Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          64uTl9c7hZJbeQb5xjZ2oHmcPRn8+aEdw4IroV/yLHQ=
Subject key identifier:   BD:6F:B0:62:7C:94:69:6D:B1:65:7A:FB:EC:42:4B:96:60:E2:29:60
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          01B3
Signing time:             Wed 23 Sep 2026 03:53:45 +0000
Manifest this update:     Wed 23 Sep 2026 03:53:44 +0000
Manifest next update:     Wed 30 Sep 2026 03:53:44 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: fgW0vr2+ktgFaXumD6C49Z+Zz3zi+M0T+GGRKxWzVao=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: +hujpBHJUbdedQIkPrbVB4NwPgQUBD595iWd0J45vYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Sep 23 03:53:44 2026 GMT
            Not After : Sep 30 03:53:44 2026 GMT
        Subject: CN=6ab34d49-d72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:c8:68:2e:41:c2:65:74:11:a8:31:63:b5:
                    e3:44:31:97:85:52:4f:7c:53:b1:4f:17:7c:c8:ce:
                    20:20:09:1a:00:13:6a:3d:22:71:14:66:51:e5:7b:
                    ec:40:04:69:91:e3:a9:c3:74:d4:2e:14:f0:21:6c:
                    57:31:7a:1f:3c:6d:c4:d7:35:9b:79:7b:b2:b2:e7:
                    bf:00:03:e9:d2:c7:73:18:7b:2c:11:45:3e:03:7d:
                    86:a9:54:24:0d:7f:de:9a:26:c8:c8:99:9b:f2:61:
                    4f:54:9c:64:63:50:3a:58:b3:98:c2:92:e3:03:72:
                    30:c2:40:aa:5e:4c:33:3f:b0:f6:4d:89:ef:30:c3:
                    16:9d:4b:58:f2:ae:40:e4:8d:34:65:c2:e9:5a:8a:
                    b4:1f:d1:f9:97:ac:26:32:9c:47:fa:36:75:47:92:
                    35:b0:ab:3b:46:a8:57:ff:60:16:71:d0:7d:2e:f8:
                    33:e2:af:b5:62:eb:27:aa:6c:4f:26:5c:89:21:3f:
                    e2:63:e7:91:e0:50:da:ee:46:76:2f:e4:90:6b:a4:
                    c1:df:e9:34:f0:e1:04:63:e0:53:2d:6e:8f:90:f7:
                    67:ca:ae:41:b6:14:d6:bc:a4:92:f3:67:83:c5:09:
                    65:61:28:4a:0b:45:e8:f8:07:0b:dc:d3:94:6b:97:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:B0:62:7C:94:69:6D:B1:65:7A:FB:EC:42:4B:96:60:E2:29:60
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:88:18:3f:70:e3:0b:13:a5:cc:4b:db:00:11:c1:aa:4d:6e:
         21:c3:2c:f3:d4:f2:57:8c:37:8d:1c:94:68:00:ad:48:38:14:
         03:73:97:4a:60:4b:8d:0a:a2:49:ed:86:72:5f:87:1b:07:d5:
         9a:b1:da:8d:55:45:ef:09:1f:26:cb:fb:52:3d:b4:58:9d:e5:
         8c:fe:5f:5d:89:8c:d1:cc:fc:f6:d8:53:68:3a:66:cd:83:ba:
         ed:0c:11:22:37:cb:d2:0e:f0:10:11:ca:04:6d:18:4e:c2:52:
         08:d9:f8:8c:11:54:ba:88:25:9c:2a:52:8e:3f:1b:56:ac:6f:
         d8:69:f7:e3:b8:6d:25:22:6b:05:43:2f:41:bf:6e:93:d7:e0:
         11:30:08:a6:b6:8b:9c:c6:9b:8c:be:b5:ae:7f:a6:ad:56:60:
         72:cd:95:cf:86:89:74:0f:5a:68:a8:e1:14:2a:f2:7c:62:89:
         74:8d:0c:d0:1f:3a:12:d2:75:69:27:5f:fe:48:e7:75:0e:ae:
         b4:d2:cc:fa:ca:2f:64:38:1a:70:fe:90:cf:10:89:40:61:d6:
         58:1b:b6:41:1f:a7:56:72:d0:a9:59:d7:fd:ae:d7:1c:f1:08:
         19:86:bb:2b:03:80:be:a3:2e:7e:fe:3b:db:f4:2e:10:f3:dd:
         65:be:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:23:05 2026 by rpki-client