Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File:                     iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier:          iT6Q9fpebSAmmimV5CIWRxyVFZ3ePGjqbByQglf0Zh0=
Subject key identifier:   DE:1E:35:5B:B1:AF:FC:C2:B3:CC:98:AA:2F:6D:F3:C5:1A:3E:73:D3
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer:       /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial:       059E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number:          0592
Signing time:             Sun 04 Oct 2026 23:15:45 +0000
Manifest this update:     Sun 04 Oct 2026 23:15:44 +0000
Manifest next update:     Sun 11 Oct 2026 23:15:44 +0000
Files and hashes:         1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: nnWFROitu3rXYhzQyQTNfrfzxuMIJWWaA33cvXV4mfc=)
                          2: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=)
                          3: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
                          rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
        Validity
            Not Before: Oct  4 23:15:44 2026 GMT
            Not After : Oct 11 23:15:44 2026 GMT
        Subject: CN=6ac2de20-fe80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:22:95:9a:5d:59:3e:18:59:9d:cf:f0:9b:
                    64:a9:03:35:8c:f3:b8:ca:a6:f1:1b:2d:63:b6:29:
                    8c:74:10:94:4d:69:19:48:cb:f6:72:73:84:71:97:
                    42:72:3a:74:a2:1b:3d:f4:4c:d8:c9:13:a1:dd:31:
                    3c:72:cf:c0:c1:43:c2:c0:e6:e9:c1:1b:81:7c:7e:
                    99:41:74:dd:3b:06:f8:ab:a8:54:c9:16:b4:95:5c:
                    90:4a:2b:99:46:72:a7:54:e3:8f:03:f3:d2:9a:6e:
                    5e:87:b6:03:02:35:fd:7f:36:76:6e:c5:f3:a2:07:
                    69:0a:aa:93:5a:08:9b:80:70:12:10:ea:fb:64:6d:
                    c9:84:b9:25:ba:83:64:8d:bc:5e:ce:05:d6:0a:7a:
                    06:ad:ea:52:b2:d5:27:99:6a:b2:9e:30:0a:0e:9b:
                    17:b5:0f:2e:96:2f:c7:cc:12:21:89:20:17:db:69:
                    65:5b:b1:0d:13:7a:cc:e8:d4:5c:c2:be:ae:5c:3f:
                    cd:5d:a1:76:9c:21:9e:b9:de:2d:b0:e5:36:c0:93:
                    f3:38:ec:16:a4:b3:fe:da:53:4a:64:cd:42:f3:2e:
                    ff:fb:70:3c:ed:8a:1f:94:00:7c:a2:35:71:9a:d0:
                    c7:1d:f1:f8:10:d7:ae:bf:aa:92:9d:71:91:69:1a:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:35:5B:B1:AF:FC:C2:B3:CC:98:AA:2F:6D:F3:C5:1A:3E:73:D3
            X509v3 Authority Key Identifier:
                keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:88:4e:b0:13:a4:cf:fe:20:bc:a3:18:40:af:e3:ce:83:
         36:c7:d3:f2:da:60:78:e9:24:85:0f:9c:45:b7:2b:3e:0c:de:
         f4:89:e0:8d:8b:99:60:c8:67:1e:c2:13:7d:34:a2:61:7b:f3:
         0a:e5:96:c0:75:d7:f4:be:ac:0b:e6:c3:b4:fd:77:f2:60:45:
         d2:16:a3:d6:9c:b3:93:7f:fc:df:a9:71:4e:33:e9:9a:8f:33:
         24:14:d7:09:71:d8:5f:2b:81:1c:dd:7f:cb:ac:97:d3:6b:a2:
         a0:d3:c8:fb:c3:02:87:3e:9e:d6:2f:ee:fb:59:a8:08:99:a2:
         ca:bb:58:1c:1a:ea:8f:d5:a6:bf:08:17:bf:45:25:e8:40:7e:
         4a:d8:28:17:e0:85:66:53:e1:d9:e4:be:e5:31:29:cd:98:2c:
         5b:96:23:1c:e7:31:a5:b3:59:5a:6c:d9:a6:dd:32:00:b0:95:
         23:bd:36:3b:b0:a5:d2:d4:32:a3:8d:04:02:5c:eb:0b:fe:59:
         95:ec:be:a4:8a:18:c5:82:8b:46:a4:db:f1:cc:1e:bd:d9:c9:
         92:13:2c:ea:4d:22:d3:1a:f1:4d:c5:33:75:12:3a:6c:3a:9e:
         55:0a:b0:3d:93:81:35:0a:d2:bb:15:13:0d:23:87:55:5f:69:
         a1:24:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:53:31 2026 by rpki-client