Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
File:                     tOIgv84ikKotb4jteq4w3okVyUw.mft (raw, json)
Hash identifier:          dMmVheZQP6w+1i1L53xQNA/CLubFI1u5bauzjWlHMfM=
Subject key identifier:   E9:31:6D:0B:93:CF:87:C7:C6:9C:35:FC:D6:18:F5:EF:0B:A3:CD:29
Authority key identifier: B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
Certificate issuer:       /CN=A91AC415/serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
Manifest number:          30
Signing time:             Sun 27 Sep 2026 03:53:54 +0000
Manifest this update:     Sun 27 Sep 2026 03:53:53 +0000
Manifest next update:     Sun 04 Oct 2026 03:53:53 +0000
Files and hashes:         1: tOIgv84ikKotb4jteq4w3okVyUw.crl (hash: 3cJQ9RN9RyaZPAjU1cTvmo20WYOiG5fYo22Zxh4o+NE=)
                          2: 39D27246750511F1B847DD7F6CA30FBC.roa (hash: cia8IPAkix/MNyKAepXMq+8vc+QuoRzXeBNvwlaYww4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC415, serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
        Validity
            Not Before: Sep 27 03:53:53 2026 GMT
            Not After : Oct  4 03:53:53 2026 GMT
        Subject: CN=6ab89352-8649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:1b:13:38:c9:b3:25:8e:0a:30:a8:ce:a0:
                    b3:84:b3:9e:8f:03:9e:de:32:06:4b:2b:35:0b:aa:
                    54:6b:2d:0a:f7:45:a0:ee:8b:cd:43:70:d3:e9:9b:
                    26:38:cc:2c:1c:3d:9f:03:0c:e5:76:f1:98:21:a7:
                    84:13:09:0e:e9:9b:27:cd:c6:57:d5:5c:58:ed:a0:
                    1e:79:51:3d:89:80:bd:b6:2c:65:c9:96:5f:26:b3:
                    94:ee:75:80:59:10:0d:bb:9e:49:e4:27:8b:30:f2:
                    cf:81:8b:6f:31:99:37:13:ad:e2:9c:ea:74:bb:f4:
                    c0:c3:57:14:9d:b8:2f:4f:31:f6:87:6a:2d:d1:f2:
                    1d:1e:3c:80:6e:4c:62:3b:96:96:b7:66:c1:87:6c:
                    a8:89:d4:c1:d5:97:6a:30:11:37:98:47:20:cf:dd:
                    59:f0:a2:26:eb:43:01:01:5a:9e:fe:c1:c7:3d:a7:
                    b8:cf:77:f2:9c:18:b6:5b:8d:0e:17:ad:24:ea:e0:
                    47:28:3b:49:fd:3d:25:26:76:dc:eb:c6:57:a3:64:
                    6f:ab:7c:14:3d:fa:e4:2b:de:0d:8e:4e:99:2b:2c:
                    f4:85:a6:d7:b0:2b:96:f1:4f:23:80:9a:01:fe:ee:
                    0d:60:e0:40:c9:6a:d0:51:3a:84:2c:7c:78:e6:4c:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:31:6D:0B:93:CF:87:C7:C6:9C:35:FC:D6:18:F5:EF:0B:A3:CD:29
            X509v3 Authority Key Identifier:
                keyid:B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:97:b4:3f:4f:da:41:c4:c4:48:87:03:df:8e:5e:47:d7:02:
         22:1b:80:16:55:56:14:fa:e3:d7:32:76:d1:a5:9d:64:21:31:
         ec:f4:0d:6b:63:9d:40:b9:0e:13:d3:f7:ab:5e:c6:90:3b:b8:
         6a:e8:46:45:48:a9:07:bd:87:d4:ab:35:58:f6:47:62:df:de:
         60:80:f0:5b:71:1d:39:7b:db:ca:f4:2e:76:af:53:2f:e2:4f:
         14:08:38:1a:45:0c:87:55:05:18:23:7a:e9:67:d3:c9:38:6b:
         c5:9e:f2:15:c0:64:4d:77:42:9b:a7:79:79:5e:4e:0f:42:a0:
         a9:e0:e5:f0:dc:36:36:81:5b:2e:56:b1:b9:5a:f9:65:d3:e8:
         7a:09:98:b7:41:45:45:71:82:0d:29:2a:96:f6:aa:6a:24:58:
         a8:3d:f2:de:94:26:56:0e:5a:0b:d0:58:2c:9d:bd:58:71:5b:
         76:d6:a4:21:22:ce:7f:4b:98:99:96:06:4c:ef:71:fb:ac:44:
         d4:0c:82:99:09:29:e2:d2:37:24:c4:c3:34:10:79:f8:13:ed:
         9c:ed:81:74:c3:c8:86:a0:59:fe:ab:5a:e9:88:52:87:86:3a:
         03:8b:ee:36:c5:e8:b2:e9:06:25:e4:50:fe:ff:b2:82:72:97:
         ec:88:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:26:08 2026 by rpki-client