Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
File:                     iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json)
Hash identifier:          tiACBxO7AgkBuQADG1dsEBgoMpL4LKuShJuP5yTTLyA=
Subject key identifier:   A8:9F:96:70:10:A9:7B:17:9E:1B:D9:FE:D5:26:CB:89:F9:C8:45:2F
Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Certificate issuer:       /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
Manifest number:          CB
Signing time:             Fri 09 Oct 2026 07:25:43 +0000
Manifest this update:     Fri 09 Oct 2026 07:25:43 +0000
Manifest next update:     Fri 16 Oct 2026 07:25:43 +0000
Files and hashes:         1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: rO7jkRPLHR8gF61AioG/9rbQ2wT1NJRnivVu3KLoyDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
        Validity
            Not Before: Oct  9 07:25:43 2026 GMT
            Not After : Oct 16 07:25:43 2026 GMT
        Subject: CN=6ac896f7-30ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:81:c3:2a:49:2c:54:cb:c7:8f:06:ba:6d:
                    d3:40:19:f2:2a:5d:41:3c:ec:ff:ed:22:16:fc:a4:
                    e2:a9:26:59:99:7d:d3:bf:c3:56:89:92:0f:e6:89:
                    27:aa:61:53:b2:05:82:e9:d1:48:b7:a8:b5:d4:b7:
                    a9:18:5d:e1:2d:d0:dd:c1:76:11:99:dc:47:4d:75:
                    23:a6:b4:b4:ec:41:36:24:7b:1f:38:a3:0d:5f:97:
                    10:c2:b9:aa:87:54:11:8d:1e:51:4d:c2:45:98:a9:
                    0a:c7:bf:6d:2c:26:c8:d0:49:00:fc:52:70:14:d6:
                    71:b9:45:18:e4:87:1d:7c:91:c8:3e:3f:32:43:98:
                    51:52:93:81:7d:1d:0c:17:2f:62:79:90:76:6c:ba:
                    53:e0:ad:00:4e:8d:a9:2f:d5:2e:21:96:39:2a:35:
                    bd:be:f7:50:54:07:ce:7d:43:1a:8d:1a:24:d9:49:
                    e1:28:44:c5:19:9a:c0:56:ea:27:9d:f4:2b:70:a5:
                    fe:66:39:0d:f9:a7:e7:57:da:f3:9c:2a:7f:b9:aa:
                    4a:03:57:47:10:e4:da:17:95:fd:77:b1:68:5a:e9:
                    b1:f4:f6:80:5c:0e:04:5c:2d:e5:14:b1:96:da:13:
                    01:fa:dc:43:84:e8:f2:99:e7:d9:aa:5c:4b:f4:35:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9F:96:70:10:A9:7B:17:9E:1B:D9:FE:D5:26:CB:89:F9:C8:45:2F
            X509v3 Authority Key Identifier:
                keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:01:fd:8c:3b:d3:d2:94:3b:96:d0:26:3d:4e:9f:f1:76:
         69:df:6b:03:69:f1:51:6f:68:98:40:90:1a:31:2f:a5:38:d9:
         d9:6c:58:94:b3:95:d3:54:58:51:5c:db:47:40:50:d5:3e:29:
         11:3a:56:93:46:f3:2c:8a:ba:db:f2:b4:b1:da:e8:51:f0:c2:
         1f:19:78:b4:99:e8:73:6d:d9:9b:d7:64:a2:8c:d4:c2:a5:2a:
         09:23:f0:33:aa:af:1a:8a:24:db:c5:5d:b0:f4:19:d3:ef:1c:
         c5:52:d7:6e:9c:9f:53:b9:bf:36:45:4b:7b:22:81:41:16:ae:
         43:5d:bb:b5:ef:91:cf:ee:25:c0:76:bd:ef:4d:9e:30:3a:16:
         3c:9e:af:de:8f:d9:c7:4d:21:38:f2:cb:13:30:5e:38:29:e1:
         7a:80:9c:53:4a:03:3e:dc:c4:e1:af:f0:3e:69:07:9f:b7:63:
         2f:42:41:83:ee:bd:a3:52:b4:ad:b5:d2:b2:d8:f8:7c:c5:43:
         f1:44:3f:19:16:8f:6b:35:b7:07:35:9b:de:18:8d:38:b4:84:
         c0:91:c1:6d:b6:7e:d7:da:da:fb:b7:3a:ff:f9:7a:11:0e:b8:
         c9:94:5e:1b:67:ce:2a:2c:fa:10:31:76:14:92:1a:e7:34:0a:
         2a:27:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:58:30 2026 by rpki-client