Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
File:                     iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json)
Hash identifier:          5adrethOmG3zYvYlVS1W/H1bA+o4A5P1eMQQZzCt8ww=
Subject key identifier:   74:43:D2:71:8D:56:67:9D:FE:FC:26:4A:93:E3:46:74:72:F2:EC:3A
Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70
Certificate issuer:       /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
Manifest number:          D4
Signing time:             Wed 07 Oct 2026 07:12:36 +0000
Manifest this update:     Wed 07 Oct 2026 07:12:36 +0000
Manifest next update:     Wed 14 Oct 2026 07:12:36 +0000
Files and hashes:         1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: 59y37VZ0h8vNPXApDimvS8xjv4Y8ABv3eX+mw1EkcJQ=)
                          2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70
        Validity
            Not Before: Oct  7 07:12:36 2026 GMT
            Not After : Oct 14 07:12:36 2026 GMT
        Subject: CN=6ac5f0e4-6988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:04:1d:68:b3:b8:ac:f5:58:e3:80:49:a9:
                    f0:5a:ce:67:02:38:ea:f0:d9:5b:e4:a7:9a:aa:be:
                    9c:02:a1:de:c0:29:44:ed:29:57:38:6e:49:6f:64:
                    a7:2c:26:38:e4:3d:9a:17:8d:89:76:51:1c:ef:ee:
                    b8:61:80:7c:cc:ca:b6:4f:e6:eb:47:45:dc:09:4c:
                    84:dc:ff:06:bf:7f:8e:1f:71:ff:4e:a1:90:dd:3c:
                    cf:1b:7a:7d:d0:ad:0e:8c:d3:39:3c:06:e9:8b:39:
                    5d:f3:a1:c5:28:6c:7e:0a:ae:b1:80:21:80:3d:ce:
                    d8:1f:a0:93:3f:bd:28:57:5d:aa:b0:9f:ee:0e:41:
                    3b:04:95:22:ac:62:9a:b6:6d:55:62:be:ec:38:8b:
                    61:9e:f3:26:6d:e5:87:eb:4c:e4:98:7b:0e:8f:d4:
                    e7:ca:f7:37:37:da:5c:62:7e:35:cf:1a:86:d4:e9:
                    4c:b3:dc:49:fb:dc:06:53:a8:c8:93:f2:e0:9e:7b:
                    08:7c:ad:1f:98:4c:6b:48:9e:dc:92:25:bd:7c:03:
                    c4:88:c4:fb:5b:36:bc:cd:74:69:fb:1a:ba:94:e5:
                    94:27:a5:6a:b5:c0:bc:d2:66:a2:e3:e3:84:b6:94:
                    fe:f3:22:02:67:91:33:d6:b7:ee:05:cb:62:a3:08:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:D2:71:8D:56:67:9D:FE:FC:26:4A:93:E3:46:74:72:F2:EC:3A
            X509v3 Authority Key Identifier:
                keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:e5:47:27:1c:98:a4:17:c4:00:3c:08:c7:e0:3a:f0:88:
         36:bc:7c:b9:67:59:bd:cc:79:5c:1d:9b:37:8a:8f:b4:dd:30:
         2c:0f:95:2a:16:e7:ec:31:36:24:cb:74:09:15:5b:21:ab:48:
         16:24:87:e0:a0:b6:e7:33:4b:1c:95:18:81:b5:25:fe:f1:10:
         0d:3a:a4:09:44:46:b6:57:71:2c:05:84:dd:ee:79:39:7c:1d:
         67:20:9c:b6:36:ac:32:c1:0c:af:3a:c6:73:af:48:81:0c:f6:
         df:41:3e:c7:ee:69:b0:45:6d:29:54:57:f1:43:1e:ff:f4:92:
         d8:af:33:74:11:46:97:50:5f:ac:37:18:08:5a:2e:5f:ce:b0:
         07:51:81:19:2b:3a:9f:3d:28:aa:c5:d5:7a:21:c4:e9:f9:cb:
         3f:6b:30:e3:31:83:49:56:6f:1d:6a:f7:6f:4b:e1:69:f4:4f:
         1d:b5:e4:1c:c2:42:d8:2f:12:cf:c0:65:3a:30:fd:04:16:e7:
         95:9d:9a:7c:ff:65:90:57:e1:a4:a8:be:1d:55:d7:9f:a9:98:
         57:9b:78:b8:1f:af:e2:5e:c3:7a:1a:a0:d0:f2:43:55:3c:7e:
         95:c4:db:1d:f1:1b:96:1f:a5:fb:c1:dc:16:53:2f:b2:31:a3:
         2f:f0:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:27:41 2026 by rpki-client