Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File:                     ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier:          9gLcjDAbsI/19/Aif9XRjZEd9eoAV29mOF89dhTcimk=
Subject key identifier:   C8:E5:72:2A:2E:86:DE:B5:61:74:AE:51:4B:5A:3D:A7:42:36:98:26
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer:       /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number:          01A4
Signing time:             Mon 05 Oct 2026 04:33:37 +0000
Manifest this update:     Mon 05 Oct 2026 04:33:37 +0000
Manifest next update:     Mon 12 Oct 2026 04:33:37 +0000
Files and hashes:         1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: aQ2Z/HirMxv+pKN5gfEZuy0ZyxzyNBPJzfq1OihxfdU=)
                          2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
                          rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
        Validity
            Not Before: Oct  5 04:33:37 2026 GMT
            Not After : Oct 12 04:33:37 2026 GMT
        Subject: CN=6ac328a1-8a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:8c:b6:91:9c:ad:c3:db:fa:32:c8:fa:12:
                    0f:b9:7d:64:db:9d:a0:6b:5b:69:ac:c1:6e:fc:14:
                    6b:38:95:11:c3:0a:fc:5a:82:1c:94:28:11:3f:84:
                    56:39:ff:7d:b2:e8:0d:30:47:cc:08:44:fd:70:4a:
                    c5:48:7e:39:3b:65:bf:cc:dd:a4:15:76:61:f1:3a:
                    e5:ba:c6:aa:2a:6a:be:eb:dd:d7:c1:41:74:69:16:
                    d2:03:6e:a5:9f:fd:68:dc:9f:35:7e:9c:55:2d:b4:
                    46:d5:63:be:33:3e:97:55:b2:59:cf:95:fa:6d:94:
                    d3:c4:84:9d:1a:62:ec:d8:62:9d:14:16:72:cb:11:
                    bf:11:88:7f:7b:e1:d3:c8:aa:fa:79:d5:49:79:61:
                    b8:14:bd:68:af:40:6e:91:67:6e:35:da:b3:f1:ed:
                    cc:a1:06:78:1c:dc:10:65:00:9b:23:ca:3c:4a:1d:
                    57:dc:64:0a:10:92:a5:58:db:bd:03:bc:7d:a4:09:
                    5d:5a:e6:29:c2:84:29:5f:c9:c7:ea:66:81:b9:54:
                    12:e6:d8:94:6f:2b:ac:d0:5b:23:52:40:5f:07:3e:
                    98:8c:c2:52:5b:83:88:17:16:4d:67:f7:8d:ce:4c:
                    85:1e:16:07:71:df:a7:f6:93:bb:15:28:b5:58:34:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:72:2A:2E:86:DE:B5:61:74:AE:51:4B:5A:3D:A7:42:36:98:26
            X509v3 Authority Key Identifier:
                keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:46:9e:77:31:f9:93:47:a1:ce:5b:71:b5:3a:a3:04:3f:48:
         e2:66:bf:7c:89:81:fb:d1:ad:20:35:28:27:46:b8:b0:c0:9b:
         6a:82:79:48:d7:4d:28:0b:30:f1:60:bd:c5:cd:87:52:7a:d7:
         f2:75:89:d4:a0:a5:60:8b:93:5a:9e:37:2c:36:cc:5a:de:d1:
         d8:9b:44:d1:83:f6:7c:b2:84:8c:1c:31:79:eb:1c:95:54:4c:
         35:fc:4d:72:79:ba:15:ff:ae:99:fd:43:9e:c9:63:83:93:da:
         10:ea:a0:c8:5c:a8:83:16:12:99:38:9a:d0:33:22:ed:97:49:
         33:fd:39:a7:0e:35:a1:41:58:40:14:20:4e:89:88:a8:cf:a3:
         60:83:2d:3c:0d:ff:63:e8:24:00:05:6f:9f:39:7a:d0:7a:52:
         4e:15:ff:23:6c:5f:97:45:a9:62:df:b3:4c:b5:f2:7d:42:c5:
         a2:ff:5f:f2:30:a2:d1:e3:95:22:9a:6b:0a:5c:b8:87:05:43:
         dd:5b:d4:f7:3c:cd:36:a5:b2:8b:b9:3e:e2:75:df:74:91:03:
         d1:28:6a:3d:13:e2:96:66:0e:91:57:bf:13:26:7a:48:cf:41:
         c0:05:0a:c3:66:fc:51:af:be:f7:b0:31:60:13:35:dd:71:2d:
         ae:bb:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:42 2026 by rpki-client