Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          801TmFgYs50r57ZlVMOkDPPNURO6jurGVLJ8JdstZPI=
Subject key identifier:   70:E1:25:78:97:EC:4B:1B:96:75:C9:FF:81:B0:DB:7F:41:DF:7F:EF
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       059C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0580
Signing time:             Fri 04 Sep 2026 20:11:02 +0000
Manifest this update:     Fri 04 Sep 2026 20:11:02 +0000
Manifest next update:     Fri 11 Sep 2026 20:11:02 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: 1pWSE2nPMaVhLbBcvGFjNJFDa3VldsJraHomY52k41I=)
                          2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: J561xmVSlPQuiaRbnBKYde82eZlXfxPuqU5+nzE9q2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Sep  4 20:11:02 2026 GMT
            Not After : Sep 11 20:11:02 2026 GMT
        Subject: CN=6a9b25d6-cc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:fd:fe:28:de:7f:dd:1a:44:65:dd:f6:df:
                    d0:b9:cf:a1:0a:5f:d3:8e:d2:7b:9f:49:e5:28:b4:
                    22:36:6a:78:29:77:ed:c4:38:bf:89:6b:f2:ad:72:
                    39:30:eb:af:97:0f:24:b3:0e:f9:dd:8e:94:d1:42:
                    60:d0:f4:d2:7d:c7:37:a1:1a:f5:2c:b3:40:7b:a4:
                    ad:c9:5f:c8:b5:d0:41:01:71:74:39:1c:89:44:fd:
                    ba:e2:34:e2:74:3d:86:bd:1f:9b:8d:bf:ba:36:4c:
                    57:81:37:27:75:4d:51:9f:dd:f9:d5:0f:a7:98:12:
                    97:8a:75:76:09:5c:64:cc:c8:34:39:dc:26:e1:82:
                    06:38:46:fb:6d:8b:cb:38:90:f7:c9:ba:f3:a0:7f:
                    4d:15:a6:20:43:cf:76:48:81:57:f8:54:85:62:da:
                    24:65:95:67:90:1d:90:1b:57:c0:13:a4:d7:ba:a3:
                    31:12:38:d6:f9:9c:d2:14:5a:1a:dc:60:94:b0:8b:
                    f0:2b:39:64:df:ef:4b:6c:8f:43:d4:6f:41:d9:ab:
                    99:7d:c3:47:e4:5f:95:bf:15:33:4a:29:43:37:fa:
                    4d:50:81:f4:25:99:1a:c8:d3:71:5b:ac:8d:8a:a8:
                    21:5d:83:d2:49:51:fe:e8:84:07:19:f6:a3:84:88:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E1:25:78:97:EC:4B:1B:96:75:C9:FF:81:B0:DB:7F:41:DF:7F:EF
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:99:a9:37:a8:b0:c1:d5:e5:fe:d6:09:32:38:cd:ec:ee:75:
         c1:30:77:f5:36:62:d9:dc:a2:73:f6:27:da:53:68:66:8d:d4:
         71:34:ae:78:b7:bf:a1:8d:87:1b:9d:84:9f:b9:3d:ad:d3:16:
         f4:db:1c:4b:59:d6:3e:f5:6c:73:8d:c3:71:2f:45:12:18:71:
         2f:a1:84:6f:0d:4d:94:53:ef:8c:5b:04:94:80:62:50:ca:d7:
         8b:61:5e:02:ad:0f:90:98:f2:b6:67:d9:5d:73:9a:f2:d7:69:
         1a:67:35:10:d9:dd:a4:b4:e8:04:d9:94:cf:62:40:1c:c0:33:
         67:e0:10:5d:6d:36:18:ed:f1:9a:0c:ad:fb:d4:1b:4f:64:e7:
         85:2e:d5:9e:e0:dc:98:fc:1a:18:05:15:89:3d:39:82:08:ab:
         b0:9f:15:b1:61:3c:2f:bc:d3:d9:e7:19:d7:91:3d:f5:d1:39:
         ef:a5:20:bf:42:7a:59:1a:3b:3f:89:b9:e9:db:12:77:d0:bc:
         cb:e5:f9:c5:57:33:74:bd:00:b6:d1:9f:32:02:05:a0:c3:c3:
         7c:8d:81:d1:a9:db:43:9f:57:82:f5:86:8b:f8:93:17:7e:bc:
         bb:c1:ce:c2:5f:5e:d5:56:59:b2:b9:64:09:27:2f:ac:85:e7:
         f9:91:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:19:03 2026 by rpki-client