Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File:                     IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier:          TiqXgij9Lh+48elt8Kw7jCR8PC0LUYyD9npmuG0nwpE=
Subject key identifier:   03:C8:2E:BB:00:D1:CC:1D:9B:7D:99:BC:81:F2:C1:68:5B:86:89:C5
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number:          074F
Signing time:             Tue 22 Sep 2026 23:31:54 +0000
Manifest this update:     Tue 22 Sep 2026 23:31:54 +0000
Manifest next update:     Tue 29 Sep 2026 23:31:54 +0000
Files and hashes:         1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: hJD3qFZvmhJtBvoZIDH1PvM2GKG8fXCVg3KowKdb6Zk=)
                          2: 65121B70A69511F1971C28813211F970.roa (hash: 3Opr5JSqsOwr6wivXPiUX4wG7/e2QgnlOHHv5rplwqk=)
                          3: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Sep 22 23:31:54 2026 GMT
            Not After : Sep 29 23:31:54 2026 GMT
        Subject: CN=6ab30fea-255a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:1d:47:7d:e3:e8:57:35:b7:c9:19:6d:8a:
                    15:5b:f8:ff:e0:ea:10:08:64:5d:dd:56:bc:0b:51:
                    c5:5e:43:8e:e5:ef:86:28:a7:d2:85:5e:3e:b4:72:
                    8e:8d:2e:1c:3e:1f:c2:aa:4c:cd:c1:c0:94:ad:34:
                    c3:ce:1e:06:e0:9c:15:fb:74:28:15:2e:89:e5:cf:
                    0a:73:9c:29:0d:13:ed:47:af:30:69:5c:eb:8e:99:
                    89:73:f4:9c:cc:30:e7:89:cb:33:fa:6b:37:4b:cd:
                    d3:f8:02:a6:39:bb:f2:38:e3:c4:80:5b:71:99:19:
                    3d:79:76:d9:c2:d3:2b:45:1a:6d:4d:04:37:f4:2e:
                    82:ae:c9:56:97:18:ad:b9:17:ab:1d:65:47:c4:94:
                    82:76:40:49:12:a1:c1:dc:c1:4e:a9:d0:c9:d4:b2:
                    35:c8:93:18:d5:96:10:b2:f1:ec:10:0b:d8:b1:bf:
                    63:5b:ee:9a:03:32:2a:7c:62:e9:85:73:7e:81:0a:
                    fd:1d:ca:ef:0c:5a:1d:5e:73:06:2c:8d:e5:a8:b7:
                    c0:27:f4:48:73:0c:05:35:21:79:77:9b:b1:1a:23:
                    c7:23:0e:25:70:1c:1a:bd:b5:08:05:3f:83:67:da:
                    a0:e5:44:45:6e:28:bb:af:1d:7b:4b:48:f1:d8:c7:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C8:2E:BB:00:D1:CC:1D:9B:7D:99:BC:81:F2:C1:68:5B:86:89:C5
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:12:c6:41:f6:1b:9c:53:5e:8c:84:45:ba:ef:31:88:4b:ec:
         a1:c1:7d:94:c3:5c:08:cc:0d:20:28:ca:12:9e:95:86:51:5e:
         2d:fc:e4:53:f0:fa:5d:aa:70:17:16:8d:ff:91:2d:87:80:19:
         b4:4b:3a:b6:12:f0:ef:bb:c3:38:90:cb:0c:1b:97:e9:a7:72:
         3f:bb:fb:f0:01:d6:50:c4:3b:88:e7:25:ce:15:29:1e:48:95:
         a3:b5:46:06:c4:8b:ae:02:38:a5:eb:34:fd:c5:f0:ae:2a:2d:
         6c:f1:cc:c6:d7:49:4c:b9:b9:1a:a4:d6:40:33:6f:37:52:81:
         f2:8b:00:56:0e:53:07:3f:ff:43:c1:87:3a:f8:bf:fe:03:f4:
         10:c8:b7:62:5d:4e:b7:a7:ce:25:48:7a:52:e0:cd:e8:0e:82:
         20:b0:5b:01:b1:ab:a5:a8:ab:d5:f4:ea:5e:8f:e7:98:d0:60:
         7a:a1:78:20:49:d6:a6:e1:e2:89:b5:48:76:4b:f7:30:47:ab:
         7d:36:39:59:11:53:f5:eb:cb:05:a8:d1:ef:cc:ef:67:c2:e2:
         52:e2:48:10:1a:27:5c:c7:56:71:b3:ee:47:ab:a4:e7:04:fe:
         23:09:c0:29:65:7b:5f:77:9d:10:ce:89:36:c4:06:7e:73:84:
         04:ee:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:47:18 2026 by rpki-client