Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
File:                     ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json)
Hash identifier:          SfkomlwGoX39JBa+tRnXO8diznsvSHaUp8pLYwCK7Fk=
Subject key identifier:   6B:ED:F5:AF:24:B5:3F:23:6C:40:D3:99:66:61:FB:BF:43:07:B1:BF
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
Manifest number:          0604
Signing time:             Sun 20 Sep 2026 22:48:37 +0000
Manifest this update:     Sun 20 Sep 2026 22:48:36 +0000
Manifest next update:     Sun 27 Sep 2026 22:48:36 +0000
Files and hashes:         1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: H5K7HqPdRVGmD8Y3gCLW9yhay3w11fGaSwzocbsS100=)
                          2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: qarwsQJsRpCWHG6vFh1YjS9Lj8uPb2xBWzU12A9C+KA=)
                          3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: FQawum2eNxdcpBq3F26HS+tVhfZE9PWendAn/iVAyx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Sep 20 22:48:36 2026 GMT
            Not After : Sep 27 22:48:36 2026 GMT
        Subject: CN=6ab062c5-1f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:3b:b8:ce:39:66:29:9a:3b:6e:dd:81:0d:
                    79:f6:c5:07:4d:75:98:d6:22:a7:97:a9:a5:e7:1e:
                    c4:9f:28:7b:1d:a3:95:5e:d7:fd:76:dc:9b:82:e9:
                    21:2b:43:5b:03:39:ae:ee:d7:39:4b:ae:7a:cf:d2:
                    fb:c4:fe:da:3e:fd:74:84:bd:7c:12:a5:23:7c:b5:
                    60:3e:02:a2:ba:52:c3:4b:4c:3f:7d:e3:2e:40:42:
                    d0:8b:4f:fd:93:23:ae:63:d3:c9:25:a5:bb:8f:d9:
                    b4:9c:9b:80:cb:96:8a:6e:6f:d3:f0:57:77:91:67:
                    68:03:96:93:c1:37:7b:a3:d3:3c:b4:22:df:d8:3c:
                    75:53:47:61:52:13:79:32:68:88:68:a7:9b:20:96:
                    e6:11:ad:4f:75:09:b9:1f:1d:a2:33:f1:ab:d8:f5:
                    ba:9d:28:87:01:62:06:a3:c2:18:94:dd:43:b9:3b:
                    22:9f:0f:98:fa:98:f9:d2:1d:fe:a2:bd:af:a2:ce:
                    4a:9e:08:72:de:82:93:47:9a:fc:2a:6a:5d:bb:8f:
                    be:e6:b1:a1:30:43:df:98:dc:4d:d6:33:a4:4d:c1:
                    c3:c3:0f:95:ea:38:56:74:66:8e:ae:88:4b:48:3c:
                    44:a3:1f:6f:57:d6:43:56:45:5e:59:cd:46:16:dd:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:F5:AF:24:B5:3F:23:6C:40:D3:99:66:61:FB:BF:43:07:B1:BF
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e2:cf:a4:66:65:6e:93:28:79:9b:5a:81:be:87:ac:0b:85:
         28:76:1a:8c:13:49:83:e8:69:a5:11:c0:77:ec:16:c3:38:8c:
         5b:88:07:47:6f:3a:dc:e5:50:ce:d0:1f:6f:12:ab:cf:76:75:
         3d:58:40:f6:94:cb:ba:08:df:25:47:89:f9:1d:28:79:12:2f:
         a6:43:ea:72:20:9a:23:53:0b:8c:fd:c6:b2:77:c8:be:e1:e9:
         7a:15:08:82:67:1c:48:fb:42:03:23:f7:28:24:15:44:dc:75:
         5f:a6:fd:c4:d3:5b:cd:bb:1a:ab:4f:7b:08:50:95:5e:47:1c:
         a5:75:fc:80:b8:35:bc:83:35:18:c9:df:fb:90:6b:57:61:a4:
         93:c6:24:50:df:49:dc:d7:52:8e:f7:e5:a3:f0:75:43:75:20:
         bc:7f:1f:f1:61:6a:96:ef:02:f5:5f:1d:5f:82:52:c0:d5:db:
         6b:90:15:5b:de:8f:f9:67:bf:ea:9b:3d:01:2f:c1:9b:be:ed:
         26:21:ca:b8:b8:4a:9c:fc:18:82:2e:d0:7a:3b:f3:e3:0c:c5:
         eb:8e:ec:d6:46:c4:f6:f0:1f:f7:b9:e1:2b:fc:70:1c:0b:8c:
         f4:2c:ad:85:48:c7:d5:24:ec:f2:50:fb:2d:3c:11:02:56:80:
         05:50:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:00:43 2026 by rpki-client