Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
File:                     AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json)
Hash identifier:          b1OK0tuzyAV1LX77y6moc58SzlGaprvNZiTPm45rAGA=
Subject key identifier:   50:E4:0E:76:D8:35:25:93:84:A7:0E:8F:B2:D7:56:98:E1:32:6E:E1
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Certificate issuer:       /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial:       04D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
Manifest number:          04C8
Signing time:             Sun 20 Sep 2026 23:39:30 +0000
Manifest this update:     Sun 20 Sep 2026 23:39:30 +0000
Manifest next update:     Sun 27 Sep 2026 23:39:30 +0000
Files and hashes:         1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: Njpdq1AXwO3uu61B5/ClpQE0xPNS4fxHWdBj9UcL1FY=)
                          2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: fjSWCV6GApskxLqYEz6j6d7oXSeC7q7HKpQeRL3WkxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
        Validity
            Not Before: Sep 20 23:39:30 2026 GMT
            Not After : Sep 27 23:39:30 2026 GMT
        Subject: CN=6ab06eb2-f687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:1d:a6:a8:e9:42:ee:6b:0c:b8:14:80:5e:
                    61:ed:fb:8e:df:c8:8f:fb:6f:cd:db:fd:ec:a5:c9:
                    59:a4:1d:31:2c:08:01:5d:27:91:ac:9c:3a:17:6a:
                    ca:7e:ea:3c:55:4e:c2:03:fb:b4:0f:67:45:9a:5e:
                    d3:c5:25:e3:f8:31:18:4f:02:a1:d3:c8:7c:21:53:
                    12:a5:ba:f5:72:75:ea:8c:b1:e4:a1:fb:da:69:4a:
                    e4:44:62:d7:2e:27:de:02:34:86:2b:9e:17:39:c9:
                    94:10:fd:5f:1f:fa:eb:db:7c:c5:4d:4b:a0:13:76:
                    3b:b0:25:34:af:7d:9a:09:f5:f3:1c:08:e0:7f:a9:
                    0d:74:cb:f1:85:15:2f:3d:7f:ff:ce:1d:4b:79:df:
                    cd:12:bb:93:ae:4e:c1:2f:fa:c4:54:28:f5:ce:7e:
                    87:93:5a:c6:0e:8e:42:f2:45:04:de:7a:95:5d:ae:
                    10:c6:33:7b:68:b9:6a:eb:e5:7f:c6:cf:50:ee:14:
                    2f:d5:71:58:00:dc:ea:ea:13:ff:ca:d6:31:87:70:
                    21:17:ba:b1:40:18:87:cf:03:e8:07:be:bb:26:9a:
                    a8:4e:0e:89:d5:a7:69:36:f4:1e:d4:fc:54:51:50:
                    df:3e:0a:75:5b:5e:09:20:e0:56:b3:27:2e:27:6f:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:0E:76:D8:35:25:93:84:A7:0E:8F:B2:D7:56:98:E1:32:6E:E1
            X509v3 Authority Key Identifier:
                keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d4:06:30:82:35:6a:6a:99:43:5a:d9:06:cd:1e:90:2e:83:
         71:02:ed:34:2a:4a:50:0a:d3:55:93:1d:ae:18:89:70:ab:69:
         b1:89:8d:9b:7b:37:0d:2c:fd:0f:9a:52:3c:2b:b4:44:77:6d:
         db:24:42:f6:75:8a:99:a4:fd:48:b5:39:15:c7:6f:69:c7:07:
         54:84:44:ee:e8:d8:33:d7:14:d3:cc:fb:69:1b:3e:6c:a5:07:
         3e:5c:fa:8f:e0:02:65:fe:c2:d2:aa:33:69:2c:87:e9:68:59:
         87:e7:33:7d:31:7b:dd:a6:e9:4e:e9:67:39:e3:91:c9:59:55:
         e1:9c:02:05:95:52:44:5b:f6:06:a0:05:dd:92:9b:a6:32:86:
         de:a2:57:26:d9:63:9a:c2:e0:00:d4:dc:36:eb:61:62:61:ae:
         bd:95:fe:6e:03:4c:f1:9c:de:bd:10:d4:95:59:0f:32:71:ca:
         2d:83:ee:e6:57:ce:76:78:52:74:64:56:11:ea:59:f7:36:25:
         f6:d1:c5:ad:e0:03:15:c2:a2:77:89:af:1c:6f:eb:c8:92:3e:
         19:3f:d7:2d:78:13:ff:17:b5:b5:95:e5:9f:36:0a:92:35:95:
         81:a0:de:7d:43:1e:d9:dc:ea:1e:6c:0c:c0:89:a6:de:bf:f8:
         21:78:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:53 2026 by rpki-client