Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File:                     T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier:          +deWH0I7gqdbrFKTGdt10kTkMC0+OhHgJF6ZeBf9raI=
Subject key identifier:   A0:16:F6:43:16:CF:44:6E:66:AC:34:62:83:BE:02:4F:96:63:54:F2
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer:       /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial:       098E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number:          097C
Signing time:             Sun 20 Sep 2026 19:59:16 +0000
Manifest this update:     Sun 20 Sep 2026 19:59:16 +0000
Manifest next update:     Sun 27 Sep 2026 19:59:16 +0000
Files and hashes:         1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: MWUg0pU4PBp/ihkmnE8i8lpU06vjl2Ml2i0d5xxiYSw=)
                          2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=)
                          3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
        Validity
            Not Before: Sep 20 19:59:16 2026 GMT
            Not After : Sep 27 19:59:16 2026 GMT
        Subject: CN=6ab03b14-fb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:48:6f:74:cc:9b:f3:12:90:de:19:8f:cb:
                    4a:e3:69:4c:99:72:af:83:37:d4:2e:bf:77:f1:7f:
                    ec:3d:54:fd:29:ee:1a:0c:db:a2:ee:a4:91:4e:78:
                    0c:9b:ac:89:1e:a2:40:de:8e:9e:dd:b5:72:f4:09:
                    66:a4:30:b0:2c:0f:69:b1:3d:94:0b:06:86:84:b3:
                    bc:f3:69:f2:8e:b0:ca:ad:f9:1b:6e:9b:ac:93:86:
                    b0:3d:c5:62:07:37:64:3e:07:85:51:9c:90:2f:50:
                    22:01:66:ce:54:80:c5:32:9b:3e:94:ff:4e:e6:5c:
                    f9:af:32:0c:8d:10:b9:23:c3:1a:41:94:16:7b:de:
                    3f:84:1a:24:67:33:6b:59:90:de:b0:34:89:61:e4:
                    03:03:33:ec:2e:35:42:24:6c:f5:65:33:7b:86:be:
                    9a:b4:f3:23:fa:09:a6:25:93:d4:8d:c6:d8:5c:e7:
                    f3:09:de:b5:7c:2e:16:38:2a:48:b4:05:05:ba:2a:
                    9e:78:fd:6c:a4:55:2d:90:52:04:50:19:53:3e:de:
                    9b:4c:9a:3c:08:ab:66:2c:5f:91:5e:8e:b1:e4:a9:
                    43:ff:88:13:6e:d0:d4:35:c6:cf:fc:98:08:37:0f:
                    21:30:d8:f1:f5:e4:51:4d:0b:94:01:5c:6d:41:ba:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:F6:43:16:CF:44:6E:66:AC:34:62:83:BE:02:4F:96:63:54:F2
            X509v3 Authority Key Identifier:
                keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f8:e8:5f:f0:1a:42:7b:a0:df:53:f2:39:68:1f:30:43:59:
         33:f5:8d:9d:9f:56:4f:a5:ab:f6:60:17:f1:54:d3:94:56:78:
         50:1c:8a:4c:86:d0:60:42:a1:6d:e1:7e:4d:19:e0:ca:7f:22:
         9b:25:1f:7b:f1:f8:8d:b1:bb:b6:47:ae:fb:3e:31:89:a6:95:
         81:eb:d8:0b:2f:a3:f4:27:e9:16:59:b7:4f:b5:42:27:e6:13:
         47:01:be:5c:f7:2a:2e:6d:cf:39:cf:d6:28:b2:52:78:16:41:
         64:58:a9:35:23:ba:8d:fe:d6:12:64:39:d6:88:0a:82:18:db:
         8b:03:c3:ab:95:0e:5d:b7:51:e8:96:57:0d:ef:87:4e:0c:06:
         c1:f2:83:48:dc:4a:b4:e7:96:3a:ea:ec:4f:e1:b0:5d:82:49:
         d4:06:4e:ca:95:60:f2:5a:22:0c:60:1c:3f:c7:e0:15:c1:5c:
         dd:04:86:9d:3f:b4:79:2c:48:9f:6c:b4:ea:2b:f2:26:5c:e1:
         ae:ce:26:ba:5e:15:cb:a0:84:d1:76:7c:52:78:fe:6f:c4:07:
         f8:3f:d8:07:22:2e:1a:2c:4a:72:7d:0d:17:03:a6:36:ec:c3:
         3f:31:32:8d:ad:f2:f3:b8:fe:3a:94:51:2d:de:05:30:03:33:
         bc:c0:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:01 2026 by rpki-client