Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File:                     IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier:          Tw9EOpBbJaNq0kGIM394yjKc+o2dHlMAxWVOPUOuSd4=
Subject key identifier:   04:79:C8:01:BB:12:27:BC:83:44:4B:2F:3C:88:0C:78:E4:E3:21:B0
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer:       /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number:          015D
Signing time:             Mon 21 Sep 2026 05:06:55 +0000
Manifest this update:     Mon 21 Sep 2026 05:06:54 +0000
Manifest next update:     Mon 28 Sep 2026 05:06:54 +0000
Files and hashes:         1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: ygWdle3b4ugeZRE+BNC3mk76bJu8OtTbX9azefxRkOk=)
                          2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
        Validity
            Not Before: Sep 21 05:06:54 2026 GMT
            Not After : Sep 28 05:06:54 2026 GMT
        Subject: CN=6ab0bb6f-dba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:32:06:9b:4e:29:4d:c1:84:f2:fe:a4:80:
                    ef:01:b9:04:51:ac:4e:b8:35:9b:9a:80:7f:5b:bc:
                    23:ff:5d:6e:a1:d4:21:86:db:29:06:94:79:2e:3a:
                    3a:87:8d:29:b7:b2:26:d4:48:50:cf:11:8b:ef:8a:
                    02:5f:8d:48:43:5b:2b:53:e6:0c:db:ab:b6:9c:fa:
                    64:03:d4:14:45:ce:17:6f:27:18:32:42:0e:30:13:
                    69:3c:8c:3d:7c:ee:55:f9:06:d0:c9:c7:06:3f:a5:
                    88:8b:28:ff:3c:aa:d9:2f:50:dd:48:bb:9d:d5:dd:
                    72:33:30:8b:ba:9a:f3:00:c3:65:49:de:f6:37:aa:
                    77:24:45:64:dd:ea:33:01:b4:51:35:81:b0:47:0b:
                    9a:43:35:a5:33:f5:65:5d:ff:05:05:88:3f:a3:8b:
                    09:4a:f7:42:22:cf:d8:90:2b:5c:b5:87:2b:ea:d9:
                    23:f9:7b:02:63:ae:4c:22:4f:1f:ce:c1:bb:2c:11:
                    62:7d:a1:a2:b3:06:04:fa:08:e7:fd:22:aa:87:7e:
                    8f:7a:98:14:2f:e4:1a:74:43:d9:db:9e:af:18:d7:
                    ed:49:45:a2:8e:11:02:a4:85:7b:ca:2a:a5:09:52:
                    b2:6d:d7:a5:1f:87:db:a4:ab:2c:1a:7c:f3:d1:8c:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:C8:01:BB:12:27:BC:83:44:4B:2F:3C:88:0C:78:E4:E3:21:B0
            X509v3 Authority Key Identifier:
                keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:43:3a:f8:da:32:13:45:b4:26:be:73:8f:99:03:ca:f0:9b:
         09:ea:93:3c:d1:b1:d9:3e:19:64:75:69:f3:59:a6:ec:45:99:
         4c:f6:7e:92:51:d2:1d:44:89:f8:89:f9:7b:ad:fa:56:19:01:
         46:a8:ab:14:5b:fd:d5:b0:c4:b8:6e:aa:0f:d4:8c:b0:92:73:
         08:09:f4:69:2a:c5:2f:8a:53:71:2c:4b:e8:4c:46:4f:4e:fd:
         18:68:37:ea:12:33:79:46:68:6a:7b:4d:d9:24:ac:e5:92:2c:
         35:1f:3b:94:46:c8:8d:a3:90:3e:5a:ff:85:f0:36:0e:8e:e4:
         de:21:2a:6c:b0:ed:e9:5f:a6:f1:a0:67:a5:8b:d1:75:d7:fc:
         eb:c1:4b:11:1c:08:37:3b:62:3a:d2:40:5e:55:c7:b5:8d:67:
         a8:38:6a:c1:db:d7:e9:3c:37:8a:e7:04:ba:f7:da:34:4d:e3:
         22:8d:80:15:6e:82:e2:59:bd:9e:db:a6:96:cb:93:07:86:ca:
         6f:18:b8:14:d9:7e:6e:7a:e4:8f:0f:c2:0b:b5:cd:da:dc:c4:
         9c:c8:34:d4:dd:6d:3b:9f:4d:6c:fb:9d:de:4e:40:1e:4b:9a:
         6d:b0:30:31:0d:1b:15:cb:7d:5e:59:bb:03:70:46:93:80:0a:
         40:f4:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:43:23 2026 by rpki-client