Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          nIOS7fZHXDILKBgP/pVcYPXJssYJr022H+N9aZsW2jM=
Subject key identifier:   D7:3D:BA:68:41:B3:17:1F:D2:F3:05:0D:7E:0B:A0:B9:FB:0E:65:F7
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          01B2
Signing time:             Mon 21 Sep 2026 04:03:39 +0000
Manifest this update:     Mon 21 Sep 2026 04:03:39 +0000
Manifest next update:     Mon 28 Sep 2026 04:03:39 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: czjcCvIfTSYcE7F2Ph7ivIRMeiBJ/PCACPJysshzSq4=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: +hujpBHJUbdedQIkPrbVB4NwPgQUBD595iWd0J45vYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Sep 21 04:03:39 2026 GMT
            Not After : Sep 28 04:03:39 2026 GMT
        Subject: CN=6ab0ac9b-8c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:76:e2:69:af:f8:60:b0:d9:c7:4a:bf:90:
                    d4:f7:14:bc:d7:00:2a:80:c2:35:af:49:92:73:a1:
                    75:92:31:a8:a5:8d:94:4f:27:cf:83:c8:9a:b7:ff:
                    f5:1f:6a:9a:e4:1c:67:18:6a:9e:e0:29:1c:ce:2b:
                    9f:22:ee:c3:d1:bc:34:9b:32:2d:d9:7f:bf:ef:84:
                    7e:d8:19:71:c9:3b:35:c4:6c:49:a2:3e:56:e0:7d:
                    ae:2e:8e:c4:3a:23:ac:78:37:cc:29:39:6b:59:f2:
                    80:b3:16:89:f4:a7:dd:fa:18:45:7f:86:49:57:69:
                    e6:4e:60:41:71:73:8e:a1:e6:3f:10:b0:46:c8:f8:
                    0d:54:17:b6:df:dd:14:cd:62:be:5c:45:ab:bd:84:
                    5a:0b:77:56:f9:87:34:80:9e:43:bd:6b:04:e0:1c:
                    2b:8b:2d:27:98:01:26:52:b3:dd:d1:ac:f5:e8:fe:
                    25:f7:3d:3b:5f:53:df:07:a3:ea:d1:7f:41:eb:d1:
                    8d:4b:b1:81:92:ca:25:ea:c5:1f:2c:85:47:21:3f:
                    85:2e:46:2d:1a:33:5a:fb:d6:34:75:a3:69:5c:fb:
                    41:98:00:e2:22:07:78:8b:f9:b4:3a:83:1d:13:e9:
                    f5:47:a8:39:68:e5:b0:29:fa:a0:82:ff:c6:88:a6:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:BA:68:41:B3:17:1F:D2:F3:05:0D:7E:0B:A0:B9:FB:0E:65:F7
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:48:97:9f:40:49:10:ec:dc:37:04:6d:82:6e:0b:0d:ef:cc:
         fb:ba:4e:fb:45:41:cd:ef:38:a1:96:da:75:7c:79:55:d2:49:
         00:12:62:aa:b5:00:fa:11:f2:0b:fe:04:fd:31:4c:da:cb:b5:
         d9:ca:98:c0:0f:60:66:4b:9a:59:1c:19:12:33:da:7c:4a:8d:
         f7:c7:e2:5b:a6:5e:e6:56:8a:58:ea:9e:c3:62:23:55:ab:ab:
         e9:1a:15:ec:d0:cb:28:1a:a0:02:71:59:97:7e:0e:91:78:0c:
         9b:e1:39:96:13:08:b3:a1:49:52:8f:77:f9:ae:64:10:61:01:
         2d:57:b6:8d:4d:ae:9e:a9:77:a9:e4:27:5c:34:1c:fd:05:80:
         f2:ec:25:6e:f7:e4:d6:86:03:99:bf:81:e1:8b:02:75:72:83:
         90:bb:be:2e:1e:7c:10:fa:d2:2c:6d:f2:ae:8f:e1:3f:46:2a:
         0f:12:2d:ab:8d:4d:e7:77:4a:ab:e4:07:12:4e:e0:b5:0c:e8:
         06:25:e4:92:c2:a2:70:d8:b3:7f:70:69:91:4a:f3:76:fe:d4:
         82:3c:a5:94:0a:1d:4c:8b:80:89:19:a8:07:5c:4a:20:a6:c2:
         7a:83:f1:48:01:f8:2c:37:3d:f4:b3:0a:e6:8b:db:2b:44:8d:
         30:9c:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:25 2026 by rpki-client