Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
File:                     7DwKarkc4TMW0oQzDDgovv4qNBM.mft (raw, json)
Hash identifier:          UdgNxeWSwu1bSXSQ+cbLoPcIdUmB4oMUotmfiR9Iabc=
Subject key identifier:   80:72:07:1C:D6:20:78:66:55:93:EC:E1:C3:49:FC:05:65:1D:D1:FB
Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Certificate issuer:       /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
Manifest number:          94
Signing time:             Sun 27 Sep 2026 08:04:29 +0000
Manifest this update:     Sun 27 Sep 2026 08:04:29 +0000
Manifest next update:     Sun 04 Oct 2026 08:04:29 +0000
Files and hashes:         1: 7DwKarkc4TMW0oQzDDgovv4qNBM.crl (hash: 3micDCATXR1a8km7BpuVhBEBGRRnK/fEwiEd2Y9Znfg=)
                          2: 8FB3AD6AE58611F0A2F174BA446F56BC.roa (hash: sTktGN5NFdYq+gsUaHWLCXYe1rpci+mF34P/YuXEE0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
                          rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
        Validity
            Not Before: Sep 27 08:04:29 2026 GMT
            Not After : Oct  4 08:04:29 2026 GMT
        Subject: CN=6ab8ce0d-8e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:c9:d3:3b:a3:5e:e8:69:2a:19:23:9a:b3:
                    64:4f:75:ab:95:80:14:d7:19:ff:fd:69:d7:fc:14:
                    9b:10:10:30:90:5d:02:0d:26:c7:c5:d6:5b:54:49:
                    57:ea:a2:94:f3:58:08:69:0e:c6:5e:e4:1a:c3:c5:
                    f3:6e:bf:73:f3:46:7d:ba:69:a2:10:94:da:4e:98:
                    07:a2:4f:51:a1:85:75:77:a3:a1:ba:d8:32:8b:9b:
                    6c:99:5f:41:f8:18:dc:a6:3c:38:e4:b7:5c:29:bb:
                    80:66:e9:c8:4d:bf:9d:32:c2:c9:3c:29:4f:45:15:
                    f9:d2:9d:cf:6e:19:2a:b3:07:af:2a:72:c8:3a:3a:
                    1d:83:16:94:62:6f:67:58:8a:59:a6:e7:bd:b1:b8:
                    67:fd:ea:e1:07:91:1e:7e:43:dd:eb:e6:9c:d2:6d:
                    cc:0a:1b:e9:29:ef:bd:ae:fb:66:1b:59:ba:1b:81:
                    c6:08:bd:88:35:c4:91:ff:aa:c4:46:f0:93:9f:c2:
                    4b:1a:d0:fa:0d:c5:d7:bc:76:88:5e:0c:0a:01:90:
                    24:3a:65:88:40:d8:ce:86:6e:8f:92:81:46:d8:15:
                    44:98:57:9a:5f:9c:05:fa:bf:55:9a:81:05:31:4c:
                    b5:4d:17:a8:d5:a1:97:09:54:a7:cc:14:a3:89:08:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:72:07:1C:D6:20:78:66:55:93:EC:E1:C3:49:FC:05:65:1D:D1:FB
            X509v3 Authority Key Identifier:
                keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:07:ef:33:74:b6:0d:c8:e6:79:47:a0:a4:51:5a:11:f2:
         de:a2:f7:fe:87:93:a9:53:a0:af:66:d2:d1:65:56:90:bf:31:
         43:a8:20:d8:6f:4a:5a:98:11:d3:1e:9f:e6:df:29:ab:6e:ef:
         76:6e:34:1b:7a:a8:ab:12:d2:0b:49:68:bf:fd:36:35:cd:97:
         b8:c3:d3:6b:45:a9:be:6b:ee:81:44:9b:a2:2a:47:78:ec:b5:
         b9:c6:35:68:e4:13:39:35:32:22:2b:3c:d3:75:13:96:1c:92:
         37:3d:3c:27:43:cb:bd:31:55:5c:6f:a0:1d:79:36:b1:0d:e8:
         d5:6a:f3:88:15:5f:64:b0:50:42:bd:91:37:41:04:0e:84:84:
         8d:a6:7a:02:1f:c2:8a:a6:bb:04:e3:a9:ba:b6:55:6f:08:02:
         92:84:92:72:a9:06:10:bf:95:b9:a5:4c:16:58:ea:a5:7d:8a:
         1f:65:a1:44:5d:be:8d:00:67:8c:24:15:3d:51:ed:0b:eb:87:
         8a:29:a0:9e:11:87:f5:59:53:87:51:72:fb:e1:b5:b6:7f:07:
         11:63:f5:6d:e7:f9:dc:61:e7:b9:71:22:8a:d1:26:3c:1c:9f:
         f3:21:0f:c6:0b:62:d5:14:a3:84:bf:74:a3:c7:d0:3a:62:38:
         b0:9c:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:49 2026 by rpki-client