Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File:                     M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier:          k0pU1/ZxjGTSB8ybRSIcJ/kCwpcGJ9WI2DPg+t3b7tM=
Subject key identifier:   94:51:26:B9:6D:D7:CE:8A:A2:24:8B:2F:06:93:3E:53:8C:FD:1F:1F
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer:       /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number:          97
Signing time:             Mon 21 Sep 2026 07:28:48 +0000
Manifest this update:     Mon 21 Sep 2026 07:28:48 +0000
Manifest next update:     Mon 28 Sep 2026 07:28:48 +0000
Files and hashes:         1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: tWe8x+6bVd3QCQ00AnJPZgtagwz51YgyQfdEDnB3Z24=)
                          2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
                          rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
        Validity
            Not Before: Sep 21 07:28:48 2026 GMT
            Not After : Sep 28 07:28:48 2026 GMT
        Subject: CN=6ab0dcb0-0ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:26:dc:eb:74:8e:2e:27:fa:79:c7:ad:ee:
                    af:e2:d1:85:ca:ad:bc:67:93:6e:b9:96:44:39:ac:
                    a7:cc:a0:9e:13:c8:92:bf:96:d6:64:be:d2:f4:74:
                    62:a6:a1:ea:5c:97:48:41:6a:38:e0:fd:2c:cf:d5:
                    82:ed:b3:a1:86:89:83:86:80:d8:e4:19:f2:08:6a:
                    2a:9a:07:ed:24:e4:66:0e:c5:f6:ec:98:84:60:ea:
                    c8:93:e0:85:55:b0:9e:f0:89:71:e7:d3:8a:af:a3:
                    13:63:c6:eb:18:80:50:90:2c:3b:a9:d2:04:9c:9e:
                    26:2a:bd:72:67:1d:a9:79:be:b7:da:24:f1:ca:bf:
                    d5:b8:d7:84:b3:19:02:f3:88:81:0c:1c:a6:98:e3:
                    02:b5:77:c6:6e:a0:bf:b7:5b:13:ae:3e:bf:76:11:
                    d5:5f:09:6a:3f:3d:ec:bc:7f:d0:6c:b8:75:41:4a:
                    22:f7:cb:dd:6c:e4:2e:d4:58:e7:14:d3:33:8b:de:
                    f0:95:7e:13:37:80:5b:e6:7b:a8:a0:24:fc:19:ad:
                    56:30:d1:eb:e1:8f:88:5d:3e:d5:9a:8b:4a:cd:86:
                    5d:da:76:8f:b0:58:32:0a:63:62:1c:bd:a4:1a:0c:
                    ad:02:a8:76:a9:f7:3e:27:9e:9d:64:f2:d5:08:64:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:26:B9:6D:D7:CE:8A:A2:24:8B:2F:06:93:3E:53:8C:FD:1F:1F
            X509v3 Authority Key Identifier:
                keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:2e:50:82:19:fc:99:e3:1b:20:5d:9c:18:b3:e1:02:00:
         21:51:d3:cf:39:24:7c:71:a8:e5:80:1d:9d:70:45:a2:8c:4d:
         8c:8a:29:3d:d4:f3:4d:0c:cf:bd:8a:db:6b:45:58:12:c9:ae:
         c9:d6:c5:ce:51:e2:ea:aa:84:07:e7:48:e8:b8:3e:d2:bc:ad:
         13:9a:6d:ea:33:7f:72:cf:18:ca:0d:de:2a:5a:c3:0c:54:4b:
         4c:a3:dd:93:43:ce:e8:0e:47:44:fa:5a:14:a4:17:5c:61:3a:
         75:74:46:b5:c6:5a:b5:55:3c:2f:df:f4:57:85:61:03:b8:53:
         1a:9e:00:40:7b:f3:44:f2:6c:fd:88:32:a0:b7:e9:22:c8:61:
         be:a5:24:13:04:63:ba:31:ec:5b:80:c1:42:bd:12:76:f1:2c:
         53:92:38:9d:0d:a0:4e:75:54:e5:d2:d0:69:c2:2a:a4:49:11:
         7f:56:b6:fe:67:13:fa:69:47:3e:64:aa:29:ec:cd:4c:9e:e9:
         d8:ec:d1:1a:69:1c:d4:3f:d2:bd:4a:dc:e2:7b:5f:ae:72:b5:
         ca:06:71:76:2f:6a:69:aa:51:e5:7c:bc:ae:44:bd:bf:39:7a:
         7b:da:fd:4a:76:6e:b1:7f:fa:16:eb:fe:8a:1f:43:7d:89:f4:
         a5:4e:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:34:09 2026 by rpki-client