Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File:                     i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier:          KbCJNH3Q3qdbV/sMs0fTv6IuRDl/BdyEHqBOHzhZgO8=
Subject key identifier:   F9:57:85:1C:24:35:32:C2:20:1A:AA:D3:0B:5B:30:F8:5B:B8:72:B0
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer:       /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial:       0854
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number:          0843
Signing time:             Tue 04 Aug 2026 21:22:05 +0000
Manifest this update:     Tue 04 Aug 2026 21:22:05 +0000
Manifest next update:     Tue 11 Aug 2026 21:22:05 +0000
Files and hashes:         1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: 0xMaB8n7ATIEZ4VgZVdhHm2Khfbts1IdynFO1ap5nBI=)
                          2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: C86QSzMPJfidhhZAtCALwlPi6LGTUSBetHOGRrIMSeU=)
                          3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: Gqr5gUPYx0CJyOxSeCXlqpQBiTSLSQ6IJMBMylryXzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
                          rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 21:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132 (0x854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
        Validity
            Not Before: Aug  4 21:22:05 2026 GMT
            Not After : Aug 11 21:22:05 2026 GMT
        Subject: CN=6a7257fd-0757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:80:49:b8:a5:c7:4e:14:06:54:f1:f3:a3:
                    9b:b5:1d:b4:eb:71:a3:e6:eb:2d:05:75:f6:89:fa:
                    e5:bf:aa:8e:78:10:2e:70:b2:13:ac:42:fa:03:0d:
                    41:fe:f3:fa:95:92:ec:3b:bc:3a:74:82:a0:e8:36:
                    11:55:59:96:03:2b:4d:d7:be:b1:68:83:67:87:13:
                    d5:d6:d6:79:2e:0a:a4:5c:ae:1c:b7:ae:65:f8:72:
                    ed:75:4c:bd:c3:ef:7d:25:67:62:0c:72:58:93:2d:
                    00:75:7d:d1:b4:df:19:22:14:d0:bd:4a:a8:37:ae:
                    7d:28:07:ce:63:5e:78:b5:cb:43:b0:4c:96:c1:90:
                    40:4b:06:08:33:5b:73:38:a7:0a:6c:8c:82:4b:70:
                    d6:ae:e6:04:34:9c:60:21:01:79:25:7a:f7:6d:e5:
                    db:9d:f0:90:14:76:d6:e8:49:52:0f:68:47:4f:17:
                    a2:63:51:e1:0e:17:a9:c4:26:07:e9:be:ae:54:05:
                    0a:44:25:d0:7e:e6:ef:df:48:a9:34:53:44:bd:4e:
                    b3:41:17:36:84:a5:26:15:8f:e2:e9:30:65:87:c4:
                    a0:87:1c:e6:4b:87:70:f9:9d:9c:7f:2f:98:37:56:
                    7d:9f:33:f3:a4:82:a9:3c:32:97:01:0b:89:aa:9e:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:57:85:1C:24:35:32:C2:20:1A:AA:D3:0B:5B:30:F8:5B:B8:72:B0
            X509v3 Authority Key Identifier:
                keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:46:30:02:a7:64:c6:a3:93:91:87:1c:ee:d5:69:31:f0:
         55:52:30:6b:f3:37:55:e2:df:2e:3a:bb:9a:e1:79:83:2f:ca:
         d8:35:dc:4c:b0:21:3b:1c:7c:3b:34:57:56:2b:63:2d:fc:22:
         85:9c:d9:70:62:9d:9c:95:c3:ef:3b:77:fc:05:39:10:6d:81:
         6b:04:12:48:9c:df:2e:91:4b:fe:d4:24:31:bc:01:46:4a:be:
         f7:a4:6e:c8:71:97:8f:ae:16:d0:4b:d0:e4:71:1f:1a:4b:5d:
         7a:55:17:bc:56:03:f5:15:0b:5f:8a:9e:bf:8a:0c:2b:0c:90:
         b3:45:0c:9d:dc:12:a4:de:2a:98:b7:f6:2e:30:90:9f:a7:95:
         a0:6d:0f:42:9d:5c:de:a1:9b:46:a5:ed:a3:b7:45:32:47:c7:
         fc:79:4a:c6:9a:cc:df:b0:8e:e2:62:af:09:63:a3:ea:b6:27:
         57:9b:fd:26:ea:b4:dc:fb:a7:a9:0b:7d:9b:e9:70:22:19:c5:
         c1:af:e7:e3:42:ae:bb:d9:d1:61:a8:e9:0a:89:c6:32:9b:e3:
         6a:87:d4:dd:35:61:64:d1:2f:fe:0f:72:1f:f1:79:ee:4a:d8:
         70:ac:de:bc:43:20:cb:1b:07:89:ee:f6:5e:8d:5a:63:0a:ac:
         22:bd:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 04:05:57 2026 by rpki-client