Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File:                     iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier:          4IALrpwkTa9jf7J6H42nfAT/LhzKOhblH7Nb7XIyxow=
Subject key identifier:   CA:EE:B0:80:36:A3:95:B0:CE:8D:72:80:0B:00:98:16:67:FD:08:C2
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer:       /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number:          02E9
Signing time:             Wed 07 Oct 2026 01:21:55 +0000
Manifest this update:     Wed 07 Oct 2026 01:21:54 +0000
Manifest next update:     Wed 14 Oct 2026 01:21:54 +0000
Files and hashes:         1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: SXxJG7aNdVBxp+/B/bzb7jTxhkRcfsFKvtE7mSAub64=)
                          2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
        Validity
            Not Before: Oct  7 01:21:54 2026 GMT
            Not After : Oct 14 01:21:54 2026 GMT
        Subject: CN=6ac59eb3-5623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:0f:2c:dc:0d:a8:a4:5d:6e:8c:40:81:5d:
                    c5:36:1e:ea:ec:68:fd:ab:47:85:8c:49:24:dd:ae:
                    71:56:d6:c9:cd:98:f1:e5:4d:6f:60:f0:a0:99:18:
                    ec:86:67:ed:ff:6e:6e:9f:84:4b:44:f2:10:80:6f:
                    2f:60:c6:ba:3b:38:13:08:ab:f7:2d:ed:ea:d0:ab:
                    16:a2:b6:04:59:b7:46:cc:79:54:be:a4:2b:b0:bc:
                    ac:d3:6f:f4:17:b3:6c:c3:b3:5f:3c:87:3f:6a:84:
                    bd:8f:ff:69:e5:0f:84:a1:8e:fd:03:f8:ec:66:19:
                    e9:77:4d:b0:2f:ad:57:62:34:7f:6b:0b:32:d6:5f:
                    d1:cc:fd:23:63:d5:38:b3:12:7e:ec:51:8b:d8:2f:
                    23:b6:38:4b:e6:41:b5:9c:68:81:bd:c3:59:fa:91:
                    7f:c2:c9:96:d2:e3:0b:96:3a:ef:af:15:7f:04:17:
                    06:73:a9:5b:a3:71:bf:c2:dd:b0:a9:76:be:82:d1:
                    5e:53:ec:77:7c:5c:9f:32:59:b7:c8:96:e8:b8:46:
                    5b:c7:2a:72:34:da:1f:e7:bc:62:be:5f:50:3e:cd:
                    b6:02:d4:b6:60:e6:b4:e5:94:39:15:a4:25:7d:58:
                    50:a3:6f:5f:43:69:2b:9c:22:99:50:f1:4f:a2:b7:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:B0:80:36:A3:95:B0:CE:8D:72:80:0B:00:98:16:67:FD:08:C2
            X509v3 Authority Key Identifier:
                keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:5f:34:ab:24:d1:8e:4e:34:b2:8a:b7:04:be:bb:2f:65:
         fd:0c:bc:a1:cd:eb:9f:9c:82:1e:06:ca:27:47:c1:4b:fe:48:
         64:33:83:8b:5c:9d:50:1a:05:b2:59:0f:26:57:49:d7:a7:42:
         44:d7:66:99:d1:c4:bf:d7:16:87:26:4c:f1:e1:d2:25:3d:29:
         c9:8a:96:70:b6:cb:27:0e:d7:f5:f6:e6:7a:55:08:92:40:79:
         9d:b3:58:06:19:41:e2:ad:a6:44:c3:07:6c:2e:0a:f6:0e:f0:
         7f:cd:62:06:82:4a:bf:c3:90:00:79:97:c4:50:e7:f4:ca:ef:
         57:83:31:fc:97:91:22:38:eb:7a:28:b5:f7:d0:9d:54:48:ed:
         6c:9d:66:63:1a:07:84:0d:fc:eb:35:09:52:d9:46:dd:e5:aa:
         ae:8d:e8:d8:64:a3:37:aa:34:6a:09:76:0c:d9:96:5c:09:89:
         64:d4:6a:f3:25:8a:53:14:35:c4:b3:d0:cf:bd:65:80:6e:9b:
         5e:98:d5:0c:9c:33:f2:51:64:3d:c2:14:3d:34:6b:4f:b9:a1:
         79:a5:7a:13:aa:a8:49:0e:65:a1:bb:e0:11:ae:4c:a9:60:04:
         ee:72:84:9f:6f:00:6e:d5:79:30:af:01:df:10:6a:05:49:08:
         2d:b0:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:44:57 2026 by rpki-client