Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
File:                     iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json)
Hash identifier:          trECYc6rCJgdYe03rjtiP8aq8G3smnVibvE9jjFsKeY=
Subject key identifier:   7E:B0:45:5D:6A:45:72:60:96:D6:AD:2E:2D:78:1F:CD:33:0C:06:71
Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88
Certificate issuer:       /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
Certificate serial:       0C86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
Manifest number:          0C7B
Signing time:             Sat 28 Feb 2026 18:46:17 +0000
Manifest this update:     Sat 28 Feb 2026 18:46:17 +0000
Manifest next update:     Sat 07 Mar 2026 18:46:17 +0000
Files and hashes:         1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: aOSzwHTCZok8wGpwxey78yTVvQ9mPhH72FwXbZ0lJL0=)
                          2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl
                          rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3206 (0xc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88
        Validity
            Not Before: Feb 28 18:46:17 2026 GMT
            Not After : Mar  7 18:46:17 2026 GMT
        Subject: CN=69a337f9-b543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:dd:34:17:03:d9:b7:40:b4:1b:b3:9f:18:
                    33:86:b7:96:90:37:2a:a2:66:82:21:10:5e:56:b8:
                    bb:61:18:b0:e0:2a:1c:9e:27:a8:87:f9:36:7f:ab:
                    ac:cc:48:97:15:8e:86:6b:4e:f7:b2:7d:8a:11:95:
                    6b:b4:43:35:1d:c2:77:c9:e2:aa:e5:e1:73:2f:64:
                    a8:1e:d4:10:16:31:02:7c:d1:fa:d3:91:26:0b:04:
                    4d:2a:76:65:69:c7:65:0b:bd:88:a8:07:aa:d0:a8:
                    2a:31:6f:96:74:83:ca:fa:10:d8:4a:b0:fc:dc:8e:
                    22:8e:76:8d:52:20:91:81:68:c0:da:bc:06:10:3d:
                    b5:c9:65:58:62:f8:b2:b2:c5:63:11:26:44:66:e3:
                    30:7a:b5:6f:f7:14:7b:1f:71:d5:9f:ec:b6:43:9b:
                    7b:56:78:c3:62:2b:50:02:9c:6f:46:7e:c5:db:43:
                    41:9f:a4:a6:63:d1:4f:d6:c3:a9:43:73:f1:a0:39:
                    87:bf:38:c7:48:ad:f1:db:d3:3e:da:f0:1f:98:5b:
                    9f:07:79:85:43:d4:47:1e:a4:20:80:32:5e:e2:89:
                    a8:03:55:1c:ca:05:72:ac:82:10:98:7a:90:fb:6a:
                    50:c6:59:05:9a:e1:49:fd:90:37:0c:45:dc:dc:f9:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:45:5D:6A:45:72:60:96:D6:AD:2E:2D:78:1F:CD:33:0C:06:71
            X509v3 Authority Key Identifier:
                keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:74:81:35:26:85:09:51:35:bc:41:8c:f6:62:27:3c:71:05:
         ad:07:c9:4b:e1:d8:87:90:f3:c1:8c:ce:04:f6:cc:7e:9d:ea:
         cf:9f:d8:e5:15:25:42:51:4d:07:df:75:c3:9a:8c:da:85:f1:
         cb:73:9e:ee:1c:99:c1:ca:e1:9a:e3:57:8a:6a:87:28:f2:1c:
         8f:d8:8f:50:36:b2:55:91:0a:c9:8f:c9:95:42:68:4c:24:2f:
         61:3b:6e:de:56:60:79:48:cf:86:41:63:34:05:2d:37:c7:be:
         07:dc:e3:00:1d:cb:6d:e5:12:94:82:f9:55:9a:9d:b7:94:44:
         34:37:9f:b1:aa:07:c7:37:52:0d:15:6a:c8:79:2a:5c:9c:b2:
         69:2a:ff:e5:71:ec:3e:20:ad:18:7d:b2:76:94:bf:b0:59:f1:
         b6:7a:d9:3e:16:13:86:3e:8a:bf:5d:89:14:9b:1e:bf:7c:5d:
         cf:8f:1f:bc:ed:dd:9f:80:85:06:25:dd:82:1a:e3:c9:8e:6f:
         f7:d1:1e:05:25:e8:a1:82:c2:68:b5:81:58:88:83:dd:f6:7f:
         95:e0:f7:8d:68:1c:73:1e:6f:f1:f5:2e:55:06:f4:55:bd:05:
         b0:fd:b5:22:8e:fc:f9:f0:f2:ed:cd:39:1a:3d:2c:84:68:e3:
         c6:73:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:03 2026 by rpki-client