Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
File:                     iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json)
Hash identifier:          dCwjT3qIQo/vrQfFr4Zo1GHLlVLtVhFn2WkKKXzAiRQ=
Subject key identifier:   14:6A:89:5E:BC:DB:99:89:09:81:41:BF:19:5A:DE:BE:62:A7:2F:BB
Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
Certificate issuer:       /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Certificate serial:       054B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
Manifest number:          053E
Signing time:             Sun 04 Oct 2026 23:34:02 +0000
Manifest this update:     Sun 04 Oct 2026 23:34:02 +0000
Manifest next update:     Sun 11 Oct 2026 23:34:02 +0000
Files and hashes:         1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: UVba6/52aCm1aTKQ74juTQt34gEOUMpOIGJLAmlyKvo=)
                          2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: PglW3T12IKlMircnLLUZ33j6kRlzVW56A2kCHbmh2rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
                          rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
        Validity
            Not Before: Oct  4 23:34:02 2026 GMT
            Not After : Oct 11 23:34:02 2026 GMT
        Subject: CN=6ac2e26a-29a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:45:78:1c:17:c8:b6:a1:f7:65:ed:0e:39:
                    89:f2:5a:e1:67:dc:c5:51:7d:3d:39:b5:92:e6:66:
                    f0:62:81:05:9e:4c:95:a1:e6:02:3c:29:e5:f2:6e:
                    38:72:c1:fd:e2:61:d1:e9:b3:1a:bf:79:18:fa:74:
                    2d:db:92:10:1a:98:61:b7:27:a8:69:ed:d4:82:36:
                    a3:5c:87:b6:14:4c:2c:23:82:15:d0:ee:34:bb:fe:
                    ed:7a:6e:7f:86:fe:5a:0f:6c:4f:f1:22:68:ff:a6:
                    bc:b5:68:89:76:c7:29:2c:ad:d0:03:db:f3:7d:d2:
                    20:eb:fc:ec:1c:62:14:df:aa:1e:34:a1:17:7f:56:
                    eb:45:90:fb:1f:41:03:bb:41:29:ef:f5:68:b2:77:
                    b9:3f:0f:30:e1:d6:52:ac:c8:69:f3:3a:30:80:cb:
                    23:0f:6b:04:a5:eb:c1:49:36:a3:04:b6:d8:b4:f9:
                    f0:b4:37:d2:9d:4c:89:a8:40:5e:57:83:3e:7d:31:
                    32:d9:fd:5a:fb:03:72:ad:19:ba:50:34:3f:6e:7f:
                    bc:6f:a4:91:8b:82:90:b6:64:94:ac:15:44:77:6f:
                    05:ec:1a:c7:4b:0a:48:cf:4a:a3:34:e5:9c:7d:90:
                    e5:64:a3:c2:5b:59:d1:07:d6:ca:b8:08:78:cb:9f:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6A:89:5E:BC:DB:99:89:09:81:41:BF:19:5A:DE:BE:62:A7:2F:BB
            X509v3 Authority Key Identifier:
                keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:c3:0b:22:28:f6:65:77:84:d9:83:b0:ff:ca:6a:21:69:
         65:78:ce:57:83:e5:16:2a:a3:4d:79:f7:a2:04:47:b2:b5:36:
         c4:41:08:b5:a5:b6:02:21:10:ed:fa:4d:94:d5:23:9c:9a:25:
         9c:28:e5:5e:ed:9c:c2:52:64:b1:10:f6:c1:8c:16:21:66:9a:
         72:ed:7e:21:cd:16:e1:2e:3f:f9:16:e0:69:ba:e4:b9:13:95:
         aa:32:31:ce:e1:d2:1f:be:af:58:4f:02:df:86:99:0c:08:13:
         6e:40:de:cc:d0:e7:d2:5a:d2:86:d9:4d:c3:4d:71:a0:5c:11:
         54:34:5f:31:53:61:e0:5f:b0:d6:e1:f2:19:c8:24:c1:0e:38:
         74:4a:81:18:df:b7:9b:53:8f:b4:49:4f:df:2b:ad:c8:12:53:
         f1:f8:08:75:a4:5f:e2:0f:9e:9a:55:5e:a1:19:11:96:b5:3c:
         12:c6:89:af:6c:4d:88:a8:f0:c3:54:ad:7d:60:9c:36:c2:87:
         cc:e1:e2:db:34:35:00:48:5a:c8:17:29:a8:f0:d6:f2:fe:30:
         50:35:e4:1a:5e:0e:37:4d:ea:3a:5f:e9:ba:30:9c:43:2e:0f:
         85:ca:a9:c0:91:57:6b:85:d4:6f:22:cc:87:bb:9e:65:54:97:
         7e:b0:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:20:56 2026 by rpki-client