
                    9f:ce:f6:94:62:1b:af:71:44:ba:bc:4c:ac:8e:bf:
                    cc:dd:4a:b6:ca:96:f6:0b:92:9d:71:e5:f2:89:84:
                    ec:90:3f:da:6a:c6:07:c3:3f:fc:37:ce:f1:11:5b:
                    d3:9b:1a:f0:f3:21:cd:b1:6f:9f:55:6c:d9:25:e4:
                    8b:59:3b:38:2f:d6:a6:65:8a:bc:76:17:0f:65:dd:
                    85:da:c9:37:b7:43:6a:85:32:d4:8f:b8:35:db:5f:
                    4d:b2:22:ab:a1:33:55:78:72:1e:28:6b:74:85:7a:
                    82:19:a4:29:98:e0:d2:9c:76:58:4b:75:02:59:51:
                    5b:48:d8:ec:16:dc:23:48:5c:fc:ba:de:a8:5d:29:
                    25:0d:0c:89:4e:85:13:6e:89:54:9a:94:fe:9b:4e:
                    61:4b:26:da:fb:48:fd:0d:16:c4:b1:81:a3:ea:fd:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:00:A7:07:36:2A:78:56:EB:16:6B:93:36:2B:1C:38:6A:CF:27:49
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:53:71:f8:92:43:1e:5a:04:17:69:d8:2a:a6:3f:8e:97:5d:
         5b:b1:e7:77:c2:b5:df:12:fd:83:3b:2a:b6:44:fc:d4:a8:70:
         cb:3c:88:a2:3e:e1:d3:ca:48:90:a3:36:1c:dd:54:f1:cb:46:
         31:93:ec:13:10:c3:ef:e2:20:a6:6c:a1:3e:fc:ff:c3:0b:d4:
         ae:4c:97:12:3d:77:5b:d6:41:55:ec:98:9a:3f:3d:c2:f3:08:
         7e:41:01:dd:d7:5a:3f:60:57:05:f3:30:0e:f6:82:ee:58:50:
         ff:fb:01:d0:44:d8:15:d0:94:42:8a:90:50:d6:af:d6:6c:c4:
         31:9e:34:c2:64:7f:86:5b:9b:2a:fe:9d:84:78:02:57:28:ed:
         1c:7f:b4:3b:83:18:0c:11:c0:37:77:b4:f8:96:4f:3d:0f:86:
         80:bd:60:cb:26:53:01:eb:a1:78:02:4e:10:8f:ca:ec:ad:3b:
         ab:3d:5f:ba:1d:37:d1:19:dd:76:ef:70:8d:a0:14:d3:bd:c6:
         97:e2:bf:66:18:a1:88:05:cb:af:5d:a9:ab:6e:7a:52:e6:91:
         e7:0b:f1:df:b5:ec:f8:1a:8c:4f:89:2d:b9:30:12:6f:7b:39:
         1e:56:62:31:48:8a:87:e8:5e:d4:63:fa:a4:04:e4:5b:94:80:
         02:db:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:36:06 2026 by rpki-client