Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
File:                     IY_bC_-9DsQ8Nb53hZviztXFQOo.mft (raw, json)
Hash identifier:          kMcGrMgDwIKqFSpB7a/Laf3JlBhT/nR7HzJlU9CYFu4=
Subject key identifier:   3B:E0:25:BF:81:A4:E3:EC:06:AA:51:FA:35:15:7B:53:A0:AD:AD:19
Authority key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA
Certificate issuer:       /CN=A91CF477/serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
Manifest number:          25
Signing time:             Thu 03 Sep 2026 09:03:57 +0000
Manifest this update:     Thu 03 Sep 2026 09:03:56 +0000
Manifest next update:     Thu 10 Sep 2026 09:03:56 +0000
Files and hashes:         1: IY_bC_-9DsQ8Nb53hZviztXFQOo.crl (hash: vJZ9OEscqPiHv/moztvC5rvmknYW017WzxM1XJBE+Oc=)
                          2: BB05DCBA712511F1BDAC11CB6EA30FBC.roa (hash: P4GuX5ou/U+Rpw8seN62fuLfOYRcHVXRnnvShlDFcO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
        Validity
            Not Before: Sep  3 09:03:56 2026 GMT
            Not After : Sep 10 09:03:56 2026 GMT
        Subject: CN=6a9937fd-487f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:67:8c:cc:f1:1b:9a:f5:ee:65:43:13:54:
                    87:46:96:0a:9d:e1:b0:de:ce:0a:f0:6c:f3:fa:04:
                    81:11:f1:e9:c7:22:a6:60:ec:9d:55:76:a3:64:76:
                    a8:85:1a:1c:4b:72:c3:25:26:eb:74:44:d5:93:f6:
                    99:76:ca:7c:75:13:36:87:f2:67:83:bd:62:a6:a7:
                    0d:75:83:2a:6b:d4:fe:66:2d:17:ba:1a:d4:13:b8:
                    70:e6:bd:2d:11:5a:d7:b8:26:fc:d3:76:4f:d8:34:
                    b0:45:ac:2f:95:53:54:35:1e:5a:15:6d:e6:44:be:
                    89:a5:3e:d8:f3:f7:41:cd:5b:e1:b9:47:4a:aa:c3:
                    bd:d7:8b:5f:ad:a0:5e:87:39:b2:7e:38:d1:78:2c:
                    a2:22:ac:4b:16:4f:d4:42:fb:ec:64:ad:77:8a:bf:
                    9e:94:fd:d3:8b:7e:4d:ab:4a:fa:9e:d3:d8:bf:bf:
                    77:aa:ce:9b:22:d9:64:6c:e8:2a:d3:40:ba:c8:43:
                    09:3d:8a:7e:5f:10:0b:0f:18:e3:86:bf:b0:e2:03:
                    ca:bd:7d:af:b9:a8:eb:b8:63:60:bf:5c:7c:7f:0e:
                    97:61:95:73:d3:d0:ed:36:c1:f1:78:a3:7a:ce:93:
                    e4:88:7b:f4:b4:2b:92:d1:32:b0:1d:1b:b3:cc:48:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:25:BF:81:A4:E3:EC:06:AA:51:FA:35:15:7B:53:A0:AD:AD:19
            X509v3 Authority Key Identifier:
                keyid:21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:03:68:75:f5:cc:f5:b0:60:d3:22:d5:51:e8:d0:23:f5:d4:
         11:05:0a:22:11:ae:af:f7:b6:cc:05:0d:fc:f9:ed:07:8f:f5:
         a5:32:56:92:e1:c4:8b:86:a5:45:72:cd:fd:af:b3:2b:82:f6:
         7d:96:7a:99:be:c6:04:20:d9:80:dd:31:3a:03:92:00:e2:a8:
         89:5d:55:b5:21:b0:c0:2f:6b:f6:88:08:31:e9:05:81:e4:2e:
         9c:82:5c:4e:ea:48:e5:10:3c:fd:a6:98:2c:17:c3:26:49:2b:
         5f:bf:7f:96:23:90:36:b1:0f:af:3c:a8:8a:3e:74:b0:df:86:
         df:fe:ca:5a:c5:77:68:af:82:7b:46:ed:1f:3d:a4:be:c3:f9:
         73:d6:20:82:95:e2:c0:32:3a:e2:7c:e8:99:60:25:79:f8:35:
         e6:f3:01:ae:8a:73:15:41:d3:cf:cd:2a:18:2b:65:8c:eb:21:
         46:87:94:5a:7a:1f:f2:a4:b9:82:cb:f2:89:b6:ab:43:72:2a:
         1f:fb:6c:88:68:b6:cd:c2:60:30:1e:23:53:2e:3a:16:27:e7:
         66:d0:e5:5e:e4:88:61:91:21:0b:ce:a4:2c:d3:f4:13:3f:16:
         00:2a:e2:52:8a:40:8d:89:0c:b2:c1:fa:32:4f:7f:e1:dc:8c:
         b3:5b:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:18:44 2026 by rpki-client