Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File:                     chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier:          ie3cVKICrWAKxCdQfWLmdjY9eT+4HSHlqmrpBubQlxE=
Subject key identifier:   D2:73:90:73:DB:D8:ED:01:73:14:9F:4D:9D:FE:05:06:FC:43:C5:AC
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer:       /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number:          028D
Signing time:             Wed 23 Sep 2026 01:39:31 +0000
Manifest this update:     Wed 23 Sep 2026 01:39:30 +0000
Manifest next update:     Wed 30 Sep 2026 01:39:30 +0000
Files and hashes:         1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: molEdMjvYjC7z9jM8QwytKA83TUyX55kaKRVGeIED0M=)
                          2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: XRam2F4FC1VRB1bzeJbTRlXhvSOCTuW1Ti0TuLeUucE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
                          rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
        Validity
            Not Before: Sep 23 01:39:30 2026 GMT
            Not After : Sep 30 01:39:30 2026 GMT
        Subject: CN=6ab32dd3-0733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:3f:0b:76:b4:0b:93:e7:87:99:a3:3f:52:
                    f6:79:f2:63:9d:24:a4:49:13:6a:2a:a0:75:0a:69:
                    60:3d:87:79:38:ed:ad:31:d3:24:d9:a4:21:28:fb:
                    bf:83:42:8f:78:3c:30:1b:b9:fe:4b:8c:db:3f:77:
                    67:0c:0a:cb:6d:6f:d7:4d:77:5f:b4:be:cf:9a:da:
                    ee:a0:65:9c:60:b7:e0:81:ba:ea:93:23:99:64:2c:
                    59:71:08:8d:82:17:d1:11:98:2b:57:f4:1e:de:24:
                    e6:00:7c:27:38:9c:9e:df:83:49:40:3d:d2:48:16:
                    34:88:93:f1:63:8c:25:0f:8c:2a:0d:53:4c:6b:26:
                    f9:de:04:80:e6:82:c7:4b:ff:11:16:ee:76:de:bd:
                    ba:90:9d:a9:49:87:e1:ce:80:32:9a:bc:e8:f5:8e:
                    00:90:a3:13:0f:71:44:e0:ad:ed:cc:31:08:de:c3:
                    d4:60:3a:eb:cb:28:fc:98:2b:22:2f:43:ce:33:b2:
                    43:79:4a:40:4e:b9:a8:70:5b:b3:45:aa:37:b2:1d:
                    0d:46:21:5f:35:f4:9b:38:d8:65:6d:6d:29:33:e5:
                    46:ad:06:8c:63:d8:a6:f8:63:aa:10:be:87:1e:93:
                    00:6a:7b:74:7e:8a:d4:50:12:7c:b5:26:11:39:be:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:73:90:73:DB:D8:ED:01:73:14:9F:4D:9D:FE:05:06:FC:43:C5:AC
            X509v3 Authority Key Identifier:
                keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:44:c8:9a:47:61:8b:79:17:d5:0c:d8:59:30:45:c1:88:
         77:b9:fa:c5:b2:a6:de:f6:c4:63:89:1f:1f:86:df:ee:63:9c:
         88:8f:03:b7:2a:b9:e9:e2:60:ee:dd:1f:68:32:f0:e9:6b:21:
         ca:28:a3:01:73:a5:b3:fc:08:0e:a0:4e:11:ca:98:13:a5:9c:
         d4:b5:9a:23:63:8e:a9:63:24:8a:a5:2d:f2:a2:45:08:cb:fb:
         7f:5a:de:61:b5:73:18:ad:a7:23:d0:8a:f1:97:fc:8f:08:b7:
         f1:30:04:ae:76:9a:2b:67:6b:16:38:8f:83:87:de:bc:26:e2:
         0f:ff:51:af:93:05:9c:f8:fc:c3:cf:be:9b:73:52:1c:95:75:
         47:c7:00:17:3d:35:30:8d:88:b6:53:8b:93:e3:65:96:68:20:
         bf:35:2f:38:1c:aa:81:69:a9:8d:e7:b8:8b:7a:2d:c3:a6:bb:
         8f:17:3b:5e:d9:1c:17:6e:95:b4:41:3e:e0:33:e9:66:5f:65:
         30:ce:5e:17:15:34:03:69:77:72:91:d0:d4:9e:2c:37:20:4e:
         ca:6f:6f:ae:cc:0d:4e:fd:f3:a5:ea:c4:77:ee:af:09:7e:05:
         cb:b7:6b:66:33:ff:2b:66:4a:1c:d4:84:c8:e9:59:eb:7c:48:
         6a:d9:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:34:23 2026 by rpki-client