Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
File:                     IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json)
Hash identifier:          2ajtsO76v2aWlpYbdlU/Tl01ptniJ5JwCn4YehTyD20=
Subject key identifier:   3B:62:9F:CA:36:A4:82:D2:62:60:8B:49:26:B1:27:18:07:F6:64:B8
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Certificate issuer:       /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial:       0C00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
Manifest number:          0BEB
Signing time:             Sat 26 Sep 2026 19:03:58 +0000
Manifest this update:     Sat 26 Sep 2026 19:03:58 +0000
Manifest next update:     Sat 03 Oct 2026 19:03:58 +0000
Files and hashes:         1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: PPsu/qe3ElyCw5iWts1PmYbIav+vFXPJYd4TufreQfY=)
                          2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE=)
                          3: 0C63520A89A311F19CE9D9314011F970.roa (hash: btffrqxnv+LEdVRDJ0NPhpvOIf7HzJYoZs3Wq7IbLmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
        Validity
            Not Before: Sep 26 19:03:58 2026 GMT
            Not After : Oct  3 19:03:58 2026 GMT
        Subject: CN=6ab8171e-8357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:a3:db:7a:93:7a:9b:05:0e:e3:b0:2e:9b:
                    25:1d:de:fa:9a:37:5a:f3:e1:99:4d:b5:16:df:74:
                    dd:ea:5b:3d:06:20:2d:4f:8d:01:f5:ac:b0:55:7e:
                    51:9c:8e:2c:b4:f3:13:c4:22:5b:06:21:6a:e7:5b:
                    d7:43:e0:06:b5:78:2a:73:8a:b7:dd:30:14:58:a3:
                    8a:a3:4b:c6:82:d7:21:2d:45:46:52:54:3a:c5:eb:
                    f5:85:c0:1d:35:60:a1:94:bb:d1:05:9d:89:2f:79:
                    21:ad:1e:b7:6f:bf:31:16:d2:0c:8c:01:dd:a3:25:
                    d7:ab:2c:f5:b9:ad:4a:e9:30:61:cb:e6:ae:ef:92:
                    b3:15:06:ed:09:e8:b1:1e:fa:78:61:68:05:ed:7c:
                    9a:41:f9:1f:50:bc:d8:96:f5:4f:fb:cc:13:db:ab:
                    ee:64:70:92:ad:00:bb:91:ee:0a:cc:5b:14:08:be:
                    d8:22:02:94:3a:92:31:b9:ad:fa:bb:9f:b3:8c:58:
                    fd:3e:a4:94:22:f1:27:f9:8b:cc:e9:aa:83:02:95:
                    21:2a:e5:4d:6c:2c:c6:91:90:8c:48:f4:fc:f8:54:
                    74:95:07:4d:9a:be:e5:79:f4:7e:fc:7e:e4:ad:c4:
                    9e:ed:db:fe:77:29:af:d9:30:52:11:07:df:b4:4e:
                    24:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:62:9F:CA:36:A4:82:D2:62:60:8B:49:26:B1:27:18:07:F6:64:B8
            X509v3 Authority Key Identifier:
                keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7e:ec:1d:1c:c8:16:a8:8f:cd:ec:a0:99:c4:8c:77:7b:af:
         de:41:ec:95:c5:7a:e2:be:7f:b9:b1:8f:c2:c2:1b:53:99:b6:
         52:93:18:36:20:3a:fd:08:cd:94:85:dc:6c:93:cf:4c:1a:f1:
         36:9c:95:22:52:1a:16:f1:f3:f4:da:72:c0:35:59:e2:1b:ca:
         76:7b:90:53:b5:31:81:1d:73:e6:01:26:4d:ac:f7:b7:b7:77:
         d0:d5:cd:13:ab:2b:42:83:ef:10:76:53:17:7f:7a:4c:18:6f:
         63:11:aa:6d:5f:ad:04:d6:55:4a:9b:01:3d:a7:0e:06:e0:15:
         e7:ec:9f:8d:33:3b:49:f5:18:35:87:5c:5b:68:ba:4d:c9:3e:
         b5:b6:5c:98:0b:cf:02:0c:18:19:99:d0:d1:4b:1f:40:fc:bc:
         5f:4c:39:97:38:07:7d:08:c1:88:5d:67:31:42:07:32:ab:17:
         1e:c0:24:a5:a3:3d:10:c4:a0:fa:99:77:ee:fc:1a:ff:2d:07:
         a0:f9:fe:29:3b:de:16:c7:14:6a:44:b1:af:d3:db:fd:03:4f:
         0d:5b:7d:91:ec:21:68:a9:e7:f0:57:5d:9c:f4:0b:4f:33:73:
         c7:33:74:81:51:06:4e:cb:ba:3a:70:d8:f4:a4:d1:60:26:b9:
         5a:ec:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:35:00 2026 by rpki-client