Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
File:                     iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json)
Hash identifier:          yemXJluNVZKehpDcqyMCY8K8q+wy7VD7Jwi8mQwb6jM=
Subject key identifier:   C7:0F:AE:83:62:80:28:36:66:0E:FF:E8:02:B1:A0:09:96:10:73:9B
Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
Certificate issuer:       /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Certificate serial:       35BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
Manifest number:          359D
Signing time:             Sun 04 Oct 2026 14:36:13 +0000
Manifest this update:     Sun 04 Oct 2026 14:36:12 +0000
Manifest next update:     Sun 11 Oct 2026 14:36:12 +0000
Files and hashes:         1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: yivOT8Oh4XjL0cRMrSEZeeoi1jLLhLlqO/iFS3cHHxg=)
                          2: 075152B253CB11F09DA22358C4F9AE02.roa (hash: VxzUodkd5BwCYwN/SAUBovVstnmyYoCGYsD/9kzzeCs=)
                          3: A997FC56865111F18C986E6391A30FBC.roa (hash: tkr9QszuSPa+E62pcGkCyeoDv7+eIjaCRBenHSUaRkA=)
                          4: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (hash: gaWU+X+/mNK/B9cZjLPSBTco2OY87BQH5ky7affM8lQ=)
                          5: A5A8DBE2865111F18C986E6391A30FBC.roa (hash: 96vGy7bp1vNNLVl0lRAFljn5SIt5ui19VMtj1FMFzNE=)
                          6: E52708AADFCE11EFBC4CD631C4F9AE02.roa (hash: 7mdn7K/pFTz7Pj5x+lPuobQnpXFUmB94xMoVdDvQnh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13759 (0x35bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
        Validity
            Not Before: Oct  4 14:36:12 2026 GMT
            Not After : Oct 11 14:36:12 2026 GMT
        Subject: CN=6ac2645d-9661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:06:49:2c:1a:83:34:12:52:a3:40:c2:ed:
                    25:4d:2f:5b:2e:0c:b0:0a:ea:f6:fd:90:6c:7d:86:
                    4b:37:29:fc:6c:da:9b:da:6a:30:ca:6e:b6:c1:b2:
                    a6:29:2a:d1:c6:9a:d4:73:a6:f7:3a:c0:a6:4d:72:
                    30:39:28:c2:5b:32:1f:fe:48:f2:9f:c8:8c:2e:46:
                    9a:26:44:7e:47:d8:5b:e4:ec:20:ff:e7:5f:c8:73:
                    51:c6:dc:f7:a6:7d:0d:ed:52:1b:52:ac:4a:6e:7f:
                    ef:1a:f0:64:4e:9e:b5:5b:01:88:4a:82:e6:9f:da:
                    90:9d:ad:70:dc:61:61:97:e5:15:5c:d2:d2:e3:57:
                    f5:89:10:66:29:36:1a:6c:3d:a9:8e:b4:2a:09:d3:
                    64:91:82:ca:df:b8:cb:c7:05:84:20:c9:33:cd:23:
                    0a:56:c9:9f:40:2e:6e:3b:ab:c3:32:c6:60:98:1f:
                    27:59:cd:b2:6a:78:2f:fe:e0:20:52:02:61:38:8a:
                    dc:6e:9c:1d:0d:65:48:78:7d:7c:c0:cc:9a:e1:13:
                    79:df:42:0c:7d:8b:df:2d:35:3f:9f:5b:99:15:ce:
                    dd:f5:6e:8e:99:dc:61:b9:df:bf:19:c9:b8:ef:47:
                    cb:32:99:c8:25:25:d8:11:62:a5:96:cf:0e:ce:41:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:AE:83:62:80:28:36:66:0E:FF:E8:02:B1:A0:09:96:10:73:9B
            X509v3 Authority Key Identifier:
                keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:b6:40:5b:1c:0a:6d:f6:4d:8e:fa:00:7d:fc:e6:01:f2:
         a9:c7:0e:cf:9a:0c:48:53:62:ea:c8:14:e8:6a:f8:fb:96:21:
         e0:90:57:2e:6d:7b:a7:44:25:05:64:b0:4e:f0:f2:e6:bf:19:
         b6:82:d3:0a:64:eb:00:22:a4:31:5e:5c:dc:41:f0:86:5b:9b:
         74:cc:a6:15:60:fc:1c:5d:b4:e1:f5:7b:de:01:2e:a8:3c:cc:
         42:d1:c7:af:79:3a:ef:8a:b4:7d:57:70:92:8a:7a:ab:92:74:
         21:58:0d:d2:a7:63:cf:48:68:5f:a5:1e:83:bf:04:ec:0c:bf:
         f3:e3:49:f9:e2:ec:3f:cd:92:57:f7:7b:57:cf:56:73:9f:51:
         e3:d5:b1:5e:0f:f7:bf:67:04:a8:08:6a:af:b9:1b:4d:f1:7e:
         c7:2b:72:e8:20:f7:5c:81:fd:1c:91:b6:5a:c1:0e:d8:a7:c2:
         f1:18:a2:b8:f4:59:da:e1:2a:c4:98:7e:e9:f9:db:ee:64:bc:
         cf:78:f7:58:5d:0d:27:fe:49:96:16:5d:f9:eb:0c:42:fa:53:
         a0:93:a3:23:54:60:a2:e1:13:28:90:3b:ce:1c:84:76:34:5e:
         56:16:ad:f1:54:99:3f:f5:8a:9c:d2:cc:e2:ab:ae:e7:0a:ef:
         10:7b:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:29:00 2026 by rpki-client