Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File:                     votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier:          r9nTvIfd5tsFuB7UZW+BmHvYZS8zsDqcQXO4IwM77WE=
Subject key identifier:   5A:C7:3F:91:D9:38:52:6C:91:E2:A2:6B:57:8F:DC:24:2D:90:A4:95
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number:          0144
Signing time:             Sat 19 Sep 2026 05:28:36 +0000
Manifest this update:     Sat 19 Sep 2026 05:28:36 +0000
Manifest next update:     Sat 26 Sep 2026 05:28:36 +0000
Files and hashes:         1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: r5Jz++jbPmuSOq3tnRqzZF7RlxleITVw39RWtZoWDrM=)
                          2: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
                          3: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Sep 19 05:28:36 2026 GMT
            Not After : Sep 26 05:28:36 2026 GMT
        Subject: CN=6aae1d84-9979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:34:0e:3f:e8:4d:03:da:b7:d9:2e:28:27:42:
                    e6:d4:0b:2b:22:7e:b3:11:ea:fa:c1:8e:71:d0:de:
                    2c:a6:c2:c6:86:68:54:86:3f:fb:45:09:86:36:36:
                    cf:62:a4:76:2e:de:a8:b4:61:c1:c6:be:19:b8:1f:
                    ee:00:41:b4:d4:85:fe:bf:94:2a:21:ad:5f:fe:ca:
                    c2:c7:ee:bf:51:1f:f2:f7:eb:a8:05:7e:8d:d5:3f:
                    b6:28:e8:c1:8e:69:88:f3:51:19:e6:6f:62:6f:e6:
                    93:57:82:53:67:d3:a7:71:94:36:c4:32:1d:86:72:
                    cd:56:86:2a:6c:2a:e7:c6:39:ee:13:a3:9e:a9:84:
                    9a:9d:ae:f2:38:a4:9e:31:96:27:c7:38:a8:3d:07:
                    38:ec:23:47:79:2b:80:e8:86:29:b0:87:64:4e:15:
                    6b:05:22:0d:62:34:29:f4:7d:12:d4:45:3d:27:e5:
                    74:4c:62:f6:b0:31:fc:8b:6a:9c:18:e7:fb:fa:9d:
                    96:19:89:f8:27:b8:92:7d:38:00:58:69:3a:14:61:
                    db:b5:1b:e2:1a:dd:73:b6:bd:0b:6b:4e:29:c1:b9:
                    18:ba:67:8d:7f:5e:1a:f4:63:59:6b:ea:ca:ab:2e:
                    e1:58:a5:7d:2e:85:5f:a4:f3:41:b2:03:8f:88:8c:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C7:3F:91:D9:38:52:6C:91:E2:A2:6B:57:8F:DC:24:2D:90:A4:95
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:40:d7:77:be:3d:c1:8b:d5:ee:63:9a:d3:c3:53:f7:49:
         6e:ba:18:70:27:5e:95:95:6b:64:2d:cb:f3:5f:2b:7b:8f:81:
         52:7f:eb:3d:69:7d:aa:31:f8:ad:17:f4:9c:cf:f0:f4:7e:df:
         b6:cc:fe:3c:88:9e:0d:e9:54:8f:2c:9e:22:10:29:70:32:14:
         29:33:14:f9:07:76:5b:0f:24:62:23:83:0e:83:c4:fc:cf:95:
         de:3f:96:17:85:8a:01:46:43:c6:d2:c9:50:e2:68:7e:9b:0f:
         31:53:23:0e:3d:03:aa:d9:98:a3:4f:7b:a2:d9:9c:f3:4a:20:
         35:f1:20:ad:b6:8d:d7:0a:7c:7a:18:72:4f:04:28:bc:f1:95:
         d0:48:89:55:eb:43:4c:99:a4:c8:2a:4e:fa:ae:9b:f6:a1:86:
         fb:f5:36:14:01:84:f5:d5:14:0f:29:87:3e:2c:bf:41:67:23:
         58:c7:5b:2e:b3:4e:14:be:d2:c3:7b:0c:95:c7:90:5a:a9:76:
         f4:b4:25:84:45:5c:db:02:eb:6e:87:b7:2a:4d:9b:8e:82:6e:
         36:ff:3c:98:e4:04:e0:1d:bc:7b:3f:17:bc:5a:d7:ff:cf:87:
         8d:41:18:73:1e:18:bf:08:24:06:8f:12:07:18:f4:12:ee:dd:
         92:2c:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:32:22 2026 by rpki-client