Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File:                     rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier:          kkunNN/nt034ejnp1U0u3xC0v06Zk5bUECIJxbtbkBA=
Subject key identifier:   72:9E:D9:8B:2A:D3:DD:F2:A7:29:40:5C:BE:4B:EE:84:1A:72:9B:D6
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer:       /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number:          87
Signing time:             Sun 27 Sep 2026 08:13:18 +0000
Manifest this update:     Sun 27 Sep 2026 08:13:18 +0000
Manifest next update:     Sun 04 Oct 2026 08:13:18 +0000
Files and hashes:         1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: Sg6vZOUM8deUXV5bOlNuLp8cF7+ofA4uEA6j+h1dqKM=)
                          2: 75BC4B2A5D7611F1B2098786C1833773.roa (hash: ta8dEmU7Z8Oi4RN7K77WKBa90qpszc7XzNZIpq6JXPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
        Validity
            Not Before: Sep 27 08:13:18 2026 GMT
            Not After : Oct  4 08:13:18 2026 GMT
        Subject: CN=6ab8d01e-3ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:d7:59:81:7b:b9:c0:fa:24:d4:d1:df:0c:
                    ff:28:2d:15:88:f1:c7:20:c3:05:38:42:a6:00:61:
                    21:0f:ff:6a:8d:27:a2:e7:0b:9e:81:7e:d7:7c:38:
                    0a:a9:b9:7e:1a:48:88:8f:68:38:fb:53:2a:b0:d9:
                    72:6f:79:f6:da:af:87:0d:f0:0e:63:42:25:6e:63:
                    2f:d2:8f:04:2d:de:2c:a9:b2:33:bf:15:70:98:72:
                    58:7a:80:d3:63:5c:3c:a6:9e:b4:60:8b:39:02:9e:
                    ac:ee:db:89:6e:93:a1:be:25:a7:39:b7:12:db:0f:
                    06:c1:7f:0f:a9:d0:33:e3:ac:bb:ea:a0:86:13:92:
                    99:89:f7:7d:8f:7d:1f:1b:e0:26:68:ed:3d:b9:ce:
                    53:7e:ad:3b:a2:54:41:d5:45:c6:52:f1:0d:da:48:
                    59:ba:ef:ac:63:f8:98:a6:3f:10:f6:6c:c6:f2:3a:
                    6f:50:c2:35:6f:4e:ee:f0:e9:83:6d:9b:c9:9f:b3:
                    08:70:ee:c8:d6:c4:e1:4a:00:c6:e0:b4:d5:75:b9:
                    04:a6:d9:08:47:72:72:78:29:5c:be:ed:fa:dd:e9:
                    eb:c6:05:bb:a9:e8:e7:43:ca:99:b3:bf:4a:0b:24:
                    36:3b:dd:af:f4:ed:06:0f:ec:c7:67:32:e4:1f:00:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9E:D9:8B:2A:D3:DD:F2:A7:29:40:5C:BE:4B:EE:84:1A:72:9B:D6
            X509v3 Authority Key Identifier:
                keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:f5:bf:77:5d:72:96:ab:c7:52:5e:6e:92:5a:b4:4e:12:
         26:2d:5c:f7:55:6a:3e:97:ba:b9:3d:43:12:b1:8d:3e:e5:af:
         47:1d:38:2e:9e:55:ac:f7:39:6f:96:e4:4d:95:90:e8:74:92:
         6a:e3:80:95:f8:f6:61:4f:0e:96:e3:65:09:76:1a:34:be:43:
         d6:33:cd:be:d3:f2:a1:54:52:38:56:6f:86:ad:03:a5:f6:e2:
         e5:8c:a1:42:ec:bf:ca:81:4b:2c:4e:fc:bb:ea:5a:fc:90:21:
         45:7d:09:52:08:d3:63:b6:d1:55:7c:a0:ed:53:89:15:ae:ba:
         a2:b6:41:69:8c:68:c6:d0:ae:02:57:0f:b6:9b:96:33:2f:37:
         2c:3e:7b:a8:25:76:0f:4c:c7:b2:e1:c1:6a:94:68:d0:91:b8:
         34:3e:af:7a:ef:29:10:2f:5f:21:7a:9f:78:b6:6c:c8:64:3b:
         d6:90:45:31:19:98:b4:c5:28:c6:b2:84:c6:0a:28:b2:d3:18:
         5a:09:07:de:f2:9f:82:6d:7b:5a:69:7a:62:5b:84:67:a2:48:
         bb:01:cf:82:2d:b4:66:15:76:2c:56:92:76:32:59:c7:5e:b3:
         c4:2a:d7:bb:28:bb:40:2a:3a:d3:10:e0:f7:61:6d:97:ee:ef:
         dd:91:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:26:38 2026 by rpki-client