Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File:                     cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier:          lrISrEUr+I+Gite6AuWxlfRH8bHKaviH7id4JZF6zeU=
Subject key identifier:   4A:26:0F:18:21:87:0D:98:A1:18:D2:1C:90:F4:C3:F3:C8:05:72:13
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer:       /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number:          63
Signing time:             Sat 19 Sep 2026 08:11:30 +0000
Manifest this update:     Sat 19 Sep 2026 08:11:30 +0000
Manifest next update:     Sat 26 Sep 2026 08:11:30 +0000
Files and hashes:         1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: KGYfQO2C06OuD44aZdyfRjoErkejZ/nqKe68VqfS8ug=)
                          2: 8Tg_ZSb-Viei1OQ529_uiTOZ0aM.asa (hash: nINaH8TXBJUn7znOvUaYM7JswX00LEbegro4mFGLb3o=)
                          3: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
                          rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
        Validity
            Not Before: Sep 19 08:11:30 2026 GMT
            Not After : Sep 26 08:11:30 2026 GMT
        Subject: CN=6aae43b2-ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:c4:2d:58:5f:36:d3:2d:e8:f5:61:29:38:
                    c8:09:8f:2c:30:28:78:ef:cc:a7:0e:1a:81:a1:11:
                    c8:59:9f:02:c3:fb:e8:d8:0f:e0:e7:a7:54:e5:70:
                    85:e1:e0:ff:ed:b1:28:cb:42:44:b8:e3:63:21:52:
                    e0:ef:a3:0d:24:0f:0f:aa:d3:7b:03:a8:6d:7e:59:
                    6b:91:e7:14:59:a8:6c:26:a9:36:54:ce:2e:8f:1c:
                    93:14:a4:ba:9d:5a:f6:10:72:62:fd:16:23:cc:a5:
                    f2:dc:99:43:22:1f:88:b9:81:07:0a:b0:7c:38:31:
                    e8:02:08:0a:06:84:10:5e:9b:2e:e9:23:ba:38:04:
                    72:4a:d6:16:69:35:64:df:fe:20:8c:c9:9f:78:36:
                    91:f5:b4:33:d7:71:ff:66:53:5e:e9:1a:28:da:d9:
                    f7:12:1a:c4:24:18:1c:91:b7:a4:10:61:fd:1d:57:
                    fa:51:17:f3:9b:51:09:ce:70:66:2d:23:58:4d:59:
                    70:6b:7f:7e:f2:ab:15:e3:1a:b3:e4:e0:83:75:7f:
                    1e:e3:8d:00:f5:82:e9:dd:d3:36:eb:03:37:20:7a:
                    69:bd:21:41:3e:96:cd:d1:a8:00:5b:fe:ab:ad:f6:
                    e3:8c:70:54:9e:13:cc:34:dc:47:3b:37:f6:35:fb:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:26:0F:18:21:87:0D:98:A1:18:D2:1C:90:F4:C3:F3:C8:05:72:13
            X509v3 Authority Key Identifier:
                keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:f7:26:83:25:e2:80:ee:cf:34:6c:32:ea:fa:d6:7e:d5:
         4e:8c:a8:87:2e:51:a7:41:ca:e6:0b:14:21:e0:46:ed:3b:cd:
         cd:ba:89:84:38:0c:55:9c:0a:12:a7:28:1b:25:92:6a:ea:5c:
         8b:ee:14:02:81:c0:bc:24:56:db:97:83:4f:44:05:88:c2:73:
         3b:2e:ee:5e:c6:b7:72:bc:66:52:22:14:8b:d5:e8:f6:2a:4d:
         ba:70:62:53:78:10:e2:f8:9e:c1:2c:9c:6f:89:4a:90:67:eb:
         27:0d:c0:e6:2f:28:b1:57:4e:f1:1a:b0:b0:98:bb:f1:02:6c:
         a5:ac:af:cd:c2:af:f2:97:40:01:da:6e:3a:8c:21:6a:a6:7c:
         ae:76:41:52:d9:bb:c1:90:83:18:25:6e:d4:bb:a7:20:4d:49:
         dd:12:d4:e6:70:f5:54:2e:b5:56:ed:02:85:6f:e2:ad:a8:44:
         f6:15:97:55:a6:67:b9:5f:6f:cd:0d:e9:9a:c3:fc:9e:c1:6f:
         3e:c6:4a:5c:3d:33:6a:89:6f:7e:7e:ca:03:63:2f:1e:13:e1:
         83:f0:d5:b7:de:68:14:36:46:f3:71:9b:3a:59:f7:90:4e:5c:
         17:34:36:8d:dd:7c:3c:0b:b1:24:ff:df:10:82:90:0d:85:e8:
         75:14:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:53:37 2026 by rpki-client