Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
File:                     IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json)
Hash identifier:          8jVkHSTJpRR7/fVOunFT0A5kj4X+T/NR/X2PwYPb0cQ=
Subject key identifier:   ED:C4:A4:45:A0:2F:65:0E:36:61:96:40:95:A2:40:6D:D5:C8:2E:85
Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
Certificate issuer:       /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
Manifest number:          020A
Signing time:             Mon 27 Jul 2026 04:37:38 +0000
Manifest this update:     Mon 27 Jul 2026 04:37:38 +0000
Manifest next update:     Mon 03 Aug 2026 04:37:38 +0000
Files and hashes:         1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: nCRlMavg6LLXBkaotESoYTPKNIuDryVVmsFvlkeTy6o=)
                          2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=)
                          3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
                          rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
        Validity
            Not Before: Jul 27 04:37:38 2026 GMT
            Not After : Aug  3 04:37:38 2026 GMT
        Subject: CN=6a66e092-7551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:20:e2:bc:32:2e:b7:28:1e:81:63:30:e7:
                    2f:94:21:68:aa:9e:18:eb:27:e5:6f:52:f5:4e:07:
                    e4:e6:85:f4:3d:3a:e0:67:66:19:52:89:9f:93:84:
                    7c:13:69:d8:7e:b2:ce:72:d7:18:54:60:62:dc:70:
                    cb:7b:d6:60:62:0e:fd:8d:bd:8f:5c:95:21:df:ae:
                    93:b7:2e:da:c4:f7:ec:12:b3:e9:a8:98:e5:f9:70:
                    c0:f4:e1:67:64:59:ce:7f:aa:59:67:7b:1b:30:40:
                    26:01:73:91:1a:b4:d9:ed:d6:51:ad:5b:fe:04:28:
                    fb:e1:f5:24:55:14:1c:a8:61:06:24:68:42:2d:05:
                    f5:de:4d:51:40:4a:ab:d0:3e:58:2b:0d:41:5c:36:
                    28:c3:d7:b0:5d:ac:f9:73:ed:56:3a:04:5d:5a:58:
                    52:21:ba:f2:7e:97:34:75:bd:ef:1a:dc:ad:d3:3e:
                    c0:18:f2:ce:5a:38:a7:09:b8:15:6f:6a:99:7f:54:
                    19:d9:fe:e4:3a:b0:f5:3a:50:48:6b:6b:53:ae:60:
                    92:2c:38:b6:b2:64:71:16:ed:05:81:80:4e:c8:e8:
                    e1:dd:f8:26:39:c3:4e:27:16:81:11:9e:27:5c:38:
                    1a:5e:8e:78:75:78:ff:3a:6b:0b:b4:39:6e:10:5a:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C4:A4:45:A0:2F:65:0E:36:61:96:40:95:A2:40:6D:D5:C8:2E:85
            X509v3 Authority Key Identifier:
                keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:ab:6f:8f:04:03:74:a9:ff:c8:aa:a4:f9:9d:71:c4:5f:
         9d:eb:40:e4:07:38:27:75:30:f7:ab:e4:02:c0:09:93:27:5a:
         05:df:12:61:99:f0:41:1f:75:c5:59:de:5b:24:65:aa:6e:30:
         20:78:86:65:7c:3f:fc:34:f8:72:9f:62:36:51:1a:f5:71:4d:
         91:3b:0c:81:b4:39:5a:30:a6:48:79:8b:0b:95:7d:62:10:15:
         30:97:d3:a0:33:5e:ca:3a:44:e3:19:4e:58:56:23:a0:91:a1:
         3b:53:8f:61:48:df:20:0e:62:4a:5f:ad:29:b8:f7:41:a7:c8:
         8f:72:73:0d:b9:e4:b5:0b:53:39:ed:ac:23:b9:cc:b4:e5:2b:
         5f:43:d8:09:06:3a:3d:4d:4f:00:87:aa:77:7b:ba:a4:67:05:
         34:e0:b7:df:10:a8:cc:fa:a3:65:85:63:cf:b3:66:eb:c0:11:
         17:b6:f6:4c:c8:7d:d7:e6:be:ab:22:40:8c:ec:62:da:a8:a5:
         06:fb:ab:11:7b:2d:20:4a:ef:c8:93:3c:3b:c0:03:07:9a:8f:
         a4:50:d0:38:05:f2:74:74:0c:6e:0f:39:45:8b:b0:44:5e:89:
         57:2d:0e:ca:8b:fa:6a:11:79:79:9d:8b:e7:4e:ef:54:0d:61:
         4e:75:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:50 2026 by rpki-client