Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File:                     4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier:          HYXb+QJ78JQNT5piKKzb4QnbkFag2KkjpSuvA9PwlVI=
Subject key identifier:   11:8A:A4:68:FA:B1:04:D6:89:66:85:BA:9D:17:4B:A2:4C:BE:A9:D6
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer:       /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial:       0484
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number:          047C
Signing time:             Sun 20 Sep 2026 23:53:36 +0000
Manifest this update:     Sun 20 Sep 2026 23:53:36 +0000
Manifest next update:     Sun 27 Sep 2026 23:53:36 +0000
Files and hashes:         1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: +jvfXHnElku4HJ2OpGprUQhdulXt2/IFURlygtESovY=)
                          2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
        Validity
            Not Before: Sep 20 23:53:36 2026 GMT
            Not After : Sep 27 23:53:36 2026 GMT
        Subject: CN=6ab07200-0c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:ae:ef:4e:8f:9b:45:43:dd:fb:9b:d7:58:
                    6d:89:57:3c:b0:f8:fa:24:5e:1b:12:fa:ca:f9:ca:
                    a0:9e:5c:53:23:bb:e7:51:fa:32:26:e3:73:a1:04:
                    5d:b0:cf:32:98:f5:68:0c:8d:ee:1c:19:41:c9:96:
                    05:65:d2:b7:ee:92:2a:e8:42:72:ce:fd:c7:a7:6d:
                    48:65:67:1a:ab:0c:c1:db:8b:fb:99:05:de:ed:f9:
                    23:2c:4d:1c:1f:99:70:71:d5:88:0e:ee:a8:2b:bc:
                    10:41:aa:4d:e4:de:ff:e1:f3:5e:5e:7d:9d:5a:39:
                    cf:84:69:50:ad:99:c3:d4:da:a7:53:c9:02:f3:4b:
                    c9:1b:28:2a:74:f1:51:8c:ce:bc:1a:57:c1:d7:dd:
                    74:71:18:98:25:4c:4d:5e:2b:98:bf:68:34:2f:27:
                    60:ed:35:bd:24:64:b6:32:57:ca:94:ef:6f:d3:7c:
                    78:40:4a:e6:4e:b9:4f:40:f4:ea:e0:8e:81:53:21:
                    fc:f4:2e:27:af:4f:77:b7:d9:9e:69:fd:50:cd:e7:
                    b6:83:82:c4:c0:47:1f:47:6c:3d:d7:27:6f:cd:72:
                    a2:de:b6:96:89:91:40:ff:03:d3:5c:3b:f7:b1:f6:
                    51:cf:e8:86:3b:3b:9b:5b:53:01:5a:de:f1:bc:a3:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:A4:68:FA:B1:04:D6:89:66:85:BA:9D:17:4B:A2:4C:BE:A9:D6
            X509v3 Authority Key Identifier:
                keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:28:e3:39:2a:0b:0a:0b:94:0b:df:38:40:51:a3:1d:31:af:
         2b:eb:31:40:6a:28:12:31:e1:05:19:d0:c4:30:8e:1a:74:8d:
         07:55:78:ed:28:9c:c4:59:9d:21:f0:f1:c1:f3:c8:d9:bc:22:
         26:70:cf:de:b9:b4:83:50:8f:c0:3c:3f:51:a8:7b:6f:cf:e1:
         da:3c:23:e6:ec:fb:23:42:6d:3e:5c:cf:51:86:80:45:f1:0d:
         f8:eb:2a:e6:8f:12:7e:00:f6:96:ea:c2:59:eb:46:15:a6:e2:
         8c:06:7c:eb:d6:39:aa:e2:00:3f:5f:ee:a0:8e:0a:bf:3d:18:
         82:62:c6:20:4f:93:62:6e:bb:4e:76:9b:1f:c0:b9:d7:9b:01:
         1f:cf:68:85:bd:54:8e:94:38:c9:1d:04:7a:5c:ea:72:d8:cd:
         ad:10:1b:2f:39:d0:29:17:02:31:47:6a:74:b7:0d:ac:ed:3b:
         b1:b1:6f:69:1e:e6:59:e2:fd:1f:74:57:44:f4:d1:20:07:be:
         c7:dd:50:f6:75:9f:1c:24:4a:f7:9b:3a:63:2c:54:7e:77:52:
         03:66:1a:dd:31:fa:84:33:94:9e:a3:67:95:f4:5e:db:66:5c:
         e0:ad:76:81:ff:db:24:b7:fa:0e:ca:e7:ee:a8:c2:29:81:3b:
         2b:e6:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:50:37 2026 by rpki-client