Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
File:                     iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json)
Hash identifier:          XAD3FgVPqcdakUiyjx7V2tnvd4FJNd5SNHk160Ma2F8=
Subject key identifier:   D3:DA:AD:5C:CE:59:50:1C:00:74:37:6A:BB:14:5A:DA:21:5A:20:23
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Certificate issuer:       /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
Manifest number:          02C8
Signing time:             Sat 03 Oct 2026 01:55:06 +0000
Manifest this update:     Sat 03 Oct 2026 01:55:05 +0000
Manifest next update:     Sat 10 Oct 2026 01:55:05 +0000
Files and hashes:         1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: rK8F0cRqJHxRh8RcIoiflyynFBE7t605FfJQ4dGGttk=)
                          2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: w4+i2AFQCp0fSfDJ3CNv6OBjIpm8hWm9Zpmlr/vwCHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
        Validity
            Not Before: Oct  3 01:55:05 2026 GMT
            Not After : Oct 10 01:55:05 2026 GMT
        Subject: CN=6ac0607a-168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:a5:02:49:70:7f:dc:8c:96:d5:87:54:b9:
                    00:0e:16:5a:a9:7c:57:4c:cd:9c:68:93:14:08:d9:
                    5a:9d:b4:ed:66:d6:43:06:58:37:e8:f2:39:7d:87:
                    15:83:84:a0:c1:af:3c:0f:42:56:95:ee:1f:d8:05:
                    45:cb:26:e2:5c:8c:35:8c:c2:a3:60:a8:dc:65:be:
                    e9:d4:7e:36:6d:2c:90:a4:df:f7:db:c0:d1:78:66:
                    2b:f7:3d:f4:92:d1:99:a4:aa:d5:19:0b:2c:c5:aa:
                    23:32:c5:5d:b2:2c:5a:6a:8e:dd:e9:9a:c7:b9:02:
                    be:6a:60:32:a2:24:c2:6f:fd:9e:1e:2d:5f:44:71:
                    4e:8f:7d:5e:65:a9:62:8f:d0:af:d0:a4:3d:1b:bd:
                    8d:8b:94:e5:0b:4b:b4:d5:5f:f8:e0:4e:b5:bd:dd:
                    0a:02:be:4f:01:43:68:c8:a4:27:2d:47:96:1f:37:
                    cb:a5:a2:8f:ae:3c:13:a9:75:16:b4:69:46:96:7d:
                    fd:52:d3:ed:25:d0:71:44:34:4f:54:9e:03:22:34:
                    00:f7:46:14:7d:81:8b:2a:d8:d5:a0:ef:f0:cd:b8:
                    e3:42:e6:c9:f2:f3:fa:48:d3:8d:d0:7e:99:a5:12:
                    1c:1c:92:b8:61:98:8b:b9:a6:37:a7:70:c5:4a:24:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DA:AD:5C:CE:59:50:1C:00:74:37:6A:BB:14:5A:DA:21:5A:20:23
            X509v3 Authority Key Identifier:
                keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:e7:b4:3c:24:32:03:3d:bc:9c:d0:19:2e:c3:d3:f4:fb:
         31:0d:e5:a6:16:c4:2f:d6:9d:0d:24:87:e0:89:99:0e:7a:d0:
         4f:2d:e4:20:6f:64:14:d0:1d:e5:79:38:65:79:de:0c:d2:83:
         f5:07:3e:70:16:17:60:cc:50:6c:6e:1a:33:04:92:1b:1a:dd:
         10:b1:13:e0:6b:4d:aa:8a:83:fd:e9:7f:63:dc:82:ad:c9:93:
         bd:9d:1e:35:cb:4f:9b:a7:ce:83:67:de:62:fa:ff:b5:d0:d7:
         41:1c:15:e7:6c:db:52:60:dc:4d:ae:7c:cf:69:c6:dd:b3:d4:
         9d:2e:43:23:d2:b9:c8:34:4d:6d:86:f4:ce:ea:81:42:75:f1:
         d0:c4:5a:eb:35:b6:38:2f:94:24:01:39:32:8a:65:a5:1e:aa:
         df:e8:87:ae:fa:1d:f5:3a:ab:90:bd:4a:9b:e3:c8:88:db:3f:
         a0:ee:65:b8:e5:42:59:dc:8d:8e:4c:d7:b1:cf:b0:1f:63:af:
         8b:99:98:86:ee:47:77:4e:7c:26:de:b5:91:2d:20:bb:75:10:
         b9:fd:ef:58:4d:72:c4:a8:56:20:02:6b:69:4a:24:1a:19:96:
         17:e4:55:7d:15:09:e1:10:92:95:09:99:64:90:94:7e:15:ef:
         0a:a8:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:21 2026 by rpki-client