Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
File:                     IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json)
Hash identifier:          iytUHS+D9s//tYYQer2UiLFAQXudccZ4W9wEaCPS4Vc=
Subject key identifier:   34:D0:9F:8D:3F:DD:1A:2F:B2:0B:38:71:63:68:51:77:08:8A:66:45
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Certificate issuer:       /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial:       07CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
Manifest number:          07BF
Signing time:             Sun 20 Sep 2026 21:19:30 +0000
Manifest this update:     Sun 20 Sep 2026 21:19:29 +0000
Manifest next update:     Sun 27 Sep 2026 21:19:29 +0000
Files and hashes:         1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: carx8x10VRj/4Mg9lP2lUOhxtNtdDJcMnwEsSXaPWrM=)
                          2: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: 1PxoUc76XWXkL998OGNeqeLJhJOsgUexrDcQlkjdiNM=)
                          3: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: uacZ0uLJA7NcUgf5BEG6bnuqXCkNz+VfZ3kDotldilw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
                          rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
        Validity
            Not Before: Sep 20 21:19:29 2026 GMT
            Not After : Sep 27 21:19:29 2026 GMT
        Subject: CN=6ab04de1-484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:74:93:84:bd:76:6e:83:b4:9b:c2:53:6d:
                    28:2a:3a:1a:d8:20:af:cd:d9:a2:68:f1:49:88:74:
                    a4:84:51:ea:18:83:f7:23:4c:e5:21:a1:e0:ad:70:
                    47:a9:72:3a:65:3a:6b:40:0f:47:a0:ea:19:5b:05:
                    90:f5:36:6f:cf:51:de:b6:4f:75:99:95:23:3e:bb:
                    c1:99:c5:3b:1e:90:5b:f2:17:55:48:d7:b3:5e:4a:
                    e6:0e:14:5b:b6:97:28:ef:3a:74:a0:e7:67:90:89:
                    63:aa:8c:2a:9e:81:a8:de:cc:4f:29:a3:ae:06:41:
                    51:40:ee:fe:e1:05:66:30:d6:40:84:12:58:fb:7b:
                    94:6e:41:a1:ac:ff:4e:ba:47:6f:83:90:02:51:01:
                    3a:92:d0:5a:49:9a:58:ea:17:18:d0:db:bc:73:18:
                    67:39:d8:16:5c:67:72:72:12:e3:ef:52:96:f4:0e:
                    06:80:5e:12:91:96:3d:0d:aa:b8:12:fd:0a:cc:ec:
                    e3:c1:aa:36:a7:cd:60:9c:9b:b6:c3:f2:35:30:b0:
                    22:46:0f:45:f0:f3:2d:b5:70:45:bc:3b:3e:99:4e:
                    4e:9a:98:aa:9d:b1:48:59:f8:8f:b9:51:1c:a7:26:
                    f0:d5:93:72:d9:b9:fe:e0:68:6e:6f:33:d2:b7:f7:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D0:9F:8D:3F:DD:1A:2F:B2:0B:38:71:63:68:51:77:08:8A:66:45
            X509v3 Authority Key Identifier:
                keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:36:80:06:19:8b:dc:9c:a7:c8:68:c4:42:8f:5f:6d:43:
         9c:d4:09:d9:5c:69:a6:f0:b3:66:36:b0:4f:41:8a:7e:7f:8e:
         22:06:9a:d2:7d:c5:1c:8b:10:78:b4:0a:90:8f:72:8c:13:10:
         e1:f6:1f:f1:a3:b5:36:4a:69:e4:e6:da:80:6c:de:5a:b2:2b:
         83:b2:d0:13:6c:ed:30:e7:75:a6:2d:f1:39:e9:dc:26:bb:58:
         7e:f8:80:76:62:57:0d:f9:4a:ce:db:c2:86:d7:1e:c1:56:7e:
         72:80:53:34:44:10:83:f3:01:85:b2:64:b6:2b:74:49:2e:e4:
         ca:b5:25:7f:38:95:40:f1:fb:d9:9a:43:a3:f1:16:75:e1:d5:
         aa:60:36:2b:e0:e5:18:79:65:e2:e4:c1:6c:64:de:1c:c5:98:
         42:e3:f9:03:1d:e7:e2:ba:cc:bd:7a:7f:6b:3f:5a:46:c3:56:
         23:42:e6:1c:2a:3f:26:04:65:1b:95:95:7a:7d:c6:82:92:7b:
         af:78:1f:ff:6d:1f:3a:f5:ac:f8:e7:0b:e2:26:dd:79:80:d5:
         d4:e0:cc:dd:7c:80:60:bb:ef:50:6d:db:cb:ac:57:6b:b8:a8:
         73:b3:1f:51:90:a7:92:f7:b2:26:29:42:2b:ac:ff:eb:f4:32:
         b1:46:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:03:38 2026 by rpki-client