Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File:                     RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier:          gz5vd8ns1mYr+8Z5VvM0YaYI+Hk5Khl8shoGW1JZNCc=
Subject key identifier:   FF:0F:3C:2D:EA:02:4C:6A:68:5B:B5:42:74:9E:2C:AB:3F:06:6C:E0
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer:       /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number:          027A
Signing time:             Mon 21 Sep 2026 01:57:33 +0000
Manifest this update:     Mon 21 Sep 2026 01:57:32 +0000
Manifest next update:     Mon 28 Sep 2026 01:57:32 +0000
Files and hashes:         1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: m1l9TGddrwzdXmkAOW/8bp6ogpEyUBhjMl4CcG27FUM=)
                          2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: dQ6l5tQee2U9TKJM4j5OA9rCGVJD8lDuRFAfRLJsHO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
        Validity
            Not Before: Sep 21 01:57:32 2026 GMT
            Not After : Sep 28 01:57:32 2026 GMT
        Subject: CN=6ab08f0c-155d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:07:de:e1:7b:11:c2:48:31:5a:a2:fe:01:
                    2f:2d:8f:37:06:f8:fe:fd:60:0e:bf:ae:85:b0:a4:
                    66:10:9e:53:63:95:aa:21:b4:8f:01:4d:9c:2b:13:
                    a0:24:00:ed:12:e6:d3:5d:9c:d0:55:a5:0d:59:57:
                    cd:6d:40:31:ef:50:ab:08:03:1b:7c:f5:a0:69:7c:
                    fa:8c:82:ab:77:1f:e5:40:c8:ed:5b:c7:c6:5f:79:
                    34:50:91:40:cc:af:d8:8f:ca:22:d8:f2:38:33:e3:
                    02:34:4a:b1:9c:b5:0f:0c:64:f3:1f:27:f0:d6:e1:
                    ef:82:a7:b9:0c:0b:be:73:30:a4:fc:5d:d2:bf:4f:
                    6c:9a:1f:1d:ce:ab:03:d4:f3:71:ab:29:7d:2e:01:
                    71:83:eb:9f:52:cc:eb:a6:4a:48:fd:d1:2a:78:a0:
                    e8:d0:08:34:01:a5:8f:95:6b:b0:ec:98:c6:d1:43:
                    13:95:ca:1d:16:f5:69:7b:73:40:95:be:c3:06:ae:
                    f8:17:b5:63:70:00:d5:3a:29:bb:53:79:18:8c:9a:
                    28:40:73:7f:a6:16:9a:6a:d6:10:8a:dd:72:f4:fe:
                    5e:9f:d6:f7:c4:c1:c9:fe:26:c5:75:43:f1:4b:5f:
                    57:ab:11:2c:fa:c3:5d:bb:e3:b3:d6:14:29:f1:dc:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0F:3C:2D:EA:02:4C:6A:68:5B:B5:42:74:9E:2C:AB:3F:06:6C:E0
            X509v3 Authority Key Identifier:
                keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:db:4a:20:7e:46:ca:c3:e1:9f:cc:15:8d:02:c6:42:48:2f:
         f3:ba:58:e2:c2:fc:79:38:2a:10:c5:f6:45:c0:14:0a:46:5f:
         25:2f:1c:2f:b5:f4:dd:3c:7f:eb:34:01:c3:47:98:0c:0f:d0:
         ad:d8:ba:19:6f:e9:4b:86:e9:75:32:bf:0a:c4:00:a5:02:ba:
         f4:a1:29:4c:d0:55:f9:4c:4f:0e:c2:6e:78:43:66:3e:a3:56:
         53:c3:8b:5f:73:8b:b0:14:65:f3:c5:64:cc:a0:93:a1:6d:cb:
         d4:78:d5:9e:94:c7:70:a2:0f:9d:99:7d:05:44:54:d2:1e:10:
         20:14:0e:d7:a5:e4:fa:bb:9a:19:c3:dd:26:86:cc:bc:2c:93:
         c6:7d:a4:d5:34:70:5f:08:89:6c:3e:bd:e3:09:89:4d:28:12:
         0e:71:ed:a5:f1:5a:82:7a:b2:a8:64:42:91:1e:a7:3e:4d:cb:
         ce:f1:c1:2e:d9:d6:7d:21:1c:06:7d:c9:5c:72:86:83:bb:36:
         1a:d1:a7:24:00:b6:1b:17:03:23:b0:76:86:76:a1:84:d2:5d:
         46:46:ea:0e:a6:90:1b:40:75:85:34:57:c3:59:3e:6d:85:68:
         78:62:be:15:b9:da:e7:cb:98:bd:4a:dc:3d:d6:aa:79:55:56:
         91:a5:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:22:11 2026 by rpki-client