Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
File:                     IY_bC_-9DsQ8Nb53hZviztXFQOo.mft (raw, json)
Hash identifier:          NkJyVnQZIgGDCqv6pIMiBE30mcT24y00cIZ888CFfEg=
Subject key identifier:   FB:9B:CB:9D:6C:D4:92:C3:2E:E3:AB:22:32:E5:49:72:F1:57:C9:81
Authority key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA
Certificate issuer:       /CN=A91CF477/serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
Manifest number:          31
Signing time:             Sun 27 Sep 2026 09:16:17 +0000
Manifest this update:     Sun 27 Sep 2026 09:16:16 +0000
Manifest next update:     Sun 04 Oct 2026 09:16:16 +0000
Files and hashes:         1: IY_bC_-9DsQ8Nb53hZviztXFQOo.crl (hash: 02yZEA1R5CzFNF1oN876zZG/D+sxmtMocf+NSk5sVpc=)
                          2: BB05DCBA712511F1BDAC11CB6EA30FBC.roa (hash: P4GuX5ou/U+Rpw8seN62fuLfOYRcHVXRnnvShlDFcO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
        Validity
            Not Before: Sep 27 09:16:16 2026 GMT
            Not After : Oct  4 09:16:16 2026 GMT
        Subject: CN=6ab8dee1-b0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:c1:fe:84:47:48:00:41:bf:04:e9:64:a2:
                    49:5f:6f:46:48:c4:ae:92:91:28:28:72:48:3f:73:
                    84:d0:2c:17:80:54:55:59:f1:66:3e:6f:7a:8b:c5:
                    04:28:a7:e9:2d:c4:58:7a:ba:e5:af:88:ae:a3:fb:
                    3e:f8:b0:f2:fd:32:b6:31:53:ac:5f:76:e8:fb:09:
                    68:26:94:e9:3a:a4:7c:19:bd:ee:f7:78:6f:51:94:
                    06:fd:c0:2f:9b:71:65:e8:91:a4:e1:67:d9:dd:0f:
                    52:7d:2a:35:2d:7b:40:8d:48:44:cb:fc:98:2b:6f:
                    e2:05:c0:68:28:db:f5:75:99:bb:6c:f2:ca:94:f9:
                    f6:44:af:04:6a:bf:23:11:0b:a9:77:10:52:a6:11:
                    8f:94:5a:b3:fa:50:de:34:01:6b:ac:54:a0:48:5b:
                    d8:5f:c8:d2:15:0b:00:62:b6:69:e9:22:84:b9:ec:
                    a0:5a:6b:7a:b9:29:21:7d:fd:08:68:54:ba:0f:6a:
                    4f:e5:78:dc:ca:3f:a4:80:15:c2:52:4a:4d:5c:3c:
                    d0:c0:ee:0c:12:c3:9c:d1:e9:07:6e:aa:ad:d4:78:
                    6a:6e:ac:e9:32:29:78:4b:e6:2d:2e:fd:48:1e:f1:
                    63:4e:92:60:15:14:94:7d:94:07:64:86:ce:17:0b:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:CB:9D:6C:D4:92:C3:2E:E3:AB:22:32:E5:49:72:F1:57:C9:81
            X509v3 Authority Key Identifier:
                keyid:21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:99:ad:5a:71:51:41:eb:a0:34:db:b5:a8:bb:b0:d5:6a:6a:
         87:7a:de:50:11:0a:65:89:ea:18:60:41:f9:77:a4:0b:88:a6:
         83:68:05:52:e4:a3:a3:d5:9d:fb:80:48:00:52:7c:68:10:55:
         a3:94:38:46:9d:5c:b7:16:85:b0:c5:d4:7d:4c:3e:5f:34:c9:
         70:89:3d:77:35:5b:25:5a:54:c8:f1:47:58:a4:08:18:6f:6f:
         32:c7:3b:3c:d9:9b:f6:e3:9c:a6:66:95:36:2d:7a:7d:74:64:
         f8:7b:94:20:be:61:55:3f:5c:f5:c4:32:92:bd:27:c3:ca:02:
         c4:88:ac:32:ae:d1:43:59:e1:8b:fc:16:be:d9:b3:2b:fa:9e:
         4e:48:89:e8:41:fa:b1:38:11:71:c1:15:fe:42:f5:9c:05:dd:
         41:83:af:5e:82:34:3b:b4:63:de:a9:07:5e:2f:fc:24:a7:de:
         6a:f6:64:03:64:e9:95:60:bb:06:af:d4:9c:2e:3e:ac:89:63:
         39:15:89:8c:47:bd:42:7c:57:8f:ae:88:d5:5b:e1:d2:23:b8:
         00:23:06:4b:28:12:83:15:05:0d:42:02:42:39:77:62:dc:cd:
         42:46:34:aa:80:c8:84:cb:54:66:bc:ea:3a:b2:be:a3:56:ad:
         c3:1f:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:26:59 2026 by rpki-client