Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft
File:                     IlQptnO9Vfmh-WM1JYIlrig2FP4.mft (raw, json)
Hash identifier:          c/QwD6+wxwq8QHJJeTEEJFlEdVSTZaE/mBNtPTUKB1g=
Subject key identifier:   99:52:FB:5A:5F:A1:8F:C0:5D:10:74:6B:88:6D:D5:B3:B8:55:4E:80
Authority key identifier: 22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE
Certificate issuer:       /CN=A914C9DC/serialNumber=225429B673BD55F9A1F96335258225AE283614FE
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft
Manifest number:          25
Signing time:             Tue 29 Sep 2026 09:28:18 +0000
Manifest this update:     Tue 29 Sep 2026 09:28:17 +0000
Manifest next update:     Tue 06 Oct 2026 09:28:17 +0000
Files and hashes:         1: IlQptnO9Vfmh-WM1JYIlrig2FP4.crl (hash: Hov/nWCMaRhrXFWI0cZ9utY+oXIB+t8mVFAB6t/Ss9g=)
                          2: 08F83F5486B011F190BA97A774A30FBC.roa (hash: 5ZwP0uuzMGdPfnCK53ANk2dVgUQ0cGc0yUoY7rusTi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl
                          rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 07:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C9DC, serialNumber=225429B673BD55F9A1F96335258225AE283614FE
        Validity
            Not Before: Sep 29 09:28:17 2026 GMT
            Not After : Oct  6 09:28:17 2026 GMT
        Subject: CN=6abb84b2-ea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:91:c2:c0:35:d0:ac:56:43:b6:6b:ff:69:
                    7e:0a:e3:0e:0e:09:f1:fe:57:98:fc:c3:53:77:f5:
                    81:ce:6a:6f:ed:75:23:61:ea:6c:8d:ef:cb:28:32:
                    6e:d7:18:4a:c6:3d:32:d5:5b:0a:e4:47:1f:13:93:
                    bf:eb:0a:4f:1f:04:9b:a3:5a:ae:cb:c1:1f:68:32:
                    27:6b:6d:aa:df:44:c2:d5:c0:b6:26:3e:c3:5c:d9:
                    98:5c:fa:56:4e:a8:cc:ad:12:5f:89:49:7f:a2:96:
                    bb:5b:ab:cb:8e:a6:16:b3:22:ba:fd:48:da:88:b0:
                    44:5f:a4:31:e9:1e:fa:3d:24:47:a0:27:c4:8e:3d:
                    93:da:fa:44:96:8f:59:51:e6:23:f3:84:ac:f2:08:
                    91:70:91:9b:26:63:94:56:aa:ae:ab:03:d4:37:2a:
                    51:80:54:53:31:3c:f4:6a:45:97:7f:3d:9c:1b:5c:
                    da:84:2b:33:83:88:c8:d5:5b:b0:67:33:b5:cd:82:
                    54:a9:dc:1f:65:4b:b8:ec:4c:e2:42:c4:e2:e8:08:
                    20:0d:7b:f2:fc:10:dc:23:16:da:eb:d3:54:8f:db:
                    5e:0a:b2:b7:46:35:a6:88:b8:50:47:aa:8f:8a:65:
                    58:cb:9f:1b:46:1b:00:e4:5b:12:ca:3c:66:71:5c:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:52:FB:5A:5F:A1:8F:C0:5D:10:74:6B:88:6D:D5:B3:B8:55:4E:80
            X509v3 Authority Key Identifier:
                keyid:22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:d2:65:9b:f7:8e:95:47:24:97:58:c8:ce:76:2e:2e:96:
         8f:0d:6d:7c:17:4c:88:d7:9d:31:32:c6:91:17:04:65:8d:e6:
         c1:83:45:19:c9:d5:d7:86:25:c7:1a:7a:59:12:63:ce:5b:e3:
         b6:1a:03:37:e5:16:59:bf:1c:14:2d:36:78:96:78:f9:d6:bc:
         10:fd:89:b5:c8:3d:39:d4:44:13:6e:1c:a0:31:b7:40:53:f0:
         bb:1e:5b:00:c2:bc:ef:8e:01:83:3d:c9:d1:26:96:08:88:85:
         3d:ef:9a:17:57:d6:20:2b:dc:6d:7b:98:ff:70:a0:8f:04:53:
         a6:97:b0:e1:7a:26:2d:84:7e:e4:c7:c3:26:ee:67:7e:46:1d:
         91:de:a1:9a:76:05:8c:6a:6e:f2:0b:76:6f:9f:93:89:ff:2f:
         2f:6c:ea:ef:14:3c:d7:14:7c:ea:cc:9a:c7:5d:8c:0f:cb:76:
         13:90:49:5d:6e:1a:56:e5:54:54:1e:30:19:fe:cc:fe:73:6d:
         b6:1e:f6:5b:70:3d:4f:f0:4e:41:8c:f7:65:dc:37:3a:bb:07:
         a7:b5:5d:1c:dd:57:67:89:e9:78:9c:ae:2d:27:bf:1d:3e:36:
         03:7f:fc:af:74:59:48:1d:94:21:fe:ea:66:29:ab:54:9f:78:
         5c:03:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:48:44 2026 by rpki-client