Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          Q3ZqIgInd7u/FhtEkIdA+mvJ3Z1PYoN9ett1kqGprGo=
Subject key identifier:   FC:43:F9:9D:3A:21:68:C4:71:54:00:B8:6C:4E:C4:9A:05:9E:2C:59
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          077B
Signing time:             Sun 20 Sep 2026 16:45:20 +0000
Manifest this update:     Sun 20 Sep 2026 16:45:19 +0000
Manifest next update:     Sun 27 Sep 2026 16:45:19 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: DZc7IVV2J/6q9aowCZHwEu/rD7QRvwKHkrNDKORb9Rs=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: cm+t/PLMMD/KFNJP5e1RTkGRkxC1xV6B78Ll218uDIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Sep 20 16:45:19 2026 GMT
            Not After : Sep 27 16:45:19 2026 GMT
        Subject: CN=6ab00da0-7b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:d9:24:09:59:f1:ff:c5:a3:d7:c5:c2:13:
                    d1:51:4b:7d:72:9f:2c:f6:22:3e:53:89:5e:cb:90:
                    24:b2:4b:45:c8:39:be:5d:d7:50:f4:86:39:f3:2e:
                    1f:0b:ae:37:8d:d3:13:66:2e:27:09:c6:92:ca:c2:
                    dc:99:b1:cf:c4:f2:02:41:b7:b0:0d:51:14:b3:12:
                    09:34:35:27:8a:50:8d:13:3e:6d:a4:3c:68:f0:ac:
                    8e:56:14:a4:47:87:8c:c0:ec:3d:6d:b1:2d:a4:e6:
                    63:79:51:4f:7b:90:c3:1d:14:76:81:f7:e1:c4:4f:
                    a0:8a:12:42:e5:00:fc:21:b2:2b:39:f2:5a:e8:d6:
                    4c:ae:23:7d:34:46:ca:7e:02:83:31:6d:6b:b0:9b:
                    90:b4:c2:2f:61:20:40:45:18:6f:79:9e:30:03:e6:
                    3d:fe:c9:94:5c:15:79:e3:14:3f:71:06:d0:99:4c:
                    0b:91:e9:6d:f5:60:5d:58:a4:4c:19:4a:1c:3e:52:
                    dc:32:96:26:8d:ce:fc:71:0f:06:9d:13:34:80:b5:
                    ad:7e:15:d1:63:18:b0:bc:7f:b6:e5:00:eb:a7:12:
                    01:bf:ee:67:85:0d:02:0b:ff:08:d2:28:36:31:03:
                    70:f1:f2:19:fe:34:20:fe:9e:33:13:1e:ad:99:1a:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:F9:9D:3A:21:68:C4:71:54:00:B8:6C:4E:C4:9A:05:9E:2C:59
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:0d:64:eb:bb:46:c6:c6:33:06:07:9d:60:f5:ec:c2:34:5c:
         17:8e:e8:01:c2:bd:1b:3a:fe:8c:35:b6:ad:cf:00:5e:c7:2f:
         5d:b1:a8:03:9f:2e:97:d6:26:98:53:4e:1b:4e:15:06:ea:bf:
         b5:78:4f:46:e6:46:06:70:88:53:d3:25:89:4c:2e:b4:a5:62:
         89:39:be:23:00:8f:88:82:69:de:ac:91:b3:01:59:d9:d6:26:
         66:e3:25:90:79:54:eb:d4:01:b0:84:ac:dd:b0:34:be:fa:54:
         72:0a:1a:2c:5f:98:61:85:c8:d5:2c:9c:e7:62:82:b4:2e:30:
         06:03:69:ef:3d:8c:43:db:45:97:67:2c:e8:61:2a:44:27:84:
         7a:94:9e:10:de:65:8f:7f:cc:a1:3c:54:54:3c:b2:8a:13:60:
         72:00:32:ce:42:a3:51:ee:d7:a2:1d:e4:07:62:52:c3:84:06:
         d0:e9:eb:1d:3c:fc:78:f3:8e:e4:38:81:9b:b0:1c:f3:3b:5f:
         21:93:e1:d6:3c:30:85:c8:b0:b1:43:b9:62:c5:dc:e4:02:d9:
         65:32:ac:d3:a0:8a:9e:80:20:bc:bb:73:a6:94:c5:73:20:c0:
         b7:dd:e1:8e:2e:03:1c:1a:78:51:f0:f1:45:c1:74:fc:f9:56:
         1c:b9:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:37 2026 by rpki-client