Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft
File:                     30WmAWUG35sQS3TILTbV_9LVbK0.mft (raw, json)
Hash identifier:          Jjv5g2XFt6mMY23KGjWm6QKigC4G3oCvJlAOZmlFxXY=
Subject key identifier:   80:A6:77:1E:EF:77:53:49:A6:AA:71:FF:8D:16:66:14:CD:26:10:73
Authority key identifier: DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD
Certificate issuer:       /CN=A91597B7/serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft
Manifest number:          09
Signing time:             Mon 21 Sep 2026 09:12:59 +0000
Manifest this update:     Mon 21 Sep 2026 09:12:58 +0000
Manifest next update:     Mon 28 Sep 2026 09:12:58 +0000
Files and hashes:         1: 30WmAWUG35sQS3TILTbV_9LVbK0.crl (hash: A7BZsbD2gEYuhfDPWbSuAMDkBqIlrXmUYw7siUcU4lE=)
                          2: 6AC1F2CCADE611F1A742C8804111F970.roa (hash: pOX2bB7h73TmS7wQA5JOgBkRmL6STMduq4kjixO0aqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl
                          rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597B7, serialNumber=DF45A6016506DF9B104B74C82D36D5FFD2D56CAD
        Validity
            Not Before: Sep 21 09:12:58 2026 GMT
            Not After : Sep 28 09:12:58 2026 GMT
        Subject: CN=6ab0f51b-32b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:72:c9:7f:39:27:5a:a1:c1:ef:73:0e:f0:
                    cf:c4:a3:21:e9:ae:99:54:40:f1:32:d5:85:bb:75:
                    d8:4f:76:ff:85:76:c8:dc:e7:4f:a2:df:d8:e3:bf:
                    2e:ba:c3:d1:be:cc:ed:b9:93:bc:d5:1e:e8:29:a5:
                    67:cf:b1:0b:96:19:3c:ff:8a:76:24:30:98:1d:fe:
                    2f:d7:1c:c2:af:85:fe:bb:25:59:a8:5b:d1:97:d9:
                    8f:28:9c:2a:55:c5:87:55:00:2a:f0:29:5b:30:24:
                    fa:3a:b5:67:fd:08:64:e9:eb:fd:5d:dd:02:e8:05:
                    f5:9f:b3:7d:e9:5a:d5:ba:ee:2e:74:20:94:60:b9:
                    f0:f5:fd:64:8b:e0:e2:85:c3:6b:5d:f0:80:36:74:
                    11:80:b9:31:5d:a1:49:0f:a2:86:ca:7b:e7:60:40:
                    9c:1b:5a:cd:82:cc:a8:67:2b:91:c8:e3:4d:73:bc:
                    18:c7:91:e2:0c:21:fd:c7:fa:b5:bf:90:64:8c:f7:
                    74:81:95:3a:42:83:62:15:c9:e0:d3:4a:43:d5:7a:
                    c0:08:a3:b3:da:84:1d:79:4c:c8:be:ea:cb:d3:b5:
                    60:c7:61:85:9e:ea:71:05:04:2f:d9:9b:93:a0:58:
                    df:90:ea:7b:9a:c2:f1:59:35:27:aa:b7:4d:3b:f6:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A6:77:1E:EF:77:53:49:A6:AA:71:FF:8D:16:66:14:CD:26:10:73
            X509v3 Authority Key Identifier:
                keyid:DF:45:A6:01:65:06:DF:9B:10:4B:74:C8:2D:36:D5:FF:D2:D5:6C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30WmAWUG35sQS3TILTbV_9LVbK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597B7/12C215ACADE611F1BBA8793F4111F970/30WmAWUG35sQS3TILTbV_9LVbK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4f:37:b6:0d:a5:6e:28:49:95:3a:5c:e9:4d:49:df:21:6a:
         ed:5a:fc:ea:27:85:d5:f3:d3:42:a8:e6:41:4d:06:dc:37:31:
         c3:f7:3a:b5:48:20:a9:cf:71:d9:6d:b6:42:e7:cc:c2:c9:b4:
         1b:58:3b:53:73:f6:5e:62:0e:d0:30:58:87:5a:f8:e1:ab:53:
         1a:40:58:4c:8e:a1:65:64:a0:97:d4:40:28:fe:28:bd:4f:bb:
         c1:d3:bb:a5:93:8b:19:4a:72:6f:38:cb:b9:f8:e7:e0:20:7e:
         d4:f9:12:62:d0:4f:46:36:8d:4d:2e:52:48:4d:40:28:69:8c:
         4b:1c:59:61:30:19:4a:36:8e:f5:28:2a:cc:5e:87:f6:5c:b2:
         c2:91:ad:b2:f9:ee:6d:8e:fd:86:22:7e:40:c7:43:3c:d2:90:
         87:2a:bf:4f:f7:d6:30:6e:7b:9c:11:80:8b:c9:b3:cf:f3:0c:
         d0:3d:a1:5f:b2:9a:28:d8:38:2c:b3:59:2f:df:21:b3:7d:68:
         79:16:ac:6b:41:eb:24:a7:ee:50:94:9c:63:0a:53:4c:7c:89:
         1d:e9:22:fa:1e:01:9d:34:d6:43:2e:ae:0d:b4:0c:2a:62:08:
         01:4a:ee:25:6e:b4:af:fa:d6:78:21:0b:e2:e4:a3:63:0d:ce:
         a1:4f:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:35:48 2026 by rpki-client