Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File:                     IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier:          L+vR1EliK+7h/dMTkyXhAQhszXEaihm8+ZlNsSSBhQI=
Subject key identifier:   0F:F4:64:E7:A4:1C:7B:49:63:1A:3B:E5:CF:A7:06:E2:E8:DB:66:5E
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer:       /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial:       0830
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number:          0821
Signing time:             Wed 22 Jul 2026 21:40:47 +0000
Manifest this update:     Wed 22 Jul 2026 21:40:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:40:46 +0000
Files and hashes:         1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: vVnvro17kef+7j/c9xxmSuGD/6CMj/T1j5gaQtg0ts4=)
                          2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: /il7Y6auRJePsodKXKmWzUMba5zaOkvIV7u+El4UTkw=)
                          3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: s5h3g17ryEBKDiDmSSciSjoKE05h0QA0TKlVxp3Bj0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
                          rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
        Validity
            Not Before: Jul 22 21:40:46 2026 GMT
            Not After : Jul 29 21:40:46 2026 GMT
        Subject: CN=6a6138de-1d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:ca:08:00:3e:62:91:a6:6f:c5:ab:c9:b4:
                    9e:4c:48:fa:df:48:61:73:05:4b:bc:fa:d1:18:42:
                    fb:3a:80:7f:fa:2c:8b:cf:41:04:5b:de:44:e2:1e:
                    c2:bc:d0:7f:f7:c5:35:54:c3:fe:31:d0:1e:c6:51:
                    8f:3f:32:42:76:14:ea:f5:2e:b3:3c:8d:ed:0f:11:
                    7f:91:ec:80:37:0e:54:8c:c0:e5:38:15:11:31:ad:
                    c9:26:53:0c:4b:bd:d0:0b:eb:f3:00:b6:46:12:40:
                    84:78:a5:7d:de:43:8c:a7:ed:f9:c6:e7:36:0d:84:
                    4c:75:a8:6e:eb:8d:f1:bf:ec:d1:59:9b:c8:af:17:
                    13:9c:46:c0:a2:46:6f:92:46:a4:97:33:71:a0:94:
                    6a:cf:f7:65:c2:26:05:dc:cd:35:7a:7e:ca:65:ec:
                    77:74:33:fe:53:36:b6:5a:d9:ee:9d:06:55:cd:46:
                    33:d6:c4:63:00:74:39:cf:cd:4b:63:3b:49:bc:bf:
                    7d:ad:65:ee:30:6d:d0:c8:72:9f:a2:4c:4e:33:d6:
                    c3:06:be:81:a2:57:ca:e3:eb:e9:4c:f1:91:d4:0f:
                    b7:45:63:1d:c2:cc:06:34:72:90:90:34:94:73:52:
                    89:44:99:e6:15:b3:1a:2c:44:1b:51:f5:7f:13:32:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:64:E7:A4:1C:7B:49:63:1A:3B:E5:CF:A7:06:E2:E8:DB:66:5E
            X509v3 Authority Key Identifier:
                keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0c:5e:e1:12:f3:b8:73:b4:3f:a5:eb:40:7a:0d:03:ec:da:
         5d:04:95:9d:fe:46:3c:2e:4e:1b:af:02:a3:e0:f9:be:31:49:
         d3:f6:5d:e4:de:96:ac:4c:e7:e4:81:8e:17:71:a0:46:0f:9e:
         b9:d2:f6:e4:b1:44:55:70:30:e8:0b:f0:0f:4e:23:36:64:5c:
         b8:c3:61:f4:d3:d9:01:89:de:51:f4:0b:ca:e9:b8:a8:dc:d0:
         bb:43:6f:2e:70:0a:a1:7a:15:ac:1d:0f:16:3c:a6:82:b8:20:
         26:1b:39:f5:e9:1a:cb:09:74:41:c3:90:8f:41:75:f1:0b:45:
         59:e6:b8:b1:e1:88:ac:01:39:d3:67:64:0a:62:34:36:b5:73:
         8d:0b:83:9b:5e:52:fc:8b:09:71:a1:fd:04:08:16:40:b8:ea:
         d3:a9:18:00:17:4c:d2:bf:52:fc:0b:25:28:63:8f:50:c3:2c:
         8c:e6:45:78:f2:3c:a3:5f:89:08:2f:35:a8:53:11:c0:d6:83:
         0f:ca:5e:18:40:9f:52:0b:dd:4b:7a:cc:f5:37:8a:a4:41:8d:
         98:7f:8e:2a:a0:4e:ef:f9:7a:78:90:d5:c2:4c:65:b6:35:a9:
         b1:14:24:04:f7:29:63:1c:7d:64:30:74:66:9f:06:06:86:6c:
         1e:12:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:47 2026 by rpki-client