Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          QyBfFZppXbdrTk9mOjPdxjg9pw/CV6/WpAqWQ8/91/0=
Subject key identifier:   E3:5E:F1:03:D0:C8:35:CD:A0:9D:A2:6B:B4:D0:13:16:5C:7C:C4:73
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          088C
Signing time:             Sun 20 Sep 2026 22:52:16 +0000
Manifest this update:     Sun 20 Sep 2026 22:52:16 +0000
Manifest next update:     Sun 27 Sep 2026 22:52:16 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: vBhj+u4uL0f1bajE4sufDsavndRdXicbclXBCIBEXZs=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Sep 20 22:52:16 2026 GMT
            Not After : Sep 27 22:52:16 2026 GMT
        Subject: CN=6ab063a0-0320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:da:cf:12:0a:90:66:e0:4b:1e:91:ff:c8:
                    a4:60:77:6f:07:b6:23:73:5b:5d:ef:b0:c9:e9:3a:
                    1f:79:51:a8:ae:81:72:f2:2b:3b:29:e8:5c:86:b6:
                    58:8c:0d:e2:95:15:c8:24:e8:bc:51:ad:86:08:01:
                    af:ac:e9:0a:9b:8f:3a:c2:4f:29:36:08:96:f4:99:
                    24:e7:ce:4b:65:ed:ee:bf:f5:26:27:90:c1:65:52:
                    47:46:f0:81:fc:2b:49:e0:fe:b8:d9:50:ab:36:71:
                    ed:de:b1:af:2b:c7:f7:57:4c:bf:ae:b1:7d:68:cc:
                    d8:e8:f8:0b:c4:84:4d:83:8a:2e:b3:53:2f:5c:71:
                    b5:cd:5f:fa:5e:ec:fb:b8:9f:99:6b:ea:a4:c5:d0:
                    2c:e2:e2:61:2f:f7:6e:f6:a1:94:56:bd:af:03:b0:
                    53:7a:11:b5:6d:e8:2f:67:51:28:33:82:d7:7c:f5:
                    cb:8b:9d:9a:e5:74:a9:13:2b:70:15:35:e9:ad:46:
                    b7:0d:c1:aa:8e:71:2f:af:2f:75:c4:ff:42:d1:e7:
                    95:d9:5e:63:4e:e5:f7:0f:e6:a3:64:87:e0:f0:90:
                    5a:cb:19:d1:ba:15:49:e1:cc:1a:fe:40:4f:03:5d:
                    82:81:af:d4:2d:f5:d1:16:96:c6:a2:3e:35:95:a7:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:F1:03:D0:C8:35:CD:A0:9D:A2:6B:B4:D0:13:16:5C:7C:C4:73
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:8a:68:91:83:a2:57:77:b6:02:de:f5:56:f0:6e:1d:e1:
         1a:02:c0:25:7b:12:7a:eb:38:f8:ac:d2:2a:37:fc:13:a1:48:
         73:ea:ef:e6:29:f3:f5:00:1c:93:17:fc:1c:33:0e:eb:3d:f4:
         84:fb:63:73:27:77:ef:e0:32:5c:13:fd:4e:70:a4:61:79:f0:
         ee:b8:2e:f4:08:e9:77:bb:39:5b:f1:53:3a:55:7c:60:ce:90:
         94:4e:ce:2f:51:96:c2:7e:4b:7a:21:d8:87:83:9a:f1:7e:46:
         12:56:00:45:be:f2:6b:b1:e9:2f:d1:3c:30:9b:6b:3f:ff:b5:
         4c:6e:6a:4e:fc:40:b0:b7:89:99:12:70:53:c6:42:2f:c3:f7:
         52:31:8b:76:c2:16:c1:a4:87:38:7e:a8:06:5e:56:9f:52:b4:
         05:89:8b:14:ee:4b:4b:b2:5a:7c:1a:fa:50:d4:ec:45:f9:c1:
         ca:39:bf:7a:31:74:9f:0d:9a:d2:87:92:23:26:19:a9:59:e8:
         85:29:29:ea:f5:96:8c:91:c9:5d:fb:cd:57:e7:9a:c4:ac:3d:
         8b:8c:d1:d5:a3:b8:ec:07:fd:4b:3e:a3:69:6d:96:d3:ef:b7:
         87:18:8b:e3:32:4f:59:f3:50:7e:5f:f5:f2:c8:15:75:22:c7:
         76:13:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:56:31 2026 by rpki-client