Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File:                     PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier:          0VxcDnnwl+iO9xjBPU/cNot0l37w/pr2gwRN64dIE/0=
Subject key identifier:   EB:F7:DC:30:E5:23:8F:47:8E:02:1A:A2:EF:63:BB:BC:FB:DC:8F:B8
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer:       /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial:       0980
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number:          0974
Signing time:             Tue 22 Sep 2026 19:54:00 +0000
Manifest this update:     Tue 22 Sep 2026 19:54:00 +0000
Manifest next update:     Tue 29 Sep 2026 19:54:00 +0000
Files and hashes:         1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: S3x3H6DiH1tdzrC58Hl8dTdRuiCoIx29IBPhI59uPlY=)
                          2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: xiYVAwV4Hd8CI0pxe/FxOmue7CKhH9jCSO4x/aLBcjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
        Validity
            Not Before: Sep 22 19:54:00 2026 GMT
            Not After : Sep 29 19:54:00 2026 GMT
        Subject: CN=6ab2dcd8-3799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:43:76:b7:1b:fd:2f:89:25:33:d1:2d:47:
                    ae:36:9e:2f:d7:da:c4:59:d0:59:1d:1f:07:0b:37:
                    60:7f:b0:bf:10:85:48:52:9c:9f:18:09:2a:a1:b5:
                    6f:30:7e:52:fc:b7:86:d6:8a:46:1d:5e:c0:ec:f9:
                    52:73:f3:79:36:96:02:0d:86:90:83:6c:4b:82:91:
                    55:5a:00:f1:36:e7:0b:5c:ee:f5:ef:68:db:a3:5c:
                    fc:a7:b8:16:d4:1b:c2:9a:e3:25:f6:ef:83:be:87:
                    a5:f5:a1:c2:ac:81:af:9b:26:b3:60:69:7a:29:58:
                    54:e8:1b:f0:68:6d:45:62:44:af:62:15:bf:0b:56:
                    e6:97:4e:4e:36:c2:60:f2:7f:20:09:47:6c:b7:b7:
                    02:07:b0:a0:e3:5e:a2:f8:05:ec:cc:e8:b0:a2:6b:
                    c0:08:0d:7b:9a:e6:2d:b1:64:58:d1:ba:0e:10:df:
                    cf:41:c5:b9:90:d4:e4:c4:51:70:fc:bf:e7:15:2e:
                    49:12:ea:7e:f4:e6:be:c7:90:90:68:75:10:5b:a2:
                    53:b3:f5:60:84:8c:fb:40:59:c2:2e:3b:19:03:7f:
                    1c:e8:f8:2d:49:a7:4f:dc:63:b8:b6:5a:b5:af:36:
                    53:74:6f:14:7d:42:12:cb:e3:00:da:91:7d:91:9a:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:DC:30:E5:23:8F:47:8E:02:1A:A2:EF:63:BB:BC:FB:DC:8F:B8
            X509v3 Authority Key Identifier:
                keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:74:69:c4:72:c9:b1:d4:59:03:c9:c9:96:6e:eb:97:b1:
         f7:9c:11:f1:64:c6:dd:b6:8b:7e:c1:f9:e3:48:4f:76:d5:82:
         8c:f3:7f:b9:0b:e9:30:38:a1:e3:1d:37:60:77:4a:a7:ed:1e:
         92:05:39:47:17:2f:00:3b:ba:b6:be:70:4e:4f:a9:76:bc:72:
         5a:ad:98:80:e8:e7:9a:5f:8f:4b:25:a0:64:b6:05:81:e6:51:
         01:de:77:fe:5f:3f:db:21:ab:57:90:54:79:a0:13:c4:54:15:
         e6:71:98:da:73:af:d4:03:cc:2d:9f:1c:f0:6f:17:51:b0:2a:
         2c:a3:af:8a:e0:47:9c:4d:6c:a8:5b:56:7f:61:68:e9:e8:bb:
         49:cb:ed:ee:84:90:20:c7:92:83:49:87:5c:d8:73:37:e6:7f:
         93:e5:b8:8a:88:93:15:34:51:54:b9:e8:cd:94:76:be:8c:62:
         fb:64:15:25:a7:39:c6:1d:c2:8c:9e:c6:b0:99:c9:dd:b1:cc:
         e9:b7:0b:5b:01:f4:4c:cf:d5:39:48:40:d7:54:a7:6d:a7:96:
         19:2a:99:01:12:0c:8a:87:dd:6f:21:d4:bf:78:a9:22:9b:ff:
         6a:61:68:c3:4a:a7:ea:38:09:9e:44:26:ef:17:11:46:b3:3e:
         0a:87:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:18 2026 by rpki-client