Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File:                     iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier:          i01FtMsWK6T10bErLVt/FGfdcUWi1PpSOWX7Viw+KJQ=
Subject key identifier:   87:AC:71:2E:BF:F2:50:C8:42:B9:64:54:2D:D2:AD:71:54:82:5E:01
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer:       /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial:       0D05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number:          0CF8
Signing time:             Sat 24 Oct 2026 18:23:59 +0000
Manifest this update:     Sat 24 Oct 2026 18:23:58 +0000
Manifest next update:     Sat 31 Oct 2026 18:23:58 +0000
Files and hashes:         1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: r51tQKb4jxogy7sXVwvelEjRPmjo+Miyd8EDqOIRIAI=)
                          2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: eNztU7B/7IHFo3dG2XOoFvu10+Q6T/lvArVNNYIftfU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
                          rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
        Validity
            Not Before: Oct 24 18:23:58 2026 GMT
            Not After : Oct 31 18:23:58 2026 GMT
        Subject: CN=6adcf7bf-291d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:ef:cd:29:75:97:73:4d:0c:23:71:a1:87:
                    c1:a1:dd:f1:e3:00:da:f3:67:d6:a7:f6:94:fe:43:
                    6b:1f:77:ac:62:d9:c4:b8:b2:80:c2:38:af:f2:a5:
                    3c:59:4e:35:c4:c8:5e:c6:15:63:ba:43:f2:57:ca:
                    45:c9:57:cd:1c:d4:3f:c0:fa:08:ba:89:09:da:4b:
                    36:99:bf:6f:5a:d9:77:98:66:5d:ab:74:6e:cf:f9:
                    ff:53:89:b8:1d:eb:ec:fc:6a:4b:19:f0:3f:cb:65:
                    ab:04:f7:06:de:64:5a:09:6c:3d:6d:8e:ea:89:c5:
                    ae:b7:37:83:dd:fc:0d:4b:d0:52:f9:07:55:b8:ff:
                    2a:4e:0e:f6:1b:85:19:47:fe:62:71:6b:ee:c0:fe:
                    1d:fe:f5:90:a4:11:68:95:0a:61:d8:7d:51:8c:53:
                    1e:b5:93:ab:ac:1c:88:d5:8e:0c:4d:1c:b8:ba:77:
                    99:3d:b5:8b:9d:ee:d3:85:05:f3:f9:58:b2:95:80:
                    7a:34:6b:cd:9f:f5:9d:b5:41:a9:e0:c6:28:50:50:
                    55:1b:bb:85:66:27:46:22:ea:ab:7f:44:0d:25:ca:
                    15:97:7c:51:c0:1a:cd:57:fb:12:4d:c5:17:04:92:
                    c7:46:64:37:1a:a9:6d:5b:9f:22:15:24:53:e2:13:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AC:71:2E:BF:F2:50:C8:42:B9:64:54:2D:D2:AD:71:54:82:5E:01
            X509v3 Authority Key Identifier:
                keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:86:f3:f5:28:6f:1e:16:ed:aa:26:c4:a3:94:43:4b:e1:b6:
         c0:26:dc:11:3d:14:9e:71:a7:55:76:7b:8d:4e:2a:db:e6:13:
         04:58:88:24:c6:8b:64:1e:16:ce:15:5f:aa:d3:4b:ea:54:45:
         e3:92:20:12:f2:c9:c2:45:46:be:2a:47:f7:e0:cd:b2:c6:21:
         19:17:01:2b:2a:34:26:98:79:1e:a4:08:ff:28:11:fa:53:5b:
         d7:de:ec:05:94:42:5e:3d:bf:3a:09:55:a1:72:66:9f:06:c8:
         5c:6a:be:81:d5:58:9b:b6:6e:5b:32:bd:6f:eb:86:28:09:41:
         de:0c:d5:4f:fc:d1:39:f9:6a:0f:fc:98:ac:cf:e8:08:51:45:
         9c:56:ea:fa:c2:ed:f0:16:92:60:03:bc:48:f9:d5:4d:28:24:
         b1:51:3d:27:a0:b0:66:84:b8:f4:47:35:3a:fd:c2:48:7b:ac:
         af:61:d2:df:5b:29:80:8d:50:9b:10:41:43:97:65:fd:32:f8:
         d3:b3:d2:07:fe:17:d9:99:dc:48:e5:84:92:7d:d8:92:38:e7:
         00:d3:5f:62:6d:d9:2a:38:a1:79:e8:19:5d:04:3c:7b:b9:15:
         38:fe:61:3d:76:f3:05:76:59:97:cb:f0:43:0a:e4:2f:c3:11:
         35:d9:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:05:29 2026 by rpki-client