Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
File:                     IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft (raw, json)
Hash identifier:          reHg+dZLqnYJ8eCt8zP6ECpK+f4EwanmSGM8Kyg2miw=
Subject key identifier:   8B:2E:D0:10:3C:01:AF:71:96:27:D8:97:C3:41:30:2C:DC:A4:D7:BE
Authority key identifier: 22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77
Certificate issuer:       /CN=A9183249/serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
Manifest number:          5A
Signing time:             Sun 11 Oct 2026 08:46:55 +0000
Manifest this update:     Sun 11 Oct 2026 08:46:55 +0000
Manifest next update:     Sun 18 Oct 2026 08:46:55 +0000
Files and hashes:         1: IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl (hash: 7BP6n9e4vdE50k1mYSFY1tLFZ8S2jBT0I1puJqXpz6E=)
                          2: E90334323E1711F1872CBF7AB0833773.roa (hash: gfbEk0OCCthmwoLDtfzliRliBz11gfjCRa7Rca3Cfko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl
                          rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183249, serialNumber=22C2916796B73287CEC90C3507B1C59FF7758877
        Validity
            Not Before: Oct 11 08:46:55 2026 GMT
            Not After : Oct 18 08:46:55 2026 GMT
        Subject: CN=6acb4cff-ae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:c5:25:0e:8f:b6:a4:88:16:38:61:c6:4e:
                    a3:21:09:4a:3b:44:59:66:7d:87:10:07:a8:c1:59:
                    4d:0a:49:d9:81:2a:0f:da:88:57:a2:c5:12:be:02:
                    63:5a:75:b0:bb:6d:11:8d:52:31:0d:56:5e:55:3b:
                    26:62:46:66:6b:de:b0:50:1c:f6:e4:1c:21:bc:d9:
                    a3:28:1e:dc:e1:e9:2a:a9:1d:10:b3:67:e5:45:11:
                    ee:04:6e:7d:eb:cc:42:75:59:ab:69:e8:cc:38:1f:
                    06:07:5e:98:55:36:d1:8b:e5:42:06:4d:58:f7:29:
                    3a:43:45:b9:17:b7:e2:b7:fb:36:64:b2:fd:f0:73:
                    0d:64:33:4d:21:0f:a3:ec:a7:1e:39:76:ea:91:5b:
                    56:6f:b9:31:29:7a:f4:5b:93:dd:3c:9e:e7:1b:fe:
                    ed:07:e6:92:ae:a3:46:de:cf:25:79:df:4c:82:05:
                    e9:0f:ef:d8:a2:e4:80:cc:2a:14:95:b0:7d:76:55:
                    88:ad:77:82:f2:30:85:54:78:f0:0f:23:f2:a5:db:
                    d4:40:fe:87:57:01:fa:e5:3d:d1:94:ba:f6:f1:65:
                    f8:3d:43:a0:d5:f5:51:6d:b6:c0:98:82:75:d0:a0:
                    6c:7e:c4:5b:91:27:31:45:65:d6:ff:36:10:80:11:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:D0:10:3C:01:AF:71:96:27:D8:97:C3:41:30:2C:DC:A4:D7:BE
            X509v3 Authority Key Identifier:
                keyid:22:C2:91:67:96:B7:32:87:CE:C9:0C:35:07:B1:C5:9F:F7:75:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IsKRZ5a3MofOyQw1B7HFn_d1iHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183249/0981E5DA3E1011F1930BBBD1AA833773/IsKRZ5a3MofOyQw1B7HFn_d1iHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:df:1e:4a:c6:d6:ba:ee:20:8e:96:85:1d:46:f7:76:4a:
         39:c0:4c:e0:61:1b:35:87:c9:dd:24:f2:5b:dc:e5:5b:e4:c7:
         ea:c0:09:ad:13:08:b9:6f:ce:95:ba:cd:5a:83:43:7b:2c:08:
         1d:dc:0a:40:48:fb:c5:2d:a0:2c:92:df:b0:09:7d:dd:0d:12:
         00:70:aa:0f:9e:89:25:9a:7f:30:c1:e4:57:be:2f:3d:24:b1:
         0a:36:37:97:3d:7a:76:4c:c8:2a:0d:1a:bd:a7:4a:a4:c1:c4:
         39:87:b5:cc:f4:d1:13:cc:e4:93:26:da:eb:55:8a:b4:11:6b:
         75:c1:26:bd:34:27:81:5b:29:ba:51:39:f2:18:dc:14:1c:67:
         99:36:aa:dc:f0:ec:36:ba:bf:84:94:e1:59:bc:16:82:62:a0:
         74:3e:00:79:1d:22:17:89:ea:79:38:00:32:2c:40:76:c1:d3:
         cd:1b:5f:93:dd:35:28:a3:4b:51:28:43:43:d4:52:b8:93:b1:
         77:ec:30:c6:f9:0e:db:5b:42:66:04:77:38:e8:77:95:b0:97:
         99:77:f3:05:4e:5f:1b:7d:36:6e:fe:12:a9:bb:5f:76:6f:c1:
         eb:b3:b8:28:8e:d8:01:4f:d9:d9:d6:9b:46:76:ac:f0:16:94:
         2e:f6:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:51:54 2026 by rpki-client