Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File:                     rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier:          tzigqTLfEXq+Hdbst2Gd+Bwfx2Ge8jnMInzuH+GVIuI=
Subject key identifier:   84:25:77:0C:CA:63:B5:26:82:E4:BC:B0:07:7B:92:14:28:07:7C:2C
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer:       /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number:          01A2
Signing time:             Mon 21 Sep 2026 04:10:54 +0000
Manifest this update:     Mon 21 Sep 2026 04:10:54 +0000
Manifest next update:     Mon 28 Sep 2026 04:10:54 +0000
Files and hashes:         1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: 9zjexBxODIg1TF5vmrryPKYYCK3+7NSDUYjfbzLZaAM=)
                          2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: MNX1ee3x9dbW8bZLPIUDq7Oc9qNdTCehADLERsWmUlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
        Validity
            Not Before: Sep 21 04:10:54 2026 GMT
            Not After : Sep 28 04:10:54 2026 GMT
        Subject: CN=6ab0ae4e-37be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:b0:c7:a2:7e:32:81:12:55:8b:cc:e9:1f:
                    2c:18:68:0d:b0:c1:63:35:78:9d:3e:88:b8:54:21:
                    8c:53:e5:a8:be:23:34:83:ad:ca:d1:1f:82:d9:03:
                    6f:ca:3d:b6:82:2c:fd:3e:49:f9:93:e2:39:0c:b3:
                    40:65:62:bd:a2:b8:22:4a:a2:d0:c1:33:a9:f5:73:
                    88:c8:85:8d:95:bf:e7:ea:c4:5f:97:21:20:99:bb:
                    30:c0:44:d0:7b:58:db:99:61:d1:23:26:56:dd:1b:
                    ea:e6:a8:f6:65:d6:bd:ba:ac:ee:ee:13:33:86:e3:
                    4a:be:b3:d3:3d:e5:a6:f0:9d:3f:a2:29:21:85:2f:
                    cd:ae:8f:32:3e:03:b2:05:6e:4c:b3:23:0d:e8:41:
                    83:88:e9:b2:20:fe:42:22:ae:ee:9f:9e:fc:da:51:
                    53:94:d7:fb:60:c2:7e:bb:59:19:24:8d:b5:2d:d5:
                    2f:35:81:ed:25:f1:84:46:e8:88:7e:e4:32:3a:85:
                    05:8d:ff:0e:ff:1e:2f:31:0c:97:74:51:dc:df:a2:
                    26:86:4c:4c:26:84:3a:ce:d0:a8:e8:33:46:37:ca:
                    3c:b3:5e:b0:72:c5:2f:e1:12:e7:a4:71:84:44:c0:
                    d8:fa:6a:48:5a:82:45:79:dc:58:06:54:e8:18:f9:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:25:77:0C:CA:63:B5:26:82:E4:BC:B0:07:7B:92:14:28:07:7C:2C
            X509v3 Authority Key Identifier:
                keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:a1:1c:95:85:72:30:34:81:00:9b:e2:2f:0f:58:20:ca:
         7e:ed:1e:f6:b0:7d:61:2b:5a:92:e2:c0:15:3e:90:92:d9:ed:
         ba:f5:d9:71:9c:51:7c:74:bd:6d:c0:d2:5c:7c:b7:98:a5:5f:
         ef:99:84:db:ce:1a:3d:90:97:01:b8:ca:e8:e2:bb:2d:a0:2a:
         44:f8:87:e6:27:75:64:e2:72:27:57:42:d1:98:43:cd:9b:9c:
         e0:e7:be:46:20:f8:78:8f:8b:23:52:61:54:d9:7b:01:60:8f:
         ac:f4:b2:93:8a:82:d6:cc:0f:0b:6d:18:b0:eb:ad:7a:ad:f3:
         f3:fd:76:91:5a:6f:3c:a5:c0:87:50:48:dd:aa:85:16:f2:ed:
         f2:6d:ee:17:c9:be:23:ff:43:cd:f0:c4:cd:c6:56:88:50:81:
         35:b4:f5:f9:e1:28:54:bf:cf:3f:94:f6:02:ad:b4:3e:da:9a:
         40:6f:34:d4:78:41:f1:a8:fc:11:da:de:f4:4a:35:17:90:e6:
         b2:63:e3:39:37:ad:73:74:88:5c:2f:ff:c8:7e:2f:3b:cf:af:
         fe:1c:b2:a5:2a:ab:ac:0c:04:31:2f:b8:a9:21:3e:98:97:db:
         ef:d7:22:73:5a:44:e5:f1:9b:36:54:c6:95:8d:25:47:ab:0b:
         0f:48:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:42:22 2026 by rpki-client