Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
File:                     RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json)
Hash identifier:          cRd1XfzHzwzXLQMR87T4CVTctdiHTffeB49ShKi7+5U=
Subject key identifier:   E1:5C:15:F6:E6:C0:F2:77:8B:4C:05:EB:9C:BC:1A:B3:85:29:84:55
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Certificate issuer:       /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial:       037B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
Manifest number:          0374
Signing time:             Fri 25 Sep 2026 00:38:19 +0000
Manifest this update:     Fri 25 Sep 2026 00:38:18 +0000
Manifest next update:     Fri 02 Oct 2026 00:38:18 +0000
Files and hashes:         1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: +WuAjBTskLu75JJA2wu4MTs4c6P0UaWnH+nOzazU6Cs=)
                          2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: 95MXEPd3XWfhWFM2kZfvjKE+kkcge5QqhzEgDRS8E0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
        Validity
            Not Before: Sep 25 00:38:18 2026 GMT
            Not After : Oct  2 00:38:18 2026 GMT
        Subject: CN=6ab5c27b-9ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:83:9e:d7:dc:ac:8a:15:a6:91:f3:57:1f:
                    f8:91:94:48:b9:b2:98:01:ea:38:22:95:e6:3d:a7:
                    c4:69:bf:75:96:79:0b:a0:11:bd:96:ed:fd:dd:28:
                    2f:b8:26:c6:05:a8:f8:3a:d0:5f:ae:07:ab:26:4e:
                    dc:ce:ff:d9:04:34:21:4c:e8:df:f5:73:e0:33:7a:
                    42:e5:b8:99:78:4f:f0:ec:fd:ec:1d:f6:ed:24:f0:
                    40:f5:6f:38:97:0e:99:a5:cf:cf:5f:fa:14:0e:2c:
                    ab:0f:bd:d4:9a:31:e7:2a:ab:15:76:2e:c9:93:fc:
                    4c:dd:96:b1:87:1a:a6:9e:74:94:ed:72:cf:d4:db:
                    6b:44:0b:b9:45:f2:88:70:2c:95:74:d6:ef:8f:02:
                    b3:0d:bd:c5:c6:ad:8c:0e:47:30:a7:43:d2:4e:41:
                    80:ce:f6:1b:ba:36:70:c1:28:89:f2:12:17:f2:79:
                    30:f9:c5:63:6f:39:31:28:db:87:89:37:20:c2:ce:
                    e3:e5:ab:63:e5:3c:f3:62:01:d0:04:7e:c6:92:2f:
                    f2:2e:3f:9d:fe:66:9c:4b:aa:0d:4d:7e:dc:ee:4e:
                    22:55:1e:73:77:47:50:6e:38:0f:95:26:2c:be:03:
                    ad:fb:0e:53:df:2f:c3:10:d5:8c:38:11:e1:27:40:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5C:15:F6:E6:C0:F2:77:8B:4C:05:EB:9C:BC:1A:B3:85:29:84:55
            X509v3 Authority Key Identifier:
                keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:29:e0:50:c6:6f:d1:1d:59:cd:78:98:21:30:3d:23:10:
         28:14:fd:57:90:88:30:22:e1:39:cd:c6:3d:7c:34:06:43:64:
         64:2a:b8:b8:81:a0:27:1b:3f:75:d2:01:b8:b7:56:00:27:60:
         8c:42:6b:e7:27:40:e0:95:2b:a3:f4:b8:0e:ee:77:af:22:69:
         9c:60:4b:a7:ba:7e:d4:8b:b2:74:7e:a1:f2:b5:58:1e:87:cc:
         f8:67:1d:18:22:15:c9:27:72:0e:bd:89:6c:a8:01:0d:4f:8e:
         51:b7:c0:39:84:37:08:2d:92:60:07:7d:9f:08:a5:1a:fd:15:
         a4:3e:4c:18:86:5b:73:da:5e:ba:48:fa:fa:25:83:9c:e2:38:
         4f:f0:9e:e1:17:a3:28:fc:2b:ed:ae:82:c5:37:70:98:8f:a4:
         15:75:44:f7:36:7f:ce:d1:66:b4:b7:5f:6f:e7:26:f2:4f:fa:
         6b:c2:ab:17:c0:6d:73:8a:a7:31:36:9d:7b:9f:69:f4:be:79:
         16:42:ee:56:54:e5:d0:bc:fe:60:34:91:a2:18:f0:16:bb:b4:
         d1:67:ba:4d:2c:89:dd:ab:7a:0f:b4:76:8a:d2:cd:b4:b9:78:
         da:f7:2a:20:00:ca:72:aa:c8:96:ad:a5:3c:f3:1c:ae:28:e3:
         a1:86:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:41:17 2026 by rpki-client