Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File:                     7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier:          ja27RGJq0EF7xcEcbju2pfoQQtRdVUek8xXLfw1M6lc=
Subject key identifier:   55:FE:70:24:40:72:3B:B7:B9:B1:E1:52:A3:A1:3C:DF:0B:27:66:2D
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer:       /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number:          0106
Signing time:             Mon 21 Sep 2026 06:08:43 +0000
Manifest this update:     Mon 21 Sep 2026 06:08:42 +0000
Manifest next update:     Mon 28 Sep 2026 06:08:42 +0000
Files and hashes:         1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: 9CHJ/XJnZ0xLvdeQu75cHjuqt2kr5JUjaT6mzRZ9TyI=)
                          2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
        Validity
            Not Before: Sep 21 06:08:42 2026 GMT
            Not After : Sep 28 06:08:42 2026 GMT
        Subject: CN=6ab0c9ea-564e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:25:c9:91:fd:78:92:72:57:d5:c1:dd:b6:
                    87:87:06:f0:95:74:58:27:fa:34:6b:d6:e8:ed:ad:
                    54:46:2f:e6:af:9b:4c:39:25:86:76:ca:08:55:62:
                    99:f4:d4:41:83:7a:41:99:fe:68:4a:92:a1:f2:96:
                    06:11:14:e1:22:44:21:2b:ef:9e:9c:e0:17:19:66:
                    5f:1b:2e:6f:72:7f:35:e3:65:2e:76:31:28:f4:16:
                    c7:d3:a0:6d:b8:3b:fb:83:bf:d5:cf:2b:11:6b:57:
                    86:79:0e:42:89:fc:88:2f:7c:c1:fe:e5:bf:fd:6a:
                    85:ca:a3:ba:b8:17:c4:65:41:15:fb:25:fd:f8:5a:
                    e1:c5:22:cd:b1:37:2a:c9:c7:79:06:4d:80:da:46:
                    03:0c:7b:6f:bb:1d:64:17:61:3d:69:7c:e0:d4:25:
                    42:0d:06:d2:4d:85:44:a5:ec:a3:7c:22:17:9c:e4:
                    84:1c:ff:e3:f1:0b:ff:6b:cc:30:6b:22:d9:c2:b4:
                    7a:2c:f0:63:81:6c:a8:a6:cc:29:9d:73:28:6b:33:
                    f0:00:06:57:4d:51:39:46:c8:db:4d:55:92:f6:5a:
                    cc:a3:f4:e4:87:d1:a8:7d:77:6c:70:3b:88:18:7d:
                    7f:b6:80:04:c9:52:9e:3e:5b:f2:6a:0d:2b:d8:7d:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FE:70:24:40:72:3B:B7:B9:B1:E1:52:A3:A1:3C:DF:0B:27:66:2D
            X509v3 Authority Key Identifier:
                keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:f1:1e:6b:76:04:8e:3c:24:42:79:db:33:ac:1b:d4:ca:
         7f:b0:0b:ef:24:9b:8b:93:a8:9d:e1:57:91:62:82:ba:21:ef:
         f1:7b:d4:9c:5d:51:76:ad:1f:90:77:f7:e9:6f:be:54:19:6f:
         67:53:34:d5:42:68:01:37:c8:d2:c5:f3:4b:95:ab:e5:be:13:
         15:78:f4:0d:09:68:58:05:93:7d:e4:a4:ce:51:b6:a4:be:ea:
         a7:ec:c4:43:da:05:29:fa:57:be:ab:1a:63:44:cb:6d:98:13:
         5e:43:59:e9:66:8f:85:2e:60:1f:af:13:31:64:19:a8:a7:57:
         5f:d9:58:c3:37:e6:81:f2:fd:85:19:36:d4:1c:32:f1:8b:65:
         fe:f7:74:04:08:49:a6:9e:17:25:e3:c0:2d:fa:b8:07:53:d2:
         88:a6:e2:91:ae:d9:cc:f1:14:fd:0b:5e:b1:77:fc:39:fb:37:
         9b:5d:36:3b:7a:36:b7:ce:3a:a2:50:e9:6c:81:1f:1d:52:b8:
         86:55:6a:bf:a2:c6:bd:39:a7:3e:34:91:e9:74:18:19:f6:1c:
         2a:3b:55:dd:f7:ab:73:3b:aa:6b:65:37:27:f4:0f:04:37:25:
         c2:9a:9a:cf:84:a2:f2:9f:b5:ae:40:81:d8:e0:71:01:92:41:
         f4:36:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:42:16 2026 by rpki-client