Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
File:                     iDcigo7Pno3d_SRvPGeOnwUV-dI.mft (raw, json)
Hash identifier:          R9KYqMDL0zvY7QuDrciJJdZjTywp9B0pi1xpOQuzVWA=
Subject key identifier:   77:C6:AE:AF:91:39:94:68:0D:29:75:44:9C:F3:A7:5F:F9:FA:CA:4D
Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
Certificate issuer:       /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
Manifest number:          A0
Signing time:             Mon 21 Sep 2026 07:15:15 +0000
Manifest this update:     Mon 21 Sep 2026 07:15:15 +0000
Manifest next update:     Mon 28 Sep 2026 07:15:15 +0000
Files and hashes:         1: iDcigo7Pno3d_SRvPGeOnwUV-dI.crl (hash: SRMiBAPfGXyPXr07LZvADtpuDHfiV0Zt4fK/4BC8STo=)
                          2: B27ED5E6C11311F089B2CF23C4F9AE02.roa (hash: +u62azMd4pOnj3CpAjZP1k28yAPQXoJe4iMoi3wUC8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
        Validity
            Not Before: Sep 21 07:15:15 2026 GMT
            Not After : Sep 28 07:15:15 2026 GMT
        Subject: CN=6ab0d983-1d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:4d:40:48:f8:b6:44:83:3b:8c:3d:85:16:
                    11:7b:5e:26:b5:11:ce:0c:c5:b3:41:07:b7:15:30:
                    ce:ab:40:0c:51:ef:ed:ed:b2:48:40:9d:ae:ae:32:
                    54:ac:f3:aa:d0:c0:c0:93:c1:8c:8f:1a:aa:dc:d4:
                    7d:9f:ab:cb:c1:c2:54:b5:8f:6e:ed:92:34:3d:9c:
                    f1:35:13:91:ef:5c:ab:10:38:fe:6e:e1:42:fd:fd:
                    d9:3c:3e:0e:58:41:2c:85:7b:35:99:6c:71:60:7e:
                    6d:77:4e:d8:9f:6d:28:22:a4:9a:a5:32:ba:01:64:
                    c0:f2:53:d8:cb:18:7d:70:7a:b2:15:d4:57:3d:4b:
                    20:97:cc:51:5b:a7:a3:2e:45:33:04:95:b4:80:8d:
                    8d:3d:db:eb:0e:9a:09:e1:70:12:ee:a5:37:cb:b8:
                    61:14:a3:bb:0e:24:f6:d5:25:12:11:03:59:6a:f3:
                    98:25:6f:4a:e0:29:55:a5:4b:cb:7d:47:b8:75:b9:
                    e2:16:1a:f8:85:6c:3b:51:a3:92:bf:ad:7c:94:01:
                    d4:09:d8:db:8b:1c:e1:eb:52:e5:75:24:96:7a:b2:
                    b9:73:2d:28:2e:eb:9e:32:80:6d:5d:bf:54:6c:dc:
                    4a:31:78:f4:8d:22:20:21:fd:3a:d3:7e:31:de:62:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:AE:AF:91:39:94:68:0D:29:75:44:9C:F3:A7:5F:F9:FA:CA:4D
            X509v3 Authority Key Identifier:
                keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:eb:9a:68:b7:5c:c8:fc:13:0a:cd:44:3f:b4:6f:63:1f:
         aa:49:74:02:ca:b1:10:2e:45:31:43:4d:a1:df:23:59:3e:8a:
         10:cf:9b:be:af:f5:79:65:9e:4f:70:cb:9f:96:5f:9e:28:7a:
         2f:e2:39:0a:61:ce:3b:92:b4:4f:28:37:e7:ba:c2:8f:e7:05:
         20:ee:78:e0:ff:5e:17:23:57:48:1b:42:e0:fb:0e:e7:a2:cf:
         9e:3b:38:68:a4:c6:45:93:66:25:b6:0f:46:58:96:99:24:95:
         62:2d:7d:f2:1e:96:ce:70:92:51:7d:23:b6:c4:cd:88:42:a5:
         1c:73:dc:ec:f0:b7:5f:75:46:28:7c:9a:c2:17:7e:5e:0e:3b:
         d5:be:df:d3:cd:85:0b:5e:e3:88:e2:7d:9c:fd:e9:73:06:00:
         c8:5c:d2:fa:c0:49:16:00:62:e0:cf:21:a1:19:26:55:dd:45:
         ed:ad:76:ac:97:19:67:c1:3c:89:71:9b:2d:8b:ea:e8:52:6f:
         96:18:16:51:38:d2:3a:78:3f:0d:62:61:f2:7d:b6:f0:52:c2:
         2b:57:66:33:16:6c:83:b5:c4:65:52:ba:ea:df:fd:a9:72:2f:
         c7:e6:dc:09:55:66:1e:e2:0e:31:34:c4:b8:a1:da:2d:c1:10:
         38:19:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:59 2026 by rpki-client