Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File:                     aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier:          vRfNTmgO6mRbBpiqyqadQwJonXCWLC4+VvD3Tw7ILYw=
Subject key identifier:   09:C0:55:F0:05:F3:E6:87:CB:6F:1D:45:97:72:56:60:69:F4:0D:04
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer:       /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial:       0B45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number:          0B2A
Signing time:             Sun 20 Sep 2026 19:15:55 +0000
Manifest this update:     Sun 20 Sep 2026 19:15:54 +0000
Manifest next update:     Sun 27 Sep 2026 19:15:54 +0000
Files and hashes:         1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: CCHkxE2elUpSEXwoN2c39bFZAN9I2lJnLbpE81485tY=)
                          2: 2BDF72FA8C1211F184A8D0114511F970.roa (hash: tTwJEbv0EWMSnW/LNwHMoGpK+yZ0oG8h7PMKW387DV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
                          rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2885 (0xb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Validity
            Not Before: Sep 20 19:15:54 2026 GMT
            Not After : Sep 27 19:15:54 2026 GMT
        Subject: CN=6ab030ea-6f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:18:cd:09:95:40:74:79:26:a4:64:c0:c7:
                    5f:15:8d:85:b7:06:ee:f9:e0:7e:7a:64:17:a1:20:
                    10:5f:8d:fd:3f:06:0a:28:bc:71:9a:bd:a9:7b:55:
                    8f:17:02:1a:df:e8:03:a1:5e:c4:07:c7:bc:53:f2:
                    aa:b0:07:fb:ca:b9:a7:c7:72:40:a4:10:ff:a5:25:
                    cc:ac:04:fd:bf:f7:13:35:58:b4:a9:f2:8c:8f:dc:
                    09:24:74:6c:96:97:0e:77:bb:8e:f7:69:4f:b3:32:
                    b3:ba:3a:4b:0e:cf:4c:db:ab:f7:6b:14:84:e2:51:
                    b0:8e:e5:ac:25:4e:b4:ed:79:9a:5a:25:81:bd:7d:
                    ae:c9:90:15:60:24:09:5d:41:73:e3:85:2e:4e:04:
                    d5:c0:4f:be:14:f9:ac:a4:de:45:03:f3:88:37:ab:
                    1c:64:f1:36:94:1e:cb:a7:61:f2:44:86:c5:8a:74:
                    47:b6:e3:7b:2a:a6:37:dd:da:13:e2:78:d8:29:10:
                    f8:17:8d:44:20:9a:6c:e6:4d:9a:66:e6:e7:82:0e:
                    9c:f8:d2:30:00:e6:af:b2:b2:df:43:8d:3a:84:8f:
                    ea:63:c5:a4:42:37:d1:30:83:85:e7:0f:85:0c:3c:
                    4f:62:6d:2d:7c:76:4f:4d:70:02:15:8c:86:c3:67:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:55:F0:05:F3:E6:87:CB:6F:1D:45:97:72:56:60:69:F4:0D:04
            X509v3 Authority Key Identifier:
                keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:f3:ad:1b:c5:fb:8d:86:0c:16:7c:fe:25:09:22:74:00:
         3d:6f:95:40:56:36:8d:06:6d:69:a3:89:ae:c2:36:fa:f6:3f:
         c3:c2:97:60:82:2e:e9:ae:d8:2b:1c:60:b0:56:1e:8c:6e:ae:
         e6:f2:89:4b:29:0d:03:24:85:72:75:0b:5e:84:ac:3c:31:93:
         b8:89:83:1e:c6:1d:cd:f0:85:73:1d:4b:bb:7e:d9:39:2d:82:
         c5:67:08:a0:e7:37:19:75:7a:e7:97:24:02:6e:e3:eb:b7:9f:
         18:a9:95:ed:d9:67:ec:36:d4:f4:c7:83:95:71:bf:95:1a:6f:
         25:3c:b5:f2:99:99:c9:9f:a0:5e:38:1f:00:7e:f4:9a:b9:fb:
         68:7e:e3:3b:aa:6e:30:37:6a:33:21:ee:61:ab:5a:61:d2:82:
         32:5e:65:f4:2b:0f:69:2f:18:95:63:ea:1d:de:59:26:22:3f:
         bb:b1:5c:5b:6d:28:68:37:31:75:28:b2:8f:9e:e1:f2:2b:55:
         86:66:55:6d:13:87:64:47:a8:d9:ff:81:ef:7f:53:0e:28:09:
         ee:e6:d8:85:17:4f:40:99:15:f2:68:10:f4:48:68:92:2f:b0:
         a7:ce:b0:b6:17:cb:f9:37:fe:54:88:ee:3f:6b:2b:7e:8d:7d:
         8d:8b:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:44:20 2026 by rpki-client