Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File:                     i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier:          ZnYssl5O7C9qpq6yC73Jzuu+X7jmV3bnnBZXEABhG2U=
Subject key identifier:   5A:51:78:45:5A:93:29:4B:6E:25:A6:F5:D2:6B:F6:9F:84:93:BF:6B
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer:       /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number:          01C9
Signing time:             Mon 27 Jul 2026 05:28:13 +0000
Manifest this update:     Mon 27 Jul 2026 05:28:13 +0000
Manifest next update:     Mon 03 Aug 2026 05:28:13 +0000
Files and hashes:         1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: GXilzw7qs+wPD+ZPgbwx8a65wgKBm0pENRX2gkYFLks=)
                          2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 3wRVfI1zpk+cbpoO3lK5QYCwvSabow1kgGaBDb4LpII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
        Validity
            Not Before: Jul 27 05:28:13 2026 GMT
            Not After : Aug  3 05:28:13 2026 GMT
        Subject: CN=6a66ec6d-d333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:d0:c0:b8:38:2e:27:38:9b:2a:ec:03:8a:
                    cd:56:2a:ad:41:ae:d7:40:06:9d:2d:66:47:24:30:
                    13:35:bf:cb:97:a3:b2:ce:a8:0d:b2:c3:75:a4:c1:
                    26:a6:c5:14:20:e1:17:33:85:c1:f1:a1:04:79:2f:
                    a1:30:97:0a:64:d0:8f:10:5e:66:f7:78:d1:0f:fe:
                    a1:bb:9e:d3:0e:e4:12:cf:21:7f:08:c6:27:94:71:
                    3f:8e:9f:b2:de:14:42:95:b7:25:c6:ae:af:a7:2e:
                    4d:d5:43:ec:4a:2d:ff:91:e1:ae:1c:93:e7:f6:a6:
                    ba:4e:bc:03:fe:03:0e:67:17:1e:87:03:f2:5d:26:
                    91:db:d2:36:75:6b:09:9d:8d:b4:d0:de:7b:e7:fd:
                    dc:c7:55:f2:60:f6:0b:a9:cb:5d:7e:98:f3:8c:b6:
                    fe:fe:cb:5c:d0:05:78:1c:67:f2:4a:88:83:86:2a:
                    bb:6e:53:72:b6:2d:28:f4:fd:48:63:35:c2:8a:2f:
                    63:22:af:4a:ed:82:d7:15:77:75:26:1d:d9:a5:e1:
                    77:d6:26:b9:40:01:2d:6f:f3:56:d4:6a:50:57:04:
                    f2:a4:39:f4:0e:e5:ba:d3:34:0a:82:7b:86:cc:ad:
                    e7:2d:30:b7:6c:3b:a1:95:49:f0:28:72:48:61:2f:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:78:45:5A:93:29:4B:6E:25:A6:F5:D2:6B:F6:9F:84:93:BF:6B
            X509v3 Authority Key Identifier:
                keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:86:fb:98:ae:11:fa:b4:e8:e9:fe:37:2d:6d:0c:bd:92:
         da:6e:0b:0e:53:02:d0:78:d1:dc:b2:5e:ea:ad:bd:80:78:c7:
         b3:06:9f:bc:74:a2:31:52:81:7d:a0:18:9e:f1:63:d3:67:ed:
         8b:24:65:35:08:c6:73:3e:31:48:36:50:b2:6a:94:63:41:0f:
         d2:b9:89:80:5f:2f:2d:fe:58:bb:eb:3e:b1:ba:92:b7:f3:fd:
         1b:b2:31:6a:1a:14:94:95:85:89:42:db:d4:0f:37:b7:11:39:
         c9:2b:b0:44:b3:60:50:87:3b:50:d2:28:b8:d2:f1:fd:d6:76:
         85:62:f1:10:9d:82:d0:38:fe:80:13:21:55:37:a1:27:e3:4e:
         e3:6e:d6:b4:1f:78:28:9b:4a:92:32:9b:80:53:59:5c:3f:33:
         48:1d:39:d1:68:3e:0f:4c:be:b6:b5:99:f7:4a:b8:de:ac:84:
         5c:ab:74:4a:99:71:83:7a:54:97:8d:d8:d0:b2:15:24:e0:bc:
         94:ae:ef:83:0e:02:af:f4:f9:b8:72:e7:a6:2c:74:05:39:e4:
         b3:5b:7f:0b:08:34:d9:91:d6:1d:1a:f6:ca:02:a6:d7:38:b6:
         e5:31:fc:f3:76:51:0e:60:28:07:b9:c1:26:e3:e4:d4:87:81:
         58:35:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:42 2026 by rpki-client