Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File:                     iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier:          9LaHGjRvoAmo8wR7f/Sg1sfyDUjCC1g8XnmIUlKJHd8=
Subject key identifier:   38:08:40:72:B2:72:74:67:7A:1F:1C:B1:A2:77:11:75:83:39:E5:67
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer:       /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number:          02CE
Signing time:             Wed 19 Aug 2026 01:44:26 +0000
Manifest this update:     Wed 19 Aug 2026 01:44:26 +0000
Manifest next update:     Wed 26 Aug 2026 01:44:26 +0000
Files and hashes:         1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: GbQmUQoTTNS7kjKF2498EOhuoXSnujgZ1NWgwpzM39o=)
                          2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
        Validity
            Not Before: Aug 19 01:44:26 2026 GMT
            Not After : Aug 26 01:44:26 2026 GMT
        Subject: CN=6a850a7a-ef0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:66:fb:ec:8e:e2:f1:4b:8f:b9:5a:f2:13:
                    33:f6:37:12:0c:32:fb:44:da:3f:d5:cd:d8:29:5e:
                    f1:b9:1e:71:cc:ba:1e:8d:13:69:4c:4d:47:82:0c:
                    9d:69:ef:57:c8:9b:16:79:8d:47:5c:e7:32:67:2b:
                    f8:84:74:2c:e1:be:d1:5a:b7:c6:91:78:d3:a7:89:
                    d0:64:ae:12:c0:c4:78:df:fe:a1:7a:55:13:21:be:
                    28:93:a6:13:8c:fb:a8:1c:8b:08:7d:4a:55:a0:bf:
                    ba:31:c5:ae:21:1e:ab:34:4c:22:40:30:7a:5f:df:
                    60:51:a6:6a:38:77:7b:94:b5:46:5f:e7:12:12:b0:
                    62:cb:34:62:9a:59:32:d2:22:07:8a:7f:c9:5f:bd:
                    1d:3e:47:63:75:70:3b:2f:5c:d0:f5:c4:60:8e:d4:
                    3a:3f:a8:d9:a3:4e:9f:04:0f:40:7a:eb:32:db:08:
                    95:ae:34:06:6c:af:42:01:37:9d:6d:6d:09:77:31:
                    45:56:0f:bf:48:91:b2:87:72:29:4c:11:51:e2:9c:
                    a3:cd:db:ad:a9:ac:de:72:6f:e1:eb:b1:5f:b9:08:
                    8f:37:52:53:73:a1:85:c2:3b:f9:96:d9:2b:16:25:
                    66:b4:a3:60:fa:4e:73:69:18:8b:ab:18:ba:91:70:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:08:40:72:B2:72:74:67:7A:1F:1C:B1:A2:77:11:75:83:39:E5:67
            X509v3 Authority Key Identifier:
                keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:bf:41:af:24:19:38:1c:1b:5e:d0:09:d7:a5:3d:07:46:
         62:b8:78:9a:ee:fa:03:58:c7:ed:50:61:4b:19:20:32:77:8d:
         9e:ef:4a:31:59:73:a8:dd:37:16:0c:97:07:e6:a9:a5:b5:8d:
         c6:c9:92:5b:2d:df:9b:30:1f:dd:7c:f3:a5:61:fe:b3:d2:f4:
         e9:cc:a6:36:a6:2b:58:2f:a0:46:12:1a:9c:2b:ab:d8:d8:c1:
         95:18:21:5e:ab:7e:b7:43:ab:e9:eb:14:cd:43:84:64:fb:a5:
         20:33:88:40:80:a7:01:e9:fa:c3:92:6d:cc:4f:eb:2f:a0:f0:
         4c:f0:77:49:6f:4e:f8:85:11:91:51:b7:80:29:a3:25:9d:d0:
         59:12:85:9e:61:12:f4:3e:86:72:df:08:51:8a:3e:5b:b8:c4:
         e0:06:86:17:72:94:6c:23:f1:f2:cb:66:45:35:9f:ec:12:1f:
         a6:b7:29:c8:a3:9c:1b:30:bf:55:39:d8:1e:6c:62:d3:f4:85:
         4e:cd:ab:93:4e:0e:6f:13:a1:a2:73:d7:87:48:37:40:34:e4:
         1c:60:33:b6:2b:27:a9:26:6c:84:cd:b9:a0:ba:7f:8b:cd:4e:
         e9:4d:dc:16:e4:23:25:53:aa:fe:00:52:76:6b:01:0f:96:21:
         2c:da:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:44 2026 by rpki-client