Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91515D6/C66592F09B8011F18989FD824211F970/SvUZpTIbGVIYAxcMNt-w9KchSfc.mft
File:                     SvUZpTIbGVIYAxcMNt-w9KchSfc.mft (raw, json)
Hash identifier:          7ub32xd3g95c1Wt98+Jg+C6E8yfRBneu4m+FrsGQf50=
Subject key identifier:   72:F6:AD:E0:62:20:80:60:4E:92:79:57:7A:4F:DA:C9:7D:2D:EA:7E
Authority key identifier: 4A:F5:19:A5:32:1B:19:52:18:03:17:0C:36:DF:B0:F4:A7:21:49:F7
Certificate issuer:       /CN=A91515D6/serialNumber=4AF519A5321B19521803170C36DFB0F4A72149F7
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvUZpTIbGVIYAxcMNt-w9KchSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91515D6/C66592F09B8011F18989FD824211F970/SvUZpTIbGVIYAxcMNt-w9KchSfc.mft
Manifest number:          1D
Signing time:             Sun 27 Sep 2026 09:37:17 +0000
Manifest this update:     Sun 27 Sep 2026 09:37:17 +0000
Manifest next update:     Sun 04 Oct 2026 09:37:17 +0000
Files and hashes:         1: SvUZpTIbGVIYAxcMNt-w9KchSfc.crl (hash: inZKy881KEf9IYiVLzETgn9yxx00cZZNV8mvoChFpiE=)
                          2: 214130669F5B11F19AA339497111F970.roa (hash: 321SwcvF02HpehQUWLbmfuA5Ez8FqvOddGEvP4J2v5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91515D6/C66592F09B8011F18989FD824211F970/SvUZpTIbGVIYAxcMNt-w9KchSfc.crl
                          rsync://rpki.apnic.net/member_repository/A91515D6/C66592F09B8011F18989FD824211F970/SvUZpTIbGVIYAxcMNt-w9KchSfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvUZpTIbGVIYAxcMNt-w9KchSfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91515D6, serialNumber=4AF519A5321B19521803170C36DFB0F4A72149F7
        Validity
            Not Before: Sep 27 09:37:17 2026 GMT
            Not After : Oct  4 09:37:17 2026 GMT
        Subject: CN=6ab8e3cd-bd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d3:c5:81:e2:f2:e3:ca:94:79:64:54:30:9a:
                    91:6a:bf:92:f1:d5:2d:ef:97:7a:7e:2c:c3:24:8d:
                    6c:4b:46:b0:98:f4:fd:15:e7:3c:26:3f:46:a6:3e:
                    e8:15:66:e7:bf:50:23:51:5f:6d:75:13:6e:69:f2:
                    c3:2f:e6:97:c9:eb:e7:83:a9:90:1d:84:93:cb:4c:
                    09:aa:2f:0f:6a:cd:da:81:0c:8c:7d:a0:47:b4:1d:
                    96:b3:4e:a1:7b:80:a9:36:07:cf:21:fa:a0:be:55:
                    5c:40:6e:77:f1:d2:d6:93:5b:98:68:19:ed:3b:29:
                    dd:f1:5b:4e:21:89:97:2b:f4:d8:b4:e8:2f:ba:ac:
                    a2:f0:a7:e8:21:81:7b:68:2f:c3:39:46:df:3d:af:
                    e2:ec:0e:82:61:a2:5b:15:83:b9:5d:ce:e5:ab:48:
                    d3:3f:01:8d:00:60:0e:3b:c7:b7:3d:94:91:39:08:
                    87:3b:34:62:f7:58:aa:eb:e1:b8:a5:3c:5a:ab:0d:
                    31:ca:47:d6:c2:23:e0:c4:4b:cf:d7:26:9f:95:9b:
                    dc:0f:1b:d5:4e:0a:c0:4f:b1:4f:11:0c:32:7d:b9:
                    81:3b:d0:3c:e6:a4:ee:86:ff:55:72:cc:8e:f7:2f:
                    bd:2f:4a:5e:4e:fd:83:d1:2e:e9:75:da:ba:56:dc:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:AD:E0:62:20:80:60:4E:92:79:57:7A:4F:DA:C9:7D:2D:EA:7E
            X509v3 Authority Key Identifier:
                keyid:4A:F5:19:A5:32:1B:19:52:18:03:17:0C:36:DF:B0:F4:A7:21:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91515D6/C66592F09B8011F18989FD824211F970/SvUZpTIbGVIYAxcMNt-w9KchSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvUZpTIbGVIYAxcMNt-w9KchSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515D6/C66592F09B8011F18989FD824211F970/SvUZpTIbGVIYAxcMNt-w9KchSfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:80:00:76:61:2d:7d:04:f6:83:50:59:62:27:5e:e5:bb:c6:
         de:03:f4:eb:b2:be:a2:9c:9a:c1:9d:f7:44:47:20:21:16:0c:
         4e:58:4c:1e:95:41:13:89:82:8e:44:f3:35:ca:fe:92:08:4b:
         b4:1f:07:40:dd:2a:2a:a3:b8:1d:3d:9a:90:84:f8:1f:a5:9b:
         59:6c:96:56:6c:b5:94:c5:bf:11:b1:f0:d5:ed:f3:cd:6f:4b:
         70:da:a0:39:b5:ed:ac:9b:94:7e:59:26:27:46:20:21:6d:b6:
         10:73:b0:1a:43:c0:c9:7f:6b:c7:ad:05:87:7d:3e:94:c0:42:
         84:0b:da:4c:6e:12:c2:ec:e0:f2:ea:46:a2:17:77:01:81:f2:
         72:0c:60:2a:00:6a:86:f5:21:29:30:b2:fc:67:4f:79:06:a8:
         4e:5d:7a:50:d1:f5:ad:83:e5:44:09:70:89:71:c8:8a:ce:f8:
         9b:75:8d:4b:3a:1f:45:79:c5:ef:3d:4f:62:f3:ed:80:a7:e8:
         14:50:82:df:fb:aa:33:c6:f6:99:fb:07:74:e8:42:70:67:3a:
         4c:b0:20:32:52:04:97:7f:39:55:90:68:4f:a8:d6:0c:05:90:
         67:dc:33:40:b2:1c:db:45:4c:de:1e:2f:37:45:45:3b:b7:da:
         02:fe:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:28:37 2026 by rpki-client