Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91729D4/33485550725111F1A5B3D6038DA30FBC/iH99gQPB72hcBUJw7rC4CfdsboY.mft
File:                     iH99gQPB72hcBUJw7rC4CfdsboY.mft (raw, json)
Hash identifier:          LLr2UwIk/zJ/jdqrdecFqH6k/72cJjUvSZRv4Z3eMdw=
Subject key identifier:   E9:2E:A2:B9:FA:FF:A3:B6:72:E4:0C:F3:71:74:A1:C5:2F:DA:26:2A
Authority key identifier: 88:7F:7D:81:03:C1:EF:68:5C:05:42:70:EE:B0:B8:09:F7:6C:6E:86
Certificate issuer:       /CN=A91729D4/serialNumber=887F7D8103C1EF685C054270EEB0B809F76C6E86
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH99gQPB72hcBUJw7rC4CfdsboY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91729D4/33485550725111F1A5B3D6038DA30FBC/iH99gQPB72hcBUJw7rC4CfdsboY.mft
Manifest number:          33
Signing time:             Sat 03 Oct 2026 09:23:28 +0000
Manifest this update:     Sat 03 Oct 2026 09:23:27 +0000
Manifest next update:     Sat 10 Oct 2026 09:23:27 +0000
Files and hashes:         1: iH99gQPB72hcBUJw7rC4CfdsboY.crl (hash: uHGhVsbC+sHCVbLEehVNv3jePqkUU7howRmbZhDoDH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91729D4/33485550725111F1A5B3D6038DA30FBC/iH99gQPB72hcBUJw7rC4CfdsboY.crl
                          rsync://rpki.apnic.net/member_repository/A91729D4/33485550725111F1A5B3D6038DA30FBC/iH99gQPB72hcBUJw7rC4CfdsboY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH99gQPB72hcBUJw7rC4CfdsboY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91729D4, serialNumber=887F7D8103C1EF685C054270EEB0B809F76C6E86
        Validity
            Not Before: Oct  3 09:23:27 2026 GMT
            Not After : Oct 10 09:23:27 2026 GMT
        Subject: CN=6ac0c98f-4cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:97:64:25:77:af:df:5b:ae:ac:41:95:10:
                    98:f8:68:cb:cc:ce:70:7d:83:e6:25:15:b2:63:52:
                    5d:b1:cc:8a:73:25:5c:fc:f2:27:c6:27:44:fb:50:
                    20:01:b3:96:fd:74:6f:64:74:14:dc:fc:41:d5:1d:
                    6a:dd:40:aa:00:df:ef:c8:1b:10:a8:1a:da:0f:cf:
                    78:ab:3e:cd:a3:2a:6c:d3:08:98:f8:7e:c7:bb:8d:
                    09:27:9b:7d:99:c9:fe:4b:bd:ed:9d:9e:a2:e4:33:
                    25:2e:63:19:35:77:27:b8:63:ef:e8:f8:18:3c:d1:
                    a7:cc:88:77:73:97:fe:96:5a:26:41:3d:2b:80:f6:
                    a4:df:f7:ef:ab:36:23:99:d7:10:99:77:a6:35:93:
                    ee:fe:d8:ee:95:6e:e4:e7:b6:ad:aa:dd:4b:62:55:
                    61:a2:78:5d:0b:1e:07:d1:62:5b:d6:f1:63:f1:69:
                    c7:a4:ef:83:d0:aa:bc:7e:1d:4f:11:a0:f8:d0:f8:
                    fa:5f:8e:6d:1c:77:63:5a:83:aa:ba:50:67:56:81:
                    30:67:d6:64:19:97:12:45:cb:dd:da:01:e6:61:21:
                    c0:b7:a0:0d:c7:a4:a1:3d:f9:1a:49:5b:f1:69:a8:
                    ec:0c:91:4e:5e:aa:87:c6:f2:72:ed:7e:d6:5c:13:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:A2:B9:FA:FF:A3:B6:72:E4:0C:F3:71:74:A1:C5:2F:DA:26:2A
            X509v3 Authority Key Identifier:
                keyid:88:7F:7D:81:03:C1:EF:68:5C:05:42:70:EE:B0:B8:09:F7:6C:6E:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91729D4/33485550725111F1A5B3D6038DA30FBC/iH99gQPB72hcBUJw7rC4CfdsboY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH99gQPB72hcBUJw7rC4CfdsboY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/33485550725111F1A5B3D6038DA30FBC/iH99gQPB72hcBUJw7rC4CfdsboY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:86:ac:7f:7b:f8:2c:2c:ec:bc:f3:3d:dd:22:21:03:88:15:
         7f:64:35:f3:91:88:99:d1:2e:20:5d:8c:4a:5c:b3:53:fb:a1:
         a8:d3:62:cd:30:47:47:d0:30:16:6b:e2:d0:ae:61:d9:32:9d:
         88:9a:8e:92:78:a8:21:95:6c:1d:b3:5b:16:b5:1f:29:22:10:
         c6:55:39:84:c9:cb:bf:60:91:61:73:be:d0:67:df:64:07:60:
         87:b9:8e:bb:5c:91:44:13:b9:88:22:30:4f:78:bc:f7:c0:eb:
         63:8e:10:a3:01:27:f2:bc:c1:d2:eb:54:db:e2:a2:ee:c3:94:
         cc:3c:66:b2:02:7b:59:26:87:c4:09:c8:f0:ff:41:a1:b5:49:
         30:d0:60:eb:01:c5:8a:c9:52:07:55:1b:e9:98:e6:2f:32:50:
         05:fc:72:dc:36:c2:28:5c:1b:3a:5e:d7:c9:e9:53:4e:8b:51:
         2a:7c:88:bd:94:88:6a:57:6b:5e:86:60:a0:bb:ff:b3:d5:52:
         c2:09:33:7b:44:59:2b:15:df:38:6b:2d:5c:ce:56:32:d8:32:
         8f:63:13:09:f1:39:7d:9d:7a:40:87:72:e1:e8:b0:6e:fe:da:
         43:4f:e0:f9:72:aa:ba:87:02:8d:76:c3:03:8b:dd:ba:70:75:
         66:57:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:01:31 2026 by rpki-client