Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
File:                     iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json)
Hash identifier:          7u4DFwZX8f/YPjCjjM8YNWU4XZCeXKxWBh6DeAvY8kk=
Subject key identifier:   5A:A7:3D:AA:39:1C:D0:7F:AF:30:6D:B7:87:69:44:57:7C:E8:14:D8
Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD
Certificate issuer:       /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
Manifest number:          7E
Signing time:             Thu 03 Sep 2026 08:00:52 +0000
Manifest this update:     Thu 03 Sep 2026 08:00:52 +0000
Manifest next update:     Thu 10 Sep 2026 08:00:52 +0000
Files and hashes:         1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: gVLiqE9zWcOSVWaG0UCyVQgPx/iu8CBUrBtowTJCdnU=)
                          2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD
        Validity
            Not Before: Sep  3 08:00:52 2026 GMT
            Not After : Sep 10 08:00:52 2026 GMT
        Subject: CN=6a992934-8d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:b4:fd:ef:cf:9e:8b:c0:42:3c:c7:93:3f:
                    de:0f:f4:1a:43:4a:ac:aa:9a:88:36:93:c1:a7:87:
                    8e:61:2f:55:fd:58:c8:ba:e2:e1:c8:8f:3e:5d:31:
                    34:a0:54:4f:9f:40:ad:8b:71:b3:a2:c8:2d:23:73:
                    83:d7:fe:b4:f4:43:40:46:d0:16:45:72:d6:e6:1f:
                    59:8c:29:b8:54:5f:05:dd:85:30:00:18:54:13:41:
                    eb:f0:ad:13:71:30:ac:8d:96:4c:6c:2c:e0:9c:92:
                    5e:c8:9d:26:28:72:c4:6b:3a:79:48:8f:05:33:f3:
                    a9:af:7c:18:25:69:48:47:46:aa:f1:1b:04:71:bb:
                    8b:c8:d9:88:b6:d2:f3:bc:ac:9f:71:8f:3e:07:0d:
                    1c:35:a8:56:7a:99:36:5e:df:75:a9:3b:6a:85:9a:
                    63:87:a2:f7:5d:9f:5e:e6:40:68:c5:d6:e2:92:d2:
                    c2:70:3b:66:9c:d7:0c:fc:34:2d:5b:64:27:68:b4:
                    6a:94:95:5f:d2:cc:41:39:24:3f:ea:e7:99:68:d2:
                    43:c1:7a:bf:8f:cf:f4:d8:23:f5:a8:eb:e9:a6:db:
                    d8:8a:2f:a9:03:48:55:21:ed:71:12:e7:ff:d5:81:
                    c0:36:74:a4:17:71:a2:61:03:37:9a:3b:c6:01:5c:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:3D:AA:39:1C:D0:7F:AF:30:6D:B7:87:69:44:57:7C:E8:14:D8
            X509v3 Authority Key Identifier:
                keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:68:a4:3d:23:96:1f:bb:f6:00:59:09:39:7a:ca:eb:a3:
         58:af:52:be:19:0e:65:08:9f:9e:b4:f8:19:f0:9e:b7:ed:c0:
         f1:ff:fb:9a:0f:c9:87:07:32:88:cf:a3:d4:dc:7a:c9:55:3b:
         bf:23:42:6c:a3:a7:5b:26:c9:7b:07:70:e6:93:73:df:9c:f6:
         01:ee:d1:20:66:85:8c:f9:18:89:39:c7:04:d4:a3:9b:8a:a2:
         48:6c:38:2a:18:b5:86:2b:7c:e2:08:27:ab:51:ff:7e:6d:c9:
         fa:31:47:0e:cb:8f:34:ea:f7:c5:96:9b:39:72:13:ba:98:1c:
         66:d7:5d:f9:d0:de:d5:25:b3:f6:3e:4f:65:54:fa:c9:d5:50:
         1e:bb:ce:61:ee:dc:0e:9d:e6:f4:35:32:ec:b3:8b:b2:54:d9:
         1b:0c:2b:96:12:d2:5e:22:44:64:07:e3:65:bb:51:ad:6b:81:
         da:77:a2:c5:a4:f8:e3:6f:91:cc:f7:5f:d9:d1:84:3b:59:50:
         a6:35:a8:0a:ad:a6:fd:0a:d4:d5:07:3a:13:36:ac:a1:5c:28:
         3e:78:e0:17:9e:83:5d:10:26:27:13:78:13:b2:8c:75:06:ba:
         21:78:94:89:06:8e:ef:f9:67:df:29:cb:49:55:16:21:24:f0:
         e4:db:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:24:52 2026 by rpki-client