Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File:                     dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier:          BIHeNRdkXnS1bc+3iQBXujDP8pMUEGhhcQIRw+FEdHM=
Subject key identifier:   47:D4:8A:01:BC:A5:55:C8:AA:36:C3:D5:C6:E1:0F:47:D3:27:07:56
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number:          084F
Signing time:             Tue 22 Sep 2026 20:45:58 +0000
Manifest this update:     Tue 22 Sep 2026 20:45:57 +0000
Manifest next update:     Tue 29 Sep 2026 20:45:57 +0000
Files and hashes:         1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: wC6p+fuwgxiaz9nLSCv5ed/YvG44ioDpEeTEG5PkSoQ=)
                          2: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=)
                          3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: 8aFNCW7bv8WDFcSYRJzRhcsYSlLn29H4vfS7MxdtY2s=)
                          4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: EoKuYumOB06CPMGY3MST022RtHbswAdFcoVeBMF2lCI=)
                          5: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: grKrD3DF9eLFVxmrk87U8DF5YwJ9box6akwxpNoX3+w=)
                          6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 3YOlao7TbxBFLUwq9Pmsd7vhinqBlUuv3cRFNyrbWwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Sep 22 20:45:57 2026 GMT
            Not After : Sep 29 20:45:57 2026 GMT
        Subject: CN=6ab2e905-0379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:02:6d:93:96:cf:28:fd:a4:6d:d0:73:a7:
                    2c:1c:0a:08:ae:a5:ab:47:47:23:2f:be:66:e7:cf:
                    43:9a:78:d6:f3:2c:e1:19:b5:af:00:64:fc:68:1e:
                    25:45:eb:b6:f6:a3:87:fe:19:a4:ed:92:3c:bc:59:
                    26:6d:44:8e:af:df:9e:fd:ce:aa:5e:ea:94:59:3e:
                    55:6d:b5:42:8d:1a:50:3e:5e:b4:2f:b3:f3:1a:41:
                    24:8d:35:08:30:5e:5a:a7:f8:fd:3d:c9:7b:08:a7:
                    a9:71:5b:48:26:a0:be:ae:ab:32:20:06:64:4f:db:
                    be:a9:a8:6e:e5:d0:5d:a8:01:3a:bd:cc:3f:01:c7:
                    b5:c7:06:13:90:0a:0f:a1:65:0d:d3:0b:a6:62:00:
                    ad:94:34:75:31:14:f7:de:21:75:c0:d5:b7:11:2c:
                    7c:18:94:e4:41:1b:76:c4:cb:2b:40:b0:51:70:29:
                    ed:44:65:0b:02:bb:3c:17:43:6e:33:42:c2:24:53:
                    bc:a9:24:8c:ec:cd:89:00:2d:b5:b9:4d:d2:28:a0:
                    d2:3a:b8:20:a7:77:d7:a1:78:31:27:5f:d0:83:f5:
                    df:06:30:55:2d:ac:7a:00:74:78:f4:4b:b6:39:2f:
                    65:5b:99:ac:20:26:61:5b:8a:e1:81:12:b2:f3:de:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:8A:01:BC:A5:55:C8:AA:36:C3:D5:C6:E1:0F:47:D3:27:07:56
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:37:b8:14:4d:4c:22:37:62:79:05:80:d3:30:2a:68:e8:
         df:a5:35:17:e8:da:99:80:24:75:ff:c8:8a:da:a4:34:2a:95:
         c8:a9:9d:ba:0c:dd:10:91:76:23:c0:e8:09:12:c0:c9:f8:d7:
         3f:9a:04:db:0b:33:70:7e:84:31:e0:68:19:d3:f0:99:cb:2e:
         2a:78:25:e5:3f:79:52:7f:9b:8b:be:56:01:c7:2c:9e:c1:25:
         2b:65:0d:6b:d1:d0:aa:b0:e2:1f:6f:c9:10:d8:46:a7:04:39:
         f3:3e:7c:99:3a:87:07:9c:40:1c:6b:1b:95:04:6d:49:65:69:
         92:c3:92:9a:c3:4a:84:b0:d8:56:f4:8e:c7:1a:47:b7:23:2c:
         90:c4:35:9d:86:23:88:c6:95:17:76:2b:e3:a0:8c:0d:d0:28:
         f5:05:ed:9c:43:96:a1:70:8c:1e:1c:ba:6b:8d:34:c1:1b:de:
         81:38:30:3b:8e:3f:84:69:41:8c:03:86:42:1a:cc:73:50:12:
         85:60:69:f1:05:2c:43:a5:1e:3a:82:72:1b:cc:e7:84:66:d1:
         23:72:96:0d:91:a7:57:03:8f:81:72:1d:a1:df:9e:17:8d:fe:
         64:aa:b9:1e:3a:01:28:85:33:a1:e2:54:fa:0e:51:26:50:26:
         59:f1:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:38 2026 by rpki-client