Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
File:                     apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json)
Hash identifier:          UaOBII1nDGbP6J1V8APq2CpiyiDfWQapOCk3V/VANjI=
Subject key identifier:   ED:F5:10:0B:1C:1D:E9:26:FA:A5:87:4C:3D:26:8D:BA:7B:B8:44:5F
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Certificate issuer:       /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
Manifest number:          0523
Signing time:             Tue 22 Sep 2026 23:15:06 +0000
Manifest this update:     Tue 22 Sep 2026 23:15:06 +0000
Manifest next update:     Tue 29 Sep 2026 23:15:06 +0000
Files and hashes:         1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: NL0cRMVZjMHjG8pBQrZ4DJMFnSKUrjDdvU1L6mlHKQM=)
                          2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: w4vmk0k0tj0CqVbPYlrB/AsgbCIeobBsis6ku1ih1HE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
                          rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
        Validity
            Not Before: Sep 22 23:15:06 2026 GMT
            Not After : Sep 29 23:15:06 2026 GMT
        Subject: CN=6ab30bfa-2966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:b5:7d:48:9f:d3:dc:25:64:03:2d:14:ab:
                    52:87:87:f9:d7:14:09:d0:10:6b:58:c0:81:dc:f9:
                    d5:41:97:fd:82:8e:0a:7d:60:b7:ff:f2:59:92:e6:
                    90:08:96:4d:3f:aa:3e:87:81:52:fa:5e:f6:b3:40:
                    7d:10:95:24:82:2f:71:70:f9:a9:5c:c1:d3:ac:87:
                    04:e0:09:82:db:c8:84:be:e3:cf:59:e2:53:9b:d0:
                    bb:e1:3e:c4:6c:1d:40:5f:4f:5f:b1:05:9d:e7:73:
                    bb:30:f0:fe:a8:03:98:fb:e2:37:4c:2e:0a:62:47:
                    46:c7:4f:40:9d:8f:46:a2:42:69:8b:a6:da:4d:f3:
                    13:1d:05:9d:f4:89:06:0b:f6:10:5e:a7:7a:14:bc:
                    4b:b5:03:e5:02:2e:bd:c2:4a:13:39:0d:b8:c8:a2:
                    da:80:bd:6e:de:40:53:fb:65:bc:e9:6c:09:c4:20:
                    c7:2e:89:22:d5:05:3c:d5:66:aa:e8:31:45:27:d6:
                    d9:1d:e4:fd:34:38:47:79:9f:c0:ef:46:d5:b2:1b:
                    50:7b:2f:4d:6a:68:49:f6:45:7b:f6:d5:86:3f:e5:
                    5d:9c:c5:f0:d1:b6:4e:0f:c5:72:5f:e3:74:7d:ea:
                    b7:7d:b0:aa:9a:87:83:ec:9d:b0:5f:51:82:5e:fb:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:10:0B:1C:1D:E9:26:FA:A5:87:4C:3D:26:8D:BA:7B:B8:44:5F
            X509v3 Authority Key Identifier:
                keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f3:23:10:4a:4c:d1:e4:a6:a2:3d:3b:24:f0:5a:73:57:a2:
         7b:73:a4:0c:22:76:1b:28:1a:2b:00:e8:e4:de:7d:92:49:92:
         18:47:3e:90:f4:4c:0d:e6:8b:41:4b:97:23:de:8e:4c:b9:49:
         59:0a:fc:d0:83:33:33:36:90:fc:d3:f5:e9:97:24:d0:f5:2b:
         11:95:b6:23:db:3b:a5:3f:3f:12:7d:31:2c:40:26:73:f5:1f:
         1b:f1:85:62:da:b5:5a:fa:02:8a:c1:ed:b2:25:f6:6e:fc:8c:
         2e:c6:88:e3:4c:90:6b:d2:83:2e:b9:37:0d:18:9f:15:cb:a0:
         7a:36:85:fc:2c:d7:46:38:21:b9:a4:a8:2f:cb:92:91:b6:1f:
         9b:af:e8:dd:09:6b:1c:8c:fa:cb:88:ae:c0:5e:94:7a:97:30:
         6e:3d:18:86:2b:4f:9d:83:fd:f7:d2:d0:dd:8d:87:4d:d1:b9:
         a5:8d:0c:07:b5:f0:b4:31:26:34:33:4a:2a:ca:ef:b9:8e:2e:
         4e:00:26:94:4f:0e:e1:88:8d:06:57:29:1d:48:3f:a7:47:26:
         5d:03:52:a4:dc:7a:69:2e:c9:78:78:92:b6:99:4f:24:29:27:
         56:01:6d:92:97:31:f0:5a:03:c3:7f:bb:80:0e:a9:72:56:2e:
         64:5a:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:06 2026 by rpki-client