Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          ydM/79u0iIGVGnhQQ4+rrlyO5Vvp6k6cVI2JiOhN+wE=
Subject key identifier:   B8:C0:B4:B9:8C:09:28:84:A1:F4:5E:F8:ED:1E:71:FF:53:41:A2:D9
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       286A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          27FA
Signing time:             Fri 04 Sep 2026 15:36:55 +0000
Manifest this update:     Fri 04 Sep 2026 15:36:55 +0000
Manifest next update:     Fri 11 Sep 2026 15:36:55 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: cRFLTpae4e2W8xzNt0sIYVWexoDkYje8YF0LoyAQRZI=)
                          2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          3: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
                          5: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: 7d89IoO7oSE4BWIA1+3nLNGX3bTaRyu/ngtSyVYUEVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10346 (0x286a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Sep  4 15:36:55 2026 GMT
            Not After : Sep 11 15:36:55 2026 GMT
        Subject: CN=6a9ae597-858b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:14:ef:5b:13:f3:2f:1f:c2:7a:a3:68:22:
                    48:06:23:a2:f2:fa:ff:43:90:66:c2:48:2d:e9:18:
                    fc:51:a9:76:77:55:9d:22:46:51:8e:15:bf:e2:02:
                    98:74:a9:fa:79:d5:f6:c5:60:37:f1:cf:0f:01:00:
                    65:84:70:03:7c:31:c0:5a:35:7d:c3:9b:d6:de:80:
                    83:d4:bf:87:4d:c7:91:bf:ea:f4:91:4a:0f:82:4f:
                    be:ee:3d:0d:18:21:07:bd:c3:ba:bc:dd:e1:ef:dd:
                    e1:c0:ba:30:84:42:07:2e:16:7d:86:26:2a:39:8a:
                    0a:37:fa:1e:59:fa:78:6b:08:ef:74:80:87:bf:64:
                    1e:6c:3a:7d:df:f1:b0:66:82:8e:5f:59:25:db:99:
                    fa:7e:ef:32:67:90:6b:e5:5b:8b:b5:89:36:bd:14:
                    67:e3:ff:b5:61:f1:a3:33:3e:2d:c7:6f:7f:5f:c6:
                    5d:95:56:bf:c5:aa:84:97:42:53:79:70:f5:68:86:
                    67:bc:1e:90:0b:9a:fd:ae:09:9b:5d:e2:0b:f0:c9:
                    f7:31:9f:43:3d:ec:fa:a9:22:b9:cd:81:5b:0c:26:
                    b6:bf:0c:4c:fa:ea:93:be:c5:13:30:04:af:d2:74:
                    38:f9:f8:b6:f3:5c:73:36:65:bb:9e:29:30:7a:17:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C0:B4:B9:8C:09:28:84:A1:F4:5E:F8:ED:1E:71:FF:53:41:A2:D9
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:90:02:76:27:61:1e:34:2f:06:66:60:e2:41:e4:b4:34:
         10:52:aa:bd:f6:00:18:fe:22:50:0c:0d:37:94:40:7e:36:6c:
         eb:ed:bb:1f:90:74:04:f8:e4:02:48:8c:76:c9:17:f5:6b:29:
         1e:9e:f8:c8:c3:8b:6c:cd:6f:2e:85:e2:fd:f6:c9:30:e1:4f:
         3b:93:74:2c:c1:83:94:55:cc:2d:ad:7f:42:24:3b:90:65:aa:
         21:cc:34:ed:30:22:af:26:dd:43:28:4d:b7:72:1f:9f:5a:13:
         44:85:cf:89:00:6f:07:7f:e2:bd:8c:d0:91:a7:ec:c7:96:c6:
         be:b4:3c:c0:36:4f:db:79:5d:64:9c:f4:1b:36:30:80:94:72:
         3d:25:47:b6:68:4c:76:05:28:ed:85:21:1d:4d:71:1c:92:10:
         86:2f:53:09:3e:7b:d0:39:c3:ea:37:a8:ac:bb:b6:d3:12:7b:
         52:55:82:16:4c:63:87:2c:c6:56:7e:4f:74:d7:33:f7:fa:50:
         fb:41:43:53:b0:70:de:fa:ad:75:8a:8d:3c:11:7d:40:87:23:
         c2:6b:c4:d6:cb:ef:da:44:3a:32:5c:8c:4f:1c:d8:28:60:79:
         43:60:1e:e8:a0:a1:55:a8:e1:1f:ca:7d:da:c5:fa:95:5e:b6:
         75:60:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:25 2026 by rpki-client