Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File:                     IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier:          G3CW05LXuaeEU9VkP/iUXY9Ij+icauHvOKg3wiM84ZI=
Subject key identifier:   2A:56:BD:9A:AD:B1:21:11:CC:FA:FE:9A:B4:58:1A:DB:F7:90:D5:26
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer:       /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number:          084A
Signing time:             Tue 06 Oct 2026 21:09:14 +0000
Manifest this update:     Tue 06 Oct 2026 21:09:14 +0000
Manifest next update:     Tue 13 Oct 2026 21:09:14 +0000
Files and hashes:         1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: xvzw+/2ZoPrGu9kcofNZRSHUUvNxH+ZRpbK2az6uhhk=)
                          2: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: 9YsIlIllhbjKELWofqw1jKbJ9ZMkFk/KGAHeyjk+MvM=)
                          3: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: dGQ2Shga7JyItz/gX367HOAIx3zB2wdadpgo2oiYCAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
                          rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
        Validity
            Not Before: Oct  6 21:09:14 2026 GMT
            Not After : Oct 13 21:09:14 2026 GMT
        Subject: CN=6ac5637a-b1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:65:64:c1:63:74:7b:10:46:99:1f:60:c1:
                    78:b0:d2:1a:0c:9f:fc:78:b5:19:75:55:15:f9:eb:
                    07:a9:2c:1d:cc:9a:75:c4:6f:a8:6e:77:5e:8e:74:
                    41:f9:1b:87:75:c5:69:42:a4:60:6f:bc:40:1c:f6:
                    13:c9:a8:d1:2b:5f:5c:48:d7:fc:4e:17:7b:3e:7c:
                    c9:04:73:69:5f:46:37:66:62:89:34:d6:ee:44:e0:
                    ec:2d:10:b0:7f:1d:5e:5c:27:29:3e:99:47:b0:c8:
                    7d:cf:0a:c9:c9:a6:bc:67:92:a0:00:43:e0:d2:59:
                    cf:05:a0:f3:bf:ea:63:23:84:18:57:76:12:61:cd:
                    24:77:c1:73:20:01:db:cd:1e:65:c7:61:78:41:69:
                    96:c0:d7:0d:aa:67:6c:b7:04:ca:c9:63:30:80:5d:
                    14:9b:06:18:0c:c7:f6:ff:fd:2e:88:95:ed:e4:eb:
                    44:85:41:f9:b5:e3:bb:ce:9c:16:12:45:f9:87:63:
                    b4:ac:25:a5:48:6c:7c:fc:62:af:0e:ac:b9:87:3b:
                    02:0b:ab:55:75:e2:82:6c:67:d9:91:32:86:45:17:
                    83:5c:7e:fa:8c:56:6c:dc:13:87:c4:9b:ec:ec:1f:
                    57:ef:5c:68:00:8d:25:be:f5:ca:ec:5d:e1:10:db:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:BD:9A:AD:B1:21:11:CC:FA:FE:9A:B4:58:1A:DB:F7:90:D5:26
            X509v3 Authority Key Identifier:
                keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:8d:a3:7b:40:96:33:8c:b2:fc:a1:fd:36:44:86:9f:b3:
         fb:34:2a:18:25:05:b7:c1:ed:0f:ef:ae:00:cb:73:ff:f1:f3:
         37:43:73:59:27:06:f5:8c:2d:9a:c6:61:78:cb:e1:54:da:e0:
         e4:37:96:7c:c3:99:48:ad:06:f5:a9:ec:ad:9c:9f:c8:52:46:
         b0:2a:99:c6:eb:8b:c7:21:e9:a0:08:52:f8:c6:85:4f:c1:cb:
         3d:e6:a5:9c:22:bc:b4:02:d5:38:74:76:93:41:19:d1:d4:1b:
         c4:b7:a3:ee:51:5b:0a:40:78:3e:00:be:56:77:27:00:2f:80:
         ba:07:0b:4a:0f:a9:e1:26:78:6a:20:c2:bb:8d:09:ab:9e:6d:
         b4:c8:b1:52:7d:65:c0:27:c3:4d:a2:65:bd:62:56:a6:db:99:
         03:17:ff:f8:05:89:42:60:a8:be:50:8c:b6:ec:78:96:64:99:
         d4:9c:3d:c6:56:f9:8d:01:88:63:5c:6d:72:cd:0d:b0:10:ca:
         1a:93:83:58:af:9c:3a:83:3a:70:b4:6b:07:8e:9e:41:fc:58:
         2e:08:f9:d8:98:69:24:37:16:a2:15:86:87:62:a2:bf:bc:ab:
         3a:c9:3f:23:7e:6a:11:30:fe:49:a1:44:4a:ad:8a:cd:f6:66:
         89:d4:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:29:29 2026 by rpki-client