Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File:                     2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier:          kVcYRh0HV9f5Axr8Pd/A/HKuDto2NiEw+Nu+CExAvkU=
Subject key identifier:   03:42:D1:7C:68:D8:11:6C:0C:A0:59:1D:2B:F9:A0:84:70:18:52:CF
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer:       /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial:       0341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number:          0339
Signing time:             Wed 23 Sep 2026 00:37:37 +0000
Manifest this update:     Wed 23 Sep 2026 00:37:36 +0000
Manifest next update:     Wed 30 Sep 2026 00:37:36 +0000
Files and hashes:         1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: nVRAmiANQwj05pN115kgC7n59y6BwXp6+E+I4QAD9xM=)
                          2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: tluEXRfv1yfj6g2yuqwe5cSshlgt2BkkJs3C6pzFBNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
                          rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
        Validity
            Not Before: Sep 23 00:37:36 2026 GMT
            Not After : Sep 30 00:37:36 2026 GMT
        Subject: CN=6ab31f51-49a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:78:aa:bd:a1:cb:fd:0c:05:1a:f1:82:6c:2a:
                    fc:e8:ef:7c:7f:59:38:50:c9:37:4a:1b:97:9d:ac:
                    5d:b6:a3:f2:e2:a1:fe:13:87:44:47:b8:d4:a4:1c:
                    fe:bb:55:02:2a:21:c6:d1:27:78:79:43:93:ea:05:
                    c9:ad:01:eb:ad:52:ce:3f:7c:81:6e:c5:a3:05:2d:
                    09:f4:09:4d:97:7c:0b:66:8b:c0:73:af:c9:f0:44:
                    b1:4d:55:1b:e9:c5:fb:04:21:1c:e9:d7:f6:b5:30:
                    3f:47:7a:f0:68:84:03:0a:c9:32:1d:42:d9:cd:df:
                    68:d7:74:09:f6:85:ab:ee:ef:5d:71:9e:5a:50:b1:
                    05:6c:df:9e:4d:20:47:4c:e5:31:a0:05:58:ba:89:
                    ae:c8:83:d5:2a:17:bf:ab:61:ad:10:6c:e5:80:1b:
                    c6:d6:fb:e4:9e:e2:72:0d:63:aa:24:34:bb:d0:77:
                    a1:29:35:f6:66:90:cc:6a:29:1e:7d:ad:03:bd:77:
                    ac:2a:7b:20:e0:c3:a6:5d:a8:eb:a9:0f:33:21:99:
                    35:eb:14:6c:60:39:ef:5d:05:2a:91:e8:c0:1e:59:
                    b2:f7:00:3e:0a:5c:f7:91:5f:da:77:4a:76:82:ea:
                    e9:2b:ba:d3:c7:7d:ad:b0:d0:4f:d9:1f:ec:1b:e4:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:42:D1:7C:68:D8:11:6C:0C:A0:59:1D:2B:F9:A0:84:70:18:52:CF
            X509v3 Authority Key Identifier:
                keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:20:30:e1:bf:43:7b:42:9e:28:91:62:ee:52:b8:6c:f1:
         96:0a:0b:e3:b4:bc:b3:fb:55:99:ce:39:39:c3:88:54:01:18:
         7e:dd:15:71:7d:07:3f:9d:3d:e6:bd:e2:43:60:ac:f2:94:57:
         f2:15:c5:50:41:8f:60:17:e5:b1:10:d5:75:1c:74:7a:e0:49:
         2d:82:06:fc:f3:cd:48:29:63:a8:57:14:32:52:d8:ec:0a:e3:
         31:f4:94:f9:d1:c8:b2:c9:c7:47:18:a4:86:44:bb:89:28:af:
         d8:2c:82:8e:59:95:44:f4:e9:f9:d3:86:b7:36:f2:6e:d4:bb:
         11:55:df:27:e0:3c:98:a3:b4:31:d1:1f:3b:1d:be:8f:25:2a:
         73:45:d9:ee:00:c1:11:9c:2e:23:a2:1b:f4:2c:12:7a:9c:6a:
         a3:d4:8d:3d:58:3c:d0:26:72:00:b0:53:26:ce:83:29:50:2d:
         a2:34:93:da:6c:2e:98:28:4a:3c:31:7c:7f:2b:5f:b3:23:2e:
         a8:49:39:92:f8:71:22:d6:aa:8e:15:7d:ec:08:5c:7d:72:21:
         11:1e:71:5b:6c:ba:28:8f:64:35:b1:e5:94:8b:72:98:1a:c4:
         4d:28:41:8b:aa:f8:03:a5:4b:3a:78:7e:54:59:2d:b3:f9:0c:
         82:ba:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:36:37 2026 by rpki-client