Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File:                     nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier:          nZ+RRItL4lHn4fAfDw5jIaonKSCrg2yIBHo2rdeko5c=
Subject key identifier:   D9:F5:A9:A0:3E:8D:CE:8A:E9:EB:B8:8C:E8:A0:89:3C:38:E3:70:B5
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer:       /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial:       3579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number:          52C9
Signing time:             Sun 20 Sep 2026 15:12:21 +0000
Manifest this update:     Sun 20 Sep 2026 15:12:21 +0000
Manifest next update:     Sun 27 Sep 2026 15:12:21 +0000
Files and hashes:         1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: +RolZfSWVbLu937eG4k7O0IrZ2LgxynAL9+dCFyAIj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13689 (0x3579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
        Validity
            Not Before: Sep 20 15:12:21 2026 GMT
            Not After : Sep 27 15:12:21 2026 GMT
        Subject: CN=6aaff7d5-3415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:3f:58:7d:6f:da:67:4c:db:7d:2f:8e:9e:
                    ce:f3:49:6d:7b:79:ed:a0:f8:28:02:46:df:87:0f:
                    54:b5:d6:74:8b:af:38:f7:b9:bb:cc:56:14:f8:6d:
                    37:5a:bd:58:51:94:52:cf:67:55:ac:b1:2e:c4:ec:
                    8a:43:13:b3:9d:5c:e9:dc:b0:5a:93:95:a5:3b:89:
                    a7:4b:a0:a0:9e:13:0c:a9:dc:6b:50:7a:31:c9:54:
                    0d:a5:ef:1f:41:27:39:30:89:15:90:27:b4:ec:d6:
                    cc:db:8a:0e:09:10:d5:0f:6d:5c:58:f5:fc:d3:05:
                    ed:41:68:8b:8f:19:fc:1a:fa:5a:0b:9b:90:b7:94:
                    77:4f:19:9d:aa:ac:5d:89:06:57:b1:1d:6e:9a:a4:
                    81:22:36:76:b5:d1:c6:82:c2:11:e5:f0:8a:0e:66:
                    53:ae:d0:c6:b6:d8:0b:b5:1f:8c:27:b1:c5:88:6c:
                    af:1e:a2:b0:79:7c:90:ea:55:e9:92:8b:93:48:fc:
                    43:d2:cd:ef:30:bf:32:37:1a:af:8e:78:74:4c:6a:
                    fa:c4:7a:b0:4f:aa:89:42:53:47:e5:8a:19:d3:3a:
                    9c:b5:35:f2:8f:db:d3:57:8e:0d:01:26:84:3c:c3:
                    5e:f4:b3:ac:cb:92:d6:fd:c2:75:9b:ba:83:3a:24:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:A9:A0:3E:8D:CE:8A:E9:EB:B8:8C:E8:A0:89:3C:38:E3:70:B5
            X509v3 Authority Key Identifier:
                keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:66:89:82:2d:7a:63:00:53:d9:ac:1d:0f:95:73:0a:cf:a1:
         bf:c2:17:5c:ff:9c:95:59:85:89:00:7c:02:45:31:2d:47:9b:
         5b:dd:d5:3c:0c:d8:2d:38:a3:8c:e3:22:37:3d:6f:df:26:0a:
         38:ca:1e:1b:8e:b8:f6:09:e7:94:6c:15:93:ef:8b:5c:e1:bf:
         59:b7:d1:52:49:c8:9d:f4:69:97:3d:f3:6a:ad:b4:56:9c:d5:
         fb:4f:52:5e:f6:a9:2d:cc:46:74:da:ab:82:9d:79:29:8d:41:
         fa:94:26:ab:31:fe:a4:d4:66:0e:01:45:fa:9a:a8:b9:e4:c7:
         4c:9d:b8:52:f6:e8:da:c7:39:16:ea:4f:87:72:bc:63:27:0d:
         0e:2e:0a:6b:99:e4:17:af:57:4c:c6:29:b6:01:93:49:39:f9:
         ca:43:b8:b2:e3:e9:55:c1:fa:d8:7b:53:f3:c2:bc:73:71:b6:
         92:65:46:1e:12:9a:75:86:b5:b7:d6:a6:ec:3e:6f:12:f2:b3:
         73:bb:d4:80:50:04:95:19:67:5c:34:28:a0:71:24:27:12:7c:
         d3:d7:26:b6:ab:ff:80:75:60:0d:b1:4c:44:cd:6c:cf:8d:fe:
         ce:95:48:7e:dc:3a:76:68:34:aa:0c:9a:64:70:cd:3a:d4:99:
         7b:bd:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:40:47 2026 by rpki-client