Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          hx9XM7nKivuEJDeU+tUJOeV0xEE3x1bVF4WMppLMvxo=
Subject key identifier:   6A:79:C1:C0:06:FF:3F:06:1D:37:44:1E:02:29:C9:29:7F:4E:56:AA
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          01C4
Signing time:             Sat 19 Sep 2026 04:02:13 +0000
Manifest this update:     Sat 19 Sep 2026 04:02:12 +0000
Manifest next update:     Sat 26 Sep 2026 04:02:12 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: YjncXFR9Y5gNO4Ju1IM2JAeMijm38KoilsfOmcjpSdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Sep 19 04:02:12 2026 GMT
            Not After : Sep 26 04:02:12 2026 GMT
        Subject: CN=6aae0945-9d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:b6:50:43:a8:5d:4c:8e:c1:1b:fc:c3:fb:
                    c3:97:fc:94:0b:91:76:7e:5b:a5:00:25:63:3d:df:
                    f8:12:22:68:0d:bf:20:a7:d5:3b:98:3a:39:9f:bb:
                    b9:73:83:92:bc:15:c4:30:22:ef:df:38:7b:ab:8a:
                    c6:ef:38:96:82:a4:d3:7e:df:29:a3:9a:a4:27:79:
                    1a:aa:f8:f3:49:db:bc:96:75:af:a4:cf:e5:89:cf:
                    56:c7:c3:01:59:c7:de:26:fb:e8:28:25:b7:c9:49:
                    76:ef:ed:d3:d4:cd:e1:e0:ed:46:df:e3:3a:7c:2b:
                    d1:7c:41:e9:bf:03:fe:dc:33:66:24:f3:00:1a:0c:
                    37:47:33:b0:94:ad:5f:58:6c:e8:31:ff:6e:6d:ee:
                    d1:f8:a3:f4:4a:6f:e5:8c:31:bf:d2:1e:06:48:b0:
                    76:49:69:20:c6:75:8c:b6:b6:10:10:c8:f2:24:e7:
                    51:e8:f7:fb:f9:58:02:c6:11:dd:7f:fb:6d:d8:88:
                    ef:7e:63:f4:8b:19:8d:20:f7:82:8d:e7:0f:c4:82:
                    fc:95:dd:0b:2e:08:f9:54:11:55:d5:29:ea:c8:3c:
                    cc:16:16:23:83:f8:d1:8c:d7:8f:16:e1:4c:db:3d:
                    fc:44:e4:26:42:93:ff:f8:7b:94:a4:37:aa:a3:63:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:C1:C0:06:FF:3F:06:1D:37:44:1E:02:29:C9:29:7F:4E:56:AA
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:19:1c:94:83:fd:63:17:78:54:26:0e:af:1c:69:86:41:
         9c:91:7d:3d:61:c5:9e:54:67:e3:5d:d4:0d:13:fa:1d:b9:6e:
         15:cc:35:9a:9f:04:87:a0:8e:c7:f8:8a:4f:77:72:9f:93:68:
         c6:88:e4:c3:da:05:8b:26:30:02:14:2a:e6:b0:a6:d4:0e:9e:
         bc:f6:2b:94:dd:aa:62:f8:4e:c1:2b:e2:9d:12:10:57:c7:1e:
         0e:68:82:2c:24:c0:f9:cb:77:74:4a:57:18:61:95:cf:6e:ab:
         9a:da:69:d7:1f:fa:ed:c6:b5:1b:57:ce:3d:61:8e:40:81:cb:
         23:0c:44:3a:60:a4:bb:d9:3f:22:21:17:b0:42:2c:b2:14:c9:
         fb:70:44:57:dd:3f:d3:87:7f:a3:bd:44:2e:12:15:4f:fc:aa:
         53:d4:e2:98:86:e9:c9:16:76:e8:dd:7c:0e:34:85:90:a2:92:
         d8:6c:6f:02:a7:2a:8a:b8:be:82:c6:82:d2:8c:32:48:00:86:
         43:14:20:0a:fa:21:70:27:5d:bb:dc:bc:94:99:a9:02:0e:b9:
         94:38:db:e8:b8:da:09:40:a1:c2:f6:81:93:f3:43:5d:92:43:
         c7:15:a6:78:23:0b:f0:cc:f8:71:f3:7f:8f:3b:25:76:6b:c4:
         c0:c1:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:16 2026 by rpki-client