Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
File:                     IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json)
Hash identifier:          n2GJU+n4pKcX15v+XD/5zHROOSkXrZ3IqJXWKwrmWXc=
Subject key identifier:   FD:60:13:90:E0:93:F3:35:43:AD:86:FD:73:96:89:78:84:0D:7A:D8
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Certificate issuer:       /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
Manifest number:          0AAC
Signing time:             Tue 22 Sep 2026 20:18:21 +0000
Manifest this update:     Tue 22 Sep 2026 20:18:20 +0000
Manifest next update:     Tue 29 Sep 2026 20:18:20 +0000
Files and hashes:         1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: gl+mGOnbUKDoRMQ8CJ275z/clr11ndM7LjfdUIvllGg=)
                          2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: UKLOu1NCNZVwz5t/1ccTpwUiHe8UWmdRFczD69J6luA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
        Validity
            Not Before: Sep 22 20:18:20 2026 GMT
            Not After : Sep 29 20:18:20 2026 GMT
        Subject: CN=6ab2e28c-8040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:ea:f6:c8:e8:f2:bd:23:77:d2:ee:fc:8b:
                    5f:90:f9:48:45:aa:01:cd:4a:b0:1d:90:19:b7:e3:
                    45:05:f5:f0:27:72:f7:9b:38:7a:f5:a8:e5:e5:80:
                    45:d6:9f:e2:a2:32:77:e1:fa:45:a6:88:a1:f4:ee:
                    55:79:4e:82:f6:ce:27:10:6c:40:f2:f1:fc:d3:e5:
                    fb:ea:cf:1f:62:91:04:a2:bc:b3:b3:9e:93:a1:fa:
                    ee:5a:35:af:3a:47:9b:c5:92:28:d2:74:2c:ac:4d:
                    77:25:70:f5:68:a3:d1:63:5e:ec:7b:6f:5b:0d:df:
                    a6:67:cb:11:0b:39:94:45:d9:d3:e5:c6:19:df:88:
                    75:23:bc:cb:af:09:4a:c0:ee:b6:83:02:80:8e:de:
                    ae:d5:b7:ca:ca:48:c7:6e:7a:e5:20:bf:5d:38:0a:
                    2b:c1:b7:d0:cf:2f:9a:f3:f2:45:e7:f0:b8:89:44:
                    9e:4a:26:0d:94:a5:ad:a5:66:ac:6d:0c:80:e1:d4:
                    17:87:31:e4:21:18:77:21:30:73:2c:df:1c:7e:89:
                    f5:da:0e:a2:48:22:73:f6:35:01:fa:10:95:5f:35:
                    1e:03:f4:9f:70:4e:62:cb:b5:e0:f1:e9:c5:6e:a5:
                    6b:ac:be:0e:b3:8b:c0:e5:db:c9:c6:a7:3b:ce:57:
                    5d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:13:90:E0:93:F3:35:43:AD:86:FD:73:96:89:78:84:0D:7A:D8
            X509v3 Authority Key Identifier:
                keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:21:61:67:8e:af:f4:a8:1f:17:52:09:a1:67:a4:d4:f4:
         84:0b:ca:b1:ac:8b:e5:47:73:13:5f:49:cb:29:24:38:b4:6f:
         c0:c5:3d:6e:c6:84:e5:96:ef:20:8c:41:5b:e7:54:fb:69:8e:
         d0:f2:07:e6:28:02:7e:9e:3e:c2:54:36:f2:dd:af:47:df:54:
         d8:d7:fd:28:bb:79:3d:7b:be:9a:e4:5f:68:63:b5:c7:bc:d2:
         05:f0:13:ad:d0:a5:1b:cc:06:11:49:09:14:87:27:1f:32:04:
         36:68:17:4c:a3:6b:47:fc:0d:af:7a:ea:c1:d2:16:f6:27:3c:
         b3:28:04:bc:58:48:3e:6a:b8:b9:da:1f:1f:54:30:7a:34:9c:
         35:c5:8a:aa:e7:2b:13:ac:13:d4:9e:32:6d:9a:42:76:ca:a3:
         73:bf:b7:89:05:e5:42:cb:14:d4:c8:74:4e:41:e8:a7:7c:86:
         44:25:24:d9:e0:f9:08:5c:2f:51:f8:05:a8:e3:f8:00:0b:d8:
         81:4b:4a:e4:36:6c:23:3f:94:e7:62:44:37:83:fb:1b:58:e5:
         ca:64:cd:f7:84:a1:b4:4f:28:7e:9c:48:7c:0a:29:5a:1d:d0:
         fc:1e:e8:b4:1a:de:b5:3c:c5:30:e1:1b:ae:f0:1f:f5:5b:25:
         2c:37:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:08:52 2026 by rpki-client