Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
File:                     oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json)
Hash identifier:          Ctx+Wv9+5MJaCM/5vIhPP4mGcBXd1QCzFXBTEqbke9g=
Subject key identifier:   79:B6:79:AD:B5:BE:E6:CA:24:F4:3C:B0:64:56:75:DE:A5:4A:C3:7B
Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
Certificate issuer:       /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
Manifest number:          01DE
Signing time:             Mon 21 Sep 2026 03:35:56 +0000
Manifest this update:     Mon 21 Sep 2026 03:35:56 +0000
Manifest next update:     Mon 28 Sep 2026 03:35:56 +0000
Files and hashes:         1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: L+sBVr5bSwcL9lTd4Pw6K/E7NpdmoMfmSKYkiUJMp5g=)
                          2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: Km37wq6aDw75/u5KZyWOq+MrrDlARwtAXstjS4OwvhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
                          rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
        Validity
            Not Before: Sep 21 03:35:56 2026 GMT
            Not After : Sep 28 03:35:56 2026 GMT
        Subject: CN=6ab0a61c-4720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:17:9e:63:8f:16:3b:85:49:d9:56:a2:13:
                    0d:cb:ea:8a:db:60:38:e9:e4:69:e6:82:1c:d7:e1:
                    1f:ce:0a:5e:c6:0f:46:a9:3d:74:83:1f:06:f0:97:
                    f3:9c:88:c6:45:c6:46:7d:73:db:6a:be:11:50:36:
                    af:6b:72:9e:e4:ac:60:af:81:c1:6a:32:82:73:7d:
                    c6:13:2f:7c:3c:cf:a3:b9:1f:3c:a7:62:76:2b:50:
                    d4:98:80:56:e0:e1:96:5a:6e:05:79:9c:13:7a:eb:
                    31:89:6c:2a:14:cc:1b:ac:a0:65:49:e8:56:60:b9:
                    b4:5a:bd:ce:df:f5:cd:d3:2b:a3:4b:84:a8:74:e9:
                    ef:5d:d0:03:79:1f:5a:b4:50:81:af:59:de:0e:b5:
                    01:db:a6:76:2c:06:2a:9e:19:91:12:d3:86:b2:7b:
                    2c:e3:35:05:cb:7a:6e:c1:df:d1:a5:5c:49:f0:2d:
                    05:f6:1d:97:1f:cd:5e:d5:bb:23:9e:64:b7:cd:84:
                    1e:78:9d:02:36:80:b8:41:59:d3:80:2f:e5:ad:e0:
                    16:75:5f:64:c6:28:80:dd:01:24:9b:9f:b3:83:97:
                    62:6b:e2:92:00:7f:90:20:ac:ca:ed:1b:3f:fe:78:
                    4b:bc:e9:30:83:42:27:40:39:61:f4:81:5b:68:5c:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:79:AD:B5:BE:E6:CA:24:F4:3C:B0:64:56:75:DE:A5:4A:C3:7B
            X509v3 Authority Key Identifier:
                keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:5e:dd:fc:18:23:10:2b:72:ce:2a:ba:30:d3:56:b2:11:
         bf:2a:fe:56:ee:5c:36:9d:e8:c9:21:ac:af:67:38:12:0e:ac:
         da:52:82:4f:7c:cf:c1:18:bb:c5:5d:98:a0:67:7d:05:c6:ae:
         a1:6b:58:c2:89:16:99:4a:81:01:fa:e2:c0:e3:e9:9d:6e:9f:
         31:c2:e9:b0:21:15:13:54:c3:06:a4:5c:de:5a:8a:d4:35:22:
         a8:e9:9f:de:19:6a:cc:4a:67:fe:a3:6f:ef:21:02:14:d1:b6:
         0d:ef:df:0c:c4:3b:48:d0:b9:62:4e:32:24:db:08:5b:a5:63:
         53:4b:39:22:6a:f9:81:0a:41:f3:90:09:c6:33:39:6a:3d:9c:
         da:f9:bf:ee:9e:14:18:89:52:0c:c8:4b:f8:10:81:56:cb:43:
         19:fb:49:57:c7:7b:4b:41:52:ee:ee:eb:c2:e9:34:30:dd:ba:
         3d:45:98:12:3c:53:a4:fa:34:aa:de:40:1a:d0:74:91:34:5f:
         15:35:87:b2:9d:b3:67:1a:54:cb:6a:b4:18:fe:28:88:27:77:
         2e:f4:3e:bb:cc:5f:b4:4f:e4:d9:bc:68:17:57:73:62:ce:3c:
         fe:8c:1b:02:6d:4b:40:00:30:d2:a4:f2:18:52:af:7a:09:ed:
         51:eb:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:11:28 2026 by rpki-client