Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File:                     8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier:          xjyN6jl35lK3zn3Mm/Iw56c8RmyuWxgcw+2mxHY2k00=
Subject key identifier:   80:75:72:DD:0D:CA:AB:65:0B:3D:99:24:06:7E:60:E3:77:33:9C:01
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number:          01A2
Signing time:             Mon 21 Sep 2026 04:13:35 +0000
Manifest this update:     Mon 21 Sep 2026 04:13:35 +0000
Manifest next update:     Mon 28 Sep 2026 04:13:35 +0000
Files and hashes:         1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: ehwTs8OrncNNPbZhBU8+Zv2NRyAZSUVY53AItBS8XrQ=)
                          2: E36214403D0011EFAD623342C4F9AE02.roa (hash: 8MuuN2f/dvQUl/EAeCIlck+3ljnjnHw7GSO4P2gdCpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Sep 21 04:13:35 2026 GMT
            Not After : Sep 28 04:13:35 2026 GMT
        Subject: CN=6ab0aeef-9f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:3c:f2:ac:d5:21:39:05:35:3b:c9:5b:0d:
                    03:86:8d:b4:b2:c1:c2:43:b8:d0:a9:0a:17:71:6c:
                    73:d7:d1:02:67:9a:85:ce:00:1e:8f:3a:73:c6:8f:
                    89:1d:bc:62:16:ed:4c:2e:8d:80:20:64:e4:bb:16:
                    bf:25:2d:3f:7b:c7:71:e5:7a:d2:bc:bd:7d:ed:96:
                    df:db:47:f6:f0:65:b6:a2:c7:d2:96:a2:e8:ff:da:
                    ae:63:1e:6d:85:31:6d:2d:a7:8c:82:c9:38:40:6e:
                    a1:fb:90:38:b5:6d:d6:75:90:64:ff:9d:9c:ac:de:
                    2e:72:42:6e:c5:19:3a:48:c7:b1:8f:e7:24:2f:6f:
                    3f:c4:91:ec:f5:ea:d7:ac:26:09:6b:1b:45:ab:55:
                    2d:76:07:35:20:c7:58:33:7b:b3:18:fa:1c:da:45:
                    0f:3d:c1:72:33:81:87:e9:ac:32:26:6c:bb:41:d1:
                    17:d2:78:f6:46:00:1b:c4:14:3c:11:90:bb:4f:f7:
                    e4:50:84:b4:2e:5b:5f:36:59:d0:41:e0:68:b2:ef:
                    e5:f3:a6:9c:04:e2:5d:4c:0c:bf:24:2b:85:f1:81:
                    7a:75:9b:6c:a1:a2:77:4d:35:dd:e2:97:88:07:6d:
                    fc:ed:15:6f:49:4b:ab:ff:76:d3:cb:fe:f9:03:3f:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:72:DD:0D:CA:AB:65:0B:3D:99:24:06:7E:60:E3:77:33:9C:01
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:6d:15:f6:c8:7f:f9:f5:1e:a0:9d:c7:12:1e:e9:4c:ca:
         e6:8f:b7:b0:7a:7a:64:21:4d:60:d1:ba:63:02:48:e6:99:7b:
         3f:71:63:26:63:1e:2a:7a:18:be:f7:25:d0:91:ec:13:27:75:
         cb:ae:27:7a:89:83:08:70:0a:48:f0:63:36:c4:bd:b8:70:12:
         a9:6d:04:ee:e7:24:e3:26:f2:66:25:8b:01:5e:a4:d0:76:7e:
         8a:35:92:73:5f:74:ad:10:81:75:ff:70:15:db:23:91:b8:d4:
         9b:43:f7:6c:59:1e:7e:dc:98:31:dd:ee:7c:93:92:ab:b9:ad:
         ef:5b:67:fd:ac:8d:55:c1:08:58:f4:39:3a:a4:25:92:5e:f3:
         29:09:4e:ca:c9:1c:22:9a:f5:5f:7d:97:39:9d:fc:1d:9f:30:
         f7:fc:07:7e:28:b5:a5:f7:01:54:cf:3c:04:89:5b:f4:fd:17:
         5b:06:a9:c7:b5:0e:f0:49:cb:9f:a2:cf:28:5a:43:50:73:45:
         fd:9c:1b:5b:7f:48:1f:43:82:e2:d1:8f:59:70:71:96:a6:7e:
         d8:8f:6c:0c:06:bb:8f:ec:47:e7:e7:d9:be:41:bf:0f:da:bd:
         ae:9c:79:94:87:20:f8:7c:e5:be:1d:26:31:af:cf:da:11:d4:
         41:86:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:04:44 2026 by rpki-client