Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
File:                     iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json)
Hash identifier:          ZDGo0S8l0joqVuuxTAG/81o1K0ts6gO++5AZvUJovfY=
Subject key identifier:   2A:98:E5:F3:35:29:E1:27:55:F1:11:B3:CA:98:C1:36:54:AB:84:EF
Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A
Certificate issuer:       /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
Certificate serial:       04C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
Manifest number:          04B3
Signing time:             Sun 05 Jul 2026 00:19:00 +0000
Manifest this update:     Sun 05 Jul 2026 00:19:00 +0000
Manifest next update:     Sun 12 Jul 2026 00:19:00 +0000
Files and hashes:         1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: bZ6sQp7oKoRrlI8bgGqHPx8AFxbfS20+DSVC1CqTWoM=)
                          2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: VmEYppCHSqRwx3tIg4erYKUw+SWILI9kCa/xLH8LYmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl
                          rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 00:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A
        Validity
            Not Before: Jul  5 00:19:00 2026 GMT
            Not After : Jul 12 00:19:00 2026 GMT
        Subject: CN=6a49a2f4-69c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:70:e6:5d:eb:47:0d:c8:56:45:75:40:0d:
                    8b:e2:b1:9d:5a:c5:94:68:9d:98:90:e2:1d:39:f1:
                    46:73:bf:a2:11:e4:2a:8e:42:82:e4:94:b1:d1:b6:
                    71:fe:8c:8c:f2:76:80:a5:6a:ab:5b:ec:c6:35:00:
                    92:85:5c:3d:85:26:91:03:53:f9:8a:26:c8:36:9b:
                    b8:c6:61:01:a8:c5:60:5d:85:b9:38:ef:a8:db:0b:
                    c3:b9:bb:db:6a:8c:78:0b:1d:ef:83:46:c6:81:47:
                    8d:65:e3:bd:ee:0c:74:9c:09:3e:f0:e9:1a:5c:c5:
                    70:b7:4c:75:44:cf:cf:dd:63:9c:95:8e:7d:38:bd:
                    2f:c0:8c:f2:12:8c:b9:83:c1:79:52:48:58:b8:78:
                    36:43:7c:a0:c2:17:5c:c3:67:1b:f0:fa:9c:c5:f9:
                    4f:68:fb:3a:df:6e:06:8c:1c:2c:65:33:42:f8:c5:
                    9a:45:91:ef:92:b5:e1:13:f3:e5:69:ee:95:d7:27:
                    a1:91:b5:3c:4e:fe:0a:30:bc:6a:6c:d5:3a:b7:4d:
                    45:18:c7:4e:28:00:6c:ef:74:d6:db:8c:8c:0f:2b:
                    70:2b:1e:8d:b3:76:01:2e:aa:ab:09:3e:6c:c8:e3:
                    fc:90:9e:f7:3c:96:98:9e:99:0b:3f:62:d3:5d:5b:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:98:E5:F3:35:29:E1:27:55:F1:11:B3:CA:98:C1:36:54:AB:84:EF
            X509v3 Authority Key Identifier:
                keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e1:71:29:fd:1c:91:b2:c4:bb:37:b6:53:77:c5:a0:8f:fd:
         87:15:e7:31:62:76:e5:51:2f:78:ea:80:e9:ca:52:ac:f2:79:
         18:bf:60:46:65:5a:f7:16:af:d0:0d:15:c7:13:a6:bc:ba:73:
         95:55:7d:f8:45:3c:b9:d4:b3:99:53:91:a4:f1:09:98:4f:6a:
         59:e5:4e:63:68:93:8d:b3:6d:f0:50:38:54:db:0d:dc:79:42:
         1d:0d:b8:9d:87:71:ec:a6:c4:51:5b:1c:27:1c:6d:ea:cc:b5:
         e2:9d:d2:e6:a8:ba:a4:0d:63:99:95:15:88:45:73:67:63:23:
         6c:b3:e9:4b:e0:5e:9b:b0:5f:77:c0:ab:64:41:05:2f:77:2f:
         8e:2d:a2:f5:52:ec:9e:0e:04:8e:ca:95:75:84:c6:7a:a6:8d:
         0b:8b:86:28:81:9b:db:b4:53:c3:b5:da:e3:b2:90:82:f5:f2:
         28:df:11:dc:98:fd:68:fe:9b:64:74:66:11:fb:66:77:ea:24:
         1c:2c:eb:1d:53:7d:66:f5:15:81:29:cc:8d:a2:9f:d4:05:65:
         ac:ea:e6:8c:f5:e3:48:1c:a9:d1:97:73:0d:67:03:d5:86:53:
         10:fa:ea:05:5e:fb:0c:a3:f9:57:d4:08:07:c0:33:7d:67:8f:
         fe:5b:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:51:32 2026 by rpki-client