Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File:                     i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier:          io0yKjUEf262UTNxelBK0MqhJv2ZMtAeTpz29znnwNs=
Subject key identifier:   0A:25:40:FE:D2:FA:ED:AF:F8:CB:6F:3B:D8:5D:EB:5E:2B:98:A2:6D
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer:       /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number:          0867
Signing time:             Wed 14 Oct 2026 21:09:38 +0000
Manifest this update:     Wed 14 Oct 2026 21:09:37 +0000
Manifest next update:     Wed 21 Oct 2026 21:09:37 +0000
Files and hashes:         1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: 6lRn6tOyPntfKMDXgAQspvNOEg+kKTUyaiAlWaIn8ig=)
                          2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: C86QSzMPJfidhhZAtCALwlPi6LGTUSBetHOGRrIMSeU=)
                          3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: Gqr5gUPYx0CJyOxSeCXlqpQBiTSLSQ6IJMBMylryXzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
                          rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 21:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
        Validity
            Not Before: Oct 14 21:09:37 2026 GMT
            Not After : Oct 21 21:09:37 2026 GMT
        Subject: CN=6acfef92-abeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:e9:7f:29:c2:c1:0f:f0:9e:d0:ae:c9:53:
                    eb:72:76:22:42:1d:20:30:0b:1d:a4:6e:7c:ba:55:
                    a7:98:17:06:2f:dd:6b:83:79:7f:cb:b9:c3:48:91:
                    fd:09:0d:82:eb:17:c5:c0:07:bd:90:34:8b:da:19:
                    c1:96:34:c6:12:e3:80:c3:b8:df:73:bd:d0:12:f3:
                    da:07:44:01:9f:19:f9:2b:e8:a6:7d:67:67:1c:15:
                    36:21:01:31:ac:c7:6d:b4:9c:f0:da:b4:7c:c7:ff:
                    cb:61:11:79:da:25:30:88:4e:20:a6:22:82:d1:6c:
                    0e:5e:da:32:31:43:08:3a:41:07:1d:c1:8f:5b:cf:
                    ad:ae:6b:b0:d7:f8:ab:9e:52:1c:de:c1:ca:fd:8c:
                    bc:74:a5:05:cd:e7:8d:bd:55:3b:3d:c2:bf:43:37:
                    07:57:ef:ef:1c:92:5a:6a:a1:61:97:75:00:d7:8d:
                    dc:a3:12:20:1d:78:7b:00:37:11:12:29:76:aa:b7:
                    5b:b5:21:f7:a2:cd:88:73:01:f4:02:c1:7c:4a:52:
                    e6:0d:b8:7f:e0:ba:2c:3a:88:0e:ee:ed:34:9f:00:
                    82:71:8a:0a:df:c7:62:81:dc:6b:a7:84:f9:1a:c1:
                    86:2e:9e:80:63:2d:22:87:5e:f6:90:91:4e:4e:88:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:40:FE:D2:FA:ED:AF:F8:CB:6F:3B:D8:5D:EB:5E:2B:98:A2:6D
            X509v3 Authority Key Identifier:
                keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:b4:8d:db:90:95:33:39:aa:08:24:5f:1c:56:5f:cb:f6:
         80:c7:9f:d5:04:50:ce:e4:c1:42:a7:51:cc:c1:03:08:82:2a:
         8a:3f:df:74:86:de:88:6e:f6:aa:1b:5d:95:d0:71:ca:06:ad:
         26:af:06:72:88:f7:ec:6d:5e:d3:43:96:23:11:d5:0e:a4:fc:
         53:39:9b:a2:32:bf:c0:4f:a1:e5:53:f6:f5:d6:5f:bc:ef:1b:
         a8:00:eb:69:0a:12:38:11:e6:1a:0b:93:6b:7e:99:33:5f:b1:
         08:b8:75:c8:17:d0:d8:4c:a4:b1:30:e4:cc:00:d4:bd:9b:f1:
         38:7a:e6:2b:c7:5c:2a:b3:59:af:c6:d0:5e:78:94:f3:50:d1:
         64:27:c5:74:36:2f:42:84:fd:a5:70:2c:b7:23:35:98:ca:e4:
         ed:b9:b4:60:34:77:a4:b2:ae:c4:da:f5:29:92:45:81:8e:26:
         fa:4c:57:4a:e2:a8:c0:ed:65:25:cb:5a:57:78:b7:94:bb:b7:
         4a:25:1a:7b:8e:86:5e:09:06:12:e2:c9:8e:9b:3d:39:2f:5d:
         8a:f4:cf:2c:b4:8b:90:56:61:b2:dc:69:d2:ce:23:15:5c:89:
         f8:2a:dc:0d:c3:9a:19:dc:ad:83:a6:36:44:80:21:a1:84:f8:
         59:df:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:30:38 2026 by rpki-client