Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          HA7+G9vtSbgTb4P1MrShZEf6rKbJaLBGqEu3P6EfdFk=
Subject key identifier:   3E:C4:43:57:B1:6A:C3:C8:64:3B:37:F4:39:49:27:23:BA:39:3A:5F
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          0219
Signing time:             Fri 25 Sep 2026 02:56:41 +0000
Manifest this update:     Fri 25 Sep 2026 02:56:41 +0000
Manifest next update:     Fri 02 Oct 2026 02:56:41 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: pjgOHqOMtAhdOHCqes67bwvnQIYNOP3QPhrV2xy0wTs=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: Sep 25 02:56:41 2026 GMT
            Not After : Oct  2 02:56:41 2026 GMT
        Subject: CN=6ab5e2e9-7fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:20:44:5b:d6:4d:45:9a:da:08:21:47:69:
                    d5:c8:76:ee:17:8a:f2:ca:5a:d6:91:a5:d3:c1:a3:
                    08:a3:cf:2c:cf:1c:dd:71:b9:08:f4:ee:81:03:92:
                    8c:4d:f3:d2:43:d3:a7:ef:37:a1:c0:5c:55:d7:0b:
                    11:8d:2b:90:12:81:a0:c4:9f:19:a3:26:ae:fd:12:
                    31:c4:35:5f:71:99:b6:97:d0:e9:4b:92:48:dc:5b:
                    e4:92:b6:08:a1:f2:bb:67:c0:dc:e7:d4:99:bf:db:
                    aa:22:22:68:03:f1:b0:2f:7a:8c:33:36:50:84:ee:
                    a3:f1:10:09:c0:82:2a:02:09:33:f9:40:52:29:4e:
                    ab:ce:b8:4e:7c:bb:bf:6b:d0:98:dd:71:e2:65:d1:
                    76:95:cc:db:1c:41:4f:e0:cb:16:68:f0:b5:82:c4:
                    92:78:46:6e:f6:23:89:e3:99:4d:fe:9b:d4:1d:b2:
                    b7:18:0d:02:f4:fb:9f:1f:1d:80:92:ab:e6:58:d3:
                    65:a7:91:48:70:6a:d1:19:ae:63:00:38:22:87:5b:
                    7a:a3:71:a4:5b:78:25:de:74:b2:c1:6d:e5:56:97:
                    74:f1:a1:9a:61:ba:fc:07:51:47:14:4d:09:c0:21:
                    69:45:0f:aa:ed:5a:90:bc:f4:e0:09:3d:2c:14:8e:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:43:57:B1:6A:C3:C8:64:3B:37:F4:39:49:27:23:BA:39:3A:5F
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:fd:57:0b:8c:88:3c:c2:f1:b0:55:47:f5:bb:c8:44:6b:
         38:2e:b4:06:a3:a6:df:8a:a6:3f:4a:8c:f7:66:4b:d5:dd:87:
         e6:e5:81:14:ce:d3:62:cb:d0:61:d5:68:15:08:00:fa:e3:52:
         b0:2f:29:d8:6a:8d:be:3c:1e:42:bf:8b:a1:a0:3a:8b:25:3f:
         1e:9a:25:07:2c:c5:cf:bc:17:c2:9e:74:a7:37:88:bf:72:e1:
         14:7e:12:25:30:53:30:99:8d:6a:ea:cc:52:b4:e4:e8:91:f1:
         bd:5d:93:1a:cf:e8:64:d2:af:af:c3:e0:bf:a3:c4:48:31:30:
         04:cb:81:8c:23:84:41:69:56:48:5e:b1:26:49:83:82:35:68:
         a3:2b:ac:ef:4b:4e:c5:e9:fe:d9:06:63:1f:02:ab:2e:1c:ee:
         89:b2:e5:e8:e2:af:9e:a0:8e:39:4f:b0:28:05:81:e2:26:a0:
         1d:53:60:fd:8c:dc:c7:d5:c3:61:4b:e9:b6:30:cc:57:24:65:
         20:b5:db:6a:f8:4a:db:eb:9d:9e:11:2c:0a:e6:b3:7c:98:bc:
         e1:d2:aa:c8:d6:3b:fd:7b:6e:7a:0e:46:12:56:18:16:c5:63:
         fa:0d:26:81:97:c8:83:0f:66:e8:cf:08:3f:8a:9e:af:0c:02:
         5d:c8:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:28 2026 by rpki-client