Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File:                     _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier:          aWdMNkklNcl5eJKzoUaEGT10iDe9tmPlhcIO4vPIx0g=
Subject key identifier:   82:CD:B0:2F:16:77:A1:9F:17:9B:C3:46:2E:9F:0A:82:E7:31:04:E3
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer:       /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number:          BB
Signing time:             Mon 21 Sep 2026 06:55:33 +0000
Manifest this update:     Mon 21 Sep 2026 06:55:32 +0000
Manifest next update:     Mon 28 Sep 2026 06:55:32 +0000
Files and hashes:         1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: Or0G0SdZ9/9G92n68bZjDBNxsnu5wBWol+MBo0YwZ9U=)
                          2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: lrVsCGN6vE18SBXjQLOCGLgg3nz8J37VCsU/VIopgQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
                          rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
        Validity
            Not Before: Sep 21 06:55:32 2026 GMT
            Not After : Sep 28 06:55:32 2026 GMT
        Subject: CN=6ab0d4e4-67b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:df:4d:ca:90:f7:a9:5a:a4:fe:9d:2d:86:
                    16:77:bd:58:f6:f7:56:ac:47:e5:ef:b4:8e:94:fe:
                    53:84:02:3b:4f:1c:aa:45:0f:be:5d:c2:0e:fc:7e:
                    a3:b7:68:6a:b7:7a:77:15:aa:33:f5:02:04:ff:55:
                    e6:cb:54:1d:f2:39:51:43:11:88:54:c0:31:c7:60:
                    c9:55:0d:57:fe:f9:19:6c:b7:4c:d1:d0:67:22:2d:
                    c7:c5:f4:06:09:6c:82:ef:5a:ad:68:96:b3:cf:27:
                    f4:8d:9d:db:b4:2c:a5:b1:a1:07:1b:95:67:c5:57:
                    72:b0:43:9a:87:6d:56:cf:e6:d5:22:45:3d:ee:3a:
                    6d:a5:65:9e:ea:f3:0f:b3:2d:c4:6f:31:3e:22:12:
                    65:a8:de:a8:26:d6:a2:e6:ea:75:e3:40:72:7a:e1:
                    2d:ee:a5:e9:14:da:ed:08:a5:2b:a8:d7:26:6b:69:
                    7c:64:c7:38:16:a5:b1:e3:c4:bc:6f:f8:e6:bb:52:
                    a8:24:e8:14:74:80:d6:7e:b0:f3:df:68:9e:8b:f3:
                    46:c3:b1:de:ed:0e:04:78:a4:e2:b0:50:cb:dc:e4:
                    f5:02:27:da:6a:e6:47:aa:66:4d:57:37:40:35:13:
                    f3:0d:a8:2d:64:09:06:41:0a:8f:a7:eb:cd:75:67:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:B0:2F:16:77:A1:9F:17:9B:C3:46:2E:9F:0A:82:E7:31:04:E3
            X509v3 Authority Key Identifier:
                keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:70:52:48:83:7d:d2:68:8a:2a:01:8e:32:7b:95:da:4d:
         5a:9f:a3:58:7f:7c:3b:c4:c9:8b:dd:29:23:e3:4b:e4:fd:52:
         51:4e:37:bc:72:f0:49:df:37:96:ce:d4:ae:dd:dd:54:ab:a3:
         03:e3:ac:1e:72:54:19:02:58:30:ea:e2:e2:5a:49:74:63:57:
         69:76:a7:d1:5d:18:3a:34:4f:8d:98:55:44:c5:3f:43:3a:7c:
         98:e7:5c:f7:f8:7b:69:41:0d:b0:37:a4:c2:9d:a6:29:ca:9c:
         e3:b1:94:d5:19:03:c6:d5:74:82:48:a1:74:3a:cf:41:56:23:
         03:f6:0e:e8:02:99:2e:ab:6a:95:c5:ed:b4:85:5f:f3:1d:d0:
         00:bc:0c:4a:15:84:fb:50:81:6c:a6:0e:27:de:d3:19:93:cf:
         15:5f:f0:03:30:d6:80:cf:80:71:99:ef:ed:4e:1d:76:12:c7:
         c0:c9:2e:51:7f:34:40:61:22:0e:0f:d2:48:a9:5f:5c:e1:c6:
         6b:65:0e:75:c6:b3:f0:4a:c1:91:0b:bf:dd:d5:2e:77:bf:a5:
         f7:16:ff:54:da:28:4f:c4:ba:00:be:dd:5c:82:69:2b:01:c4:
         fa:76:5b:99:7b:bc:82:53:cd:78:04:bc:4f:0e:16:aa:7d:4c:
         df:6f:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:00:12 2026 by rpki-client