Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File:                     iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier:          RSwe+x/3ekEO6GZDy0WmQuDLihF8YSj5DKW3fGVt2M0=
Subject key identifier:   81:C3:C0:EE:39:56:2F:88:86:39:EF:81:8A:F4:71:89:A3:19:1A:65
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer:       /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial:       0C9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number:          0C8F
Signing time:             Sat 04 Apr 2026 18:24:08 +0000
Manifest this update:     Sat 04 Apr 2026 18:24:08 +0000
Manifest next update:     Sat 11 Apr 2026 18:24:08 +0000
Files and hashes:         1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: gBOdjhNwhehCt94T1lEB0UAE/5PbDE8q0nTZ4zQXi+w=)
                          2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ulVwpupTnSQGj93CteWzU9AxM16id4m9AwfIdwmeXW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
                          rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3227 (0xc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
        Validity
            Not Before: Apr  4 18:24:08 2026 GMT
            Not After : Apr 11 18:24:08 2026 GMT
        Subject: CN=69d15748-5df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:3d:50:69:9f:04:f4:5c:85:f0:6f:c4:ed:
                    02:fb:97:14:58:dd:30:01:a6:37:05:6d:e4:6a:87:
                    ec:4a:21:dd:57:2e:28:2b:2b:da:61:f9:cb:65:40:
                    13:14:ed:af:d7:08:db:26:df:ae:90:1d:03:c9:6e:
                    59:3a:68:37:8b:0a:61:ff:62:17:d2:55:2b:6f:c0:
                    03:9e:b3:c9:a2:4c:d0:11:67:08:8b:92:7a:c5:7d:
                    c6:7f:0b:27:72:26:59:80:cd:74:5a:af:50:41:c8:
                    56:80:a6:65:db:4f:33:6f:aa:a0:ec:c0:85:8c:68:
                    f4:4e:18:eb:7c:8c:1d:7d:97:9d:56:79:a6:19:47:
                    6a:37:19:a5:65:b9:98:41:3e:e2:11:e1:5b:aa:41:
                    45:83:af:8e:69:04:e1:85:0f:46:79:c1:74:87:45:
                    ff:22:a8:bd:ef:df:23:ec:80:a5:e4:ae:7d:d5:52:
                    37:4c:ee:9b:c8:b8:f0:77:a1:68:67:4a:e0:ba:48:
                    4d:cc:a2:bd:c1:e7:e2:8c:4c:a8:8e:a7:1f:b9:89:
                    40:12:a4:52:02:a0:aa:74:c3:2f:4e:2e:6c:44:04:
                    5a:81:26:17:ed:48:7d:a0:2d:f3:36:e9:d8:3d:15:
                    b4:74:f5:10:3f:ea:c0:8e:e9:3d:04:89:5e:da:da:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C3:C0:EE:39:56:2F:88:86:39:EF:81:8A:F4:71:89:A3:19:1A:65
            X509v3 Authority Key Identifier:
                keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:4e:91:a9:dc:13:aa:a1:df:0d:df:2b:da:65:8d:c9:90:6e:
         43:65:fd:87:4f:f1:93:6a:59:0b:2c:7d:b9:77:df:c0:82:b2:
         a6:74:74:7c:d4:e9:3e:c5:29:2b:13:5b:f0:82:21:84:96:77:
         e2:d9:22:90:86:f2:6b:7d:03:47:9c:34:13:9b:82:71:00:e4:
         db:46:f8:14:45:80:14:94:94:a7:50:d6:3c:f3:ae:1c:ce:13:
         16:d8:bb:41:0e:52:df:71:d5:22:16:87:3f:2b:5d:81:6d:d1:
         bd:a2:38:f1:be:c9:7a:72:94:d5:3f:ce:60:59:31:dd:83:89:
         53:a8:6b:f3:05:ea:78:14:2c:81:9f:2d:7b:7f:02:31:96:e9:
         02:52:a0:9d:c2:67:58:03:5c:65:cf:d7:5c:4a:c2:b0:22:19:
         86:5c:5f:00:c5:73:a5:76:3b:af:41:a2:81:a5:ed:db:db:38:
         aa:63:a0:9e:3e:a9:b7:5c:3a:83:a3:c5:b8:cd:78:b8:dd:03:
         2c:cd:a4:80:b2:c5:0f:6e:89:ee:6f:a2:f3:f0:52:30:2e:a5:
         60:a7:57:31:16:f3:6c:64:64:24:3b:48:d2:42:30:37:8b:89:
         ae:a5:a8:dd:65:23:f9:49:0c:eb:34:17:15:3b:52:c3:5e:28:
         b2:11:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:25:42 2026 by rpki-client