Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
File:                     iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json)
Hash identifier:          TvDJ1L+XnQPVRjXwLmqMTh/xGb33N4TnVc3HGT9gizI=
Subject key identifier:   D3:A1:B1:FE:D6:26:E2:58:31:38:D0:F2:7B:00:66:3C:C1:4C:30:6B
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Certificate issuer:       /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial:       105E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
Manifest number:          1021
Signing time:             Tue 22 Sep 2026 17:23:15 +0000
Manifest this update:     Tue 22 Sep 2026 17:23:15 +0000
Manifest next update:     Tue 29 Sep 2026 17:23:15 +0000
Files and hashes:         1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: Su2Ric2ME9wUMAo/BfsKm7+gRDm1LS0TWQrb39UavXU=)
                          2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: thWs/wjgTce2OH8uRbqin2U/9yRfT0t37bg0yz1umNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
                          rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4190 (0x105e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
        Validity
            Not Before: Sep 22 17:23:15 2026 GMT
            Not After : Sep 29 17:23:15 2026 GMT
        Subject: CN=6ab2b983-e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:be:06:8b:ac:3f:19:e9:98:01:d2:0d:0b:
                    4d:18:db:64:37:4a:ee:7b:28:10:af:05:13:7d:84:
                    c0:b7:21:8e:60:7b:52:0b:d7:f3:a6:a5:1b:8f:22:
                    ef:86:29:93:e8:68:53:89:a5:4d:8c:ba:be:2a:b8:
                    12:b9:2e:3b:a0:55:ec:79:0e:d0:6a:1c:cc:7c:a7:
                    d7:e3:09:f4:a8:17:f4:3c:91:11:7f:fa:ee:6d:bc:
                    7d:f1:1b:37:3a:f5:95:19:54:65:24:21:63:02:78:
                    92:32:68:2a:03:74:8a:72:4a:fb:49:54:75:02:65:
                    2b:5d:d6:00:7d:52:06:33:f3:12:6b:51:3d:94:db:
                    0c:7b:44:f6:54:83:47:6b:ca:a3:c6:79:a5:6e:92:
                    02:b2:3b:6d:7b:f3:83:6e:41:9a:c4:10:1a:63:a7:
                    7a:21:e6:f7:21:fe:94:13:08:1c:43:76:c3:ae:0c:
                    6e:16:99:c6:73:59:95:d9:0f:6d:9c:c4:ff:b6:b4:
                    89:d7:56:00:7d:16:87:33:3a:cc:d3:1b:7e:70:ea:
                    f8:05:40:d6:9a:90:a8:7b:d7:ca:30:32:c0:27:87:
                    e2:0f:3a:70:af:f3:70:3c:d1:83:f0:45:07:59:7f:
                    83:ae:4a:d1:9d:f8:0e:ad:54:97:d6:66:76:83:c6:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:B1:FE:D6:26:E2:58:31:38:D0:F2:7B:00:66:3C:C1:4C:30:6B
            X509v3 Authority Key Identifier:
                keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8f:59:9d:81:e3:ff:92:32:a2:f2:1b:22:d3:89:4d:a8:d3:
         77:d0:45:2b:f6:4e:53:2f:10:9f:e2:f1:8f:4d:f6:e2:ff:c5:
         7b:1b:fb:67:46:36:fa:18:a9:86:4c:6d:4a:20:d7:72:94:87:
         0f:11:36:f2:01:52:d1:2d:0f:41:56:94:c9:6f:a4:0f:98:bd:
         ee:4b:31:05:2e:51:b1:02:b6:8e:7b:4a:26:cf:01:47:e3:b4:
         c4:f2:b6:e0:68:29:68:4c:f1:42:a6:e2:cb:89:07:c7:8d:b6:
         8d:56:cd:d3:18:89:ea:b7:d5:57:16:c8:51:0a:7b:69:aa:09:
         e5:b8:d1:32:30:69:17:49:5d:af:da:53:b9:e7:ef:af:6e:14:
         a5:b6:32:f1:f5:f5:6b:17:2a:27:d4:b6:a5:1a:2a:e8:d3:c6:
         90:40:19:6b:68:86:ab:38:48:68:88:f2:34:db:c8:62:38:73:
         3d:23:ed:35:d4:f1:ef:a8:0f:20:36:0e:bd:63:a0:8b:b3:f7:
         e8:81:3e:81:03:6b:02:a7:1b:da:57:cc:11:e8:d5:87:0f:b9:
         98:09:ee:14:37:b3:aa:69:94:be:77:89:dd:69:69:3e:73:b1:
         ee:a0:fc:34:f4:a5:d5:ee:01:95:e7:ee:14:dd:41:4a:6a:26:
         37:93:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:32 2026 by rpki-client