Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
File:                     iEJo0B0Z6qM0kqniXPayue5vG34.mft (raw, json)
Hash identifier:          MBiWvOQio+vmXq7mm4fKIgYj83rvRyUcEOWy+1BSIO0=
Subject key identifier:   B7:FF:14:BC:7C:CC:31:CC:91:F3:FC:91:69:9F:05:6C:DD:8E:09:62
Authority key identifier: 88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E
Certificate issuer:       /CN=A91C9ADB/serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
Manifest number:          26
Signing time:             Fri 09 Oct 2026 09:37:47 +0000
Manifest this update:     Fri 09 Oct 2026 09:37:46 +0000
Manifest next update:     Fri 16 Oct 2026 09:37:46 +0000
Files and hashes:         1: iEJo0B0Z6qM0kqniXPayue5vG34.crl (hash: an+yHLxp4n7ZBnb7btSKBnN9QoFpOVFU/anZpyxklP8=)
                          2: 2571056C8F1611F1B716621D3511F970.roa (hash: hfGZNvQE+P3B8l2oyHgnKQJxAfVEZlWoNG/6zvrHKow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl
                          rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9ADB, serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E
        Validity
            Not Before: Oct  9 09:37:46 2026 GMT
            Not After : Oct 16 09:37:46 2026 GMT
        Subject: CN=6ac8b5ea-558e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:a1:18:5a:c6:e4:f6:24:c8:ac:39:01:e3:
                    ef:79:7f:cc:29:ac:02:66:dd:17:38:26:f6:b5:2e:
                    43:ea:0e:24:22:00:4f:2a:d5:9f:e7:bf:62:c5:fe:
                    83:d6:27:da:b6:a9:0b:ec:ba:ff:67:66:9d:fe:0f:
                    6b:ea:5a:07:fc:36:9f:77:e2:11:83:7a:7a:2f:cd:
                    93:cc:e9:f4:52:54:5a:2f:0b:21:82:f5:44:50:46:
                    98:8b:f1:5f:28:14:0c:80:3b:36:d9:bd:65:14:96:
                    2e:4f:df:23:30:28:49:d7:07:35:ba:18:94:b4:3c:
                    d5:e4:6e:23:bb:b9:bd:6b:d8:39:49:5b:d0:94:92:
                    f6:e7:0c:54:2d:2c:81:2b:70:36:fb:bd:97:cf:09:
                    62:2a:c0:20:e6:07:31:75:a5:48:32:7b:3a:94:ed:
                    f7:f1:d5:6f:2e:0d:99:55:3b:87:3a:bc:74:cb:f8:
                    3b:26:de:c1:f2:5f:bf:f3:f6:ae:10:4e:2f:42:2b:
                    55:21:4b:7f:c5:c9:cc:79:65:4d:50:dc:ba:f9:61:
                    3b:b5:11:8e:a6:e8:69:c1:18:50:74:6d:2a:f7:50:
                    29:f0:33:bb:8d:02:fd:d5:a2:33:88:62:b9:59:7e:
                    cd:0f:c2:43:a7:f7:14:ee:62:ed:50:e0:39:65:b9:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FF:14:BC:7C:CC:31:CC:91:F3:FC:91:69:9F:05:6C:DD:8E:09:62
            X509v3 Authority Key Identifier:
                keyid:88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:72:7c:32:b4:e0:17:2b:5b:99:bd:df:e1:99:5d:9e:8c:da:
         42:f1:13:38:2c:bc:c1:d8:b4:ec:48:1f:d1:55:15:c3:3c:64:
         31:f6:f1:8b:c2:ad:68:21:ad:b4:c7:bd:62:97:b1:3c:36:89:
         e5:d2:10:e8:72:8b:cf:a0:9f:49:3b:e8:75:02:6f:ba:8a:25:
         a1:9b:3d:0d:ab:00:b1:c5:c8:de:41:f9:81:61:bf:8e:51:e3:
         d7:b9:af:56:32:0c:73:c0:e0:0e:ea:f9:a8:35:10:dc:b8:cc:
         11:86:d4:59:89:5b:50:80:91:74:00:3d:e5:34:21:54:c1:c8:
         f8:76:53:b8:e6:a5:c4:72:ea:e6:cd:90:9f:d4:f3:44:40:99:
         c9:cc:2a:12:8f:cf:4d:7d:da:2e:13:38:77:db:b0:b4:b3:3f:
         19:a1:47:0a:d7:c5:01:d7:72:ed:7d:be:45:9e:81:3a:0f:64:
         fd:da:5d:7f:1b:81:4a:86:0c:fe:41:3c:d9:43:16:d8:f6:1e:
         64:15:12:2e:de:a0:5c:d9:46:20:37:96:e2:1f:85:2b:99:f1:
         84:0f:f0:6d:d6:b6:82:94:fa:00:4c:d6:2f:1d:1c:0a:e8:11:
         f2:21:43:61:f9:a4:11:b9:cf:5d:c8:09:19:50:2e:3b:c8:d3:
         c2:dd:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:03:48 2026 by rpki-client