Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
File:                     IqsnKH1FJndu9FfIiq4NTcomll8.mft (raw, json)
Hash identifier:          evXZAmR0pJZfRbAbwUDA1M+iN64SWqdlr6OxUPe9cvY=
Subject key identifier:   2F:5D:A1:0C:E8:8A:98:01:FF:A7:E1:CA:2E:2A:A1:77:CA:E1:50:FB
Authority key identifier: 22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F
Certificate issuer:       /CN=A919BF94/serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
Manifest number:          3A
Signing time:             Sun 27 Sep 2026 09:09:51 +0000
Manifest this update:     Sun 27 Sep 2026 09:09:50 +0000
Manifest next update:     Sun 04 Oct 2026 09:09:50 +0000
Files and hashes:         1: IqsnKH1FJndu9FfIiq4NTcomll8.crl (hash: TBe/44ydffelb6J57KmUj4Dra8fKHBdqZi8smXlcNpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl
                          rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BF94, serialNumber=22AB27287D4526776EF457C88AAE0D4DCA26965F
        Validity
            Not Before: Sep 27 09:09:50 2026 GMT
            Not After : Oct  4 09:09:50 2026 GMT
        Subject: CN=6ab8dd5f-71c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:df:8c:bb:6b:a3:10:44:cf:cc:e5:5d:ce:
                    1b:ab:aa:4e:ec:e3:61:2d:0c:7e:26:78:c8:bf:3a:
                    63:35:25:45:12:1c:29:cb:59:57:b1:d1:62:d7:76:
                    a7:f8:86:49:ef:67:5b:31:68:c1:c3:fd:cb:e0:b4:
                    35:ae:c3:9b:5a:13:a1:0c:56:a8:a3:29:dc:96:f8:
                    a6:a1:85:43:5c:08:3c:32:56:95:d3:1c:6a:20:b0:
                    a9:de:0c:00:df:15:66:5c:d0:a5:c9:64:ef:9b:97:
                    23:f0:10:89:84:77:f1:2e:7d:71:36:ae:87:9c:ee:
                    21:ac:90:2c:7d:e5:9d:f1:ee:ef:bd:17:0b:6b:5b:
                    e7:3f:4d:48:df:53:88:34:07:7a:f3:32:58:de:9c:
                    07:b7:83:75:3b:fb:22:bc:86:34:3c:31:3b:e3:6f:
                    91:2d:31:68:64:36:c4:4b:da:f3:ee:12:d0:42:84:
                    91:5a:ba:57:49:bc:1d:b7:6c:ae:a3:4b:e9:12:10:
                    b2:dc:8c:d6:0f:5d:46:f6:1c:f9:0b:fb:8b:95:02:
                    8f:cb:02:fa:68:2b:3a:f6:8f:6f:59:6d:9f:b0:05:
                    9f:09:4f:d7:cf:92:26:b5:62:00:24:5d:71:53:1d:
                    3d:47:14:4f:d9:e4:f5:70:9f:9f:57:c0:0f:bd:dd:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5D:A1:0C:E8:8A:98:01:FF:A7:E1:CA:2E:2A:A1:77:CA:E1:50:FB
            X509v3 Authority Key Identifier:
                keyid:22:AB:27:28:7D:45:26:77:6E:F4:57:C8:8A:AE:0D:4D:CA:26:96:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqsnKH1FJndu9FfIiq4NTcomll8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/0B846B1063D511F1B9E333818347A888/IqsnKH1FJndu9FfIiq4NTcomll8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:47:1b:6d:63:13:48:86:9b:78:21:e6:9d:37:1a:a1:7f:2e:
         18:76:2e:4d:a1:e9:8b:e8:22:1c:71:ee:d4:1e:4b:72:fc:b1:
         b6:15:98:e9:1d:df:54:8d:53:47:3c:55:0b:b1:b6:82:68:b4:
         5c:fb:7c:73:6d:a1:b8:e9:08:d5:db:f3:e1:33:d0:50:16:38:
         79:0f:98:ec:2b:37:cd:d4:3c:05:d4:a9:e0:86:db:e3:e2:75:
         82:59:3b:a4:bb:c4:a8:85:3e:ca:d1:38:47:f2:de:cb:b3:2d:
         76:e5:2b:5b:1a:9a:45:6c:4f:86:37:94:5b:71:85:05:bb:8e:
         22:6a:b4:76:00:a2:00:4b:87:55:5d:d3:14:52:45:00:24:5a:
         37:88:d7:41:1a:7b:f6:c8:7a:12:a4:c3:8a:e1:c8:50:11:ea:
         f3:1a:6d:dc:87:b6:94:ff:2d:a8:c6:e0:eb:58:61:44:67:ca:
         63:1a:9e:8e:ea:66:3a:55:ac:0b:50:c3:70:40:7c:12:92:70:
         d4:57:ca:a4:f5:cc:53:e4:df:1f:a6:9a:93:2f:4b:ef:a3:a2:
         59:9b:af:ed:bf:9d:73:4a:68:4d:cc:5b:70:9a:cc:9e:24:24:
         84:b8:25:5e:69:88:94:81:59:df:c5:a6:ff:bb:67:f1:a6:a9:
         9f:14:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:05:00 2026 by rpki-client