Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
File:                     F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft (raw, json)
Hash identifier:          JOaa0RoFdNVGKwum0eGGHSN84jmJe/x/TbVk2Vm8cNE=
Subject key identifier:   E1:B0:3A:A8:78:D5:6A:C1:A9:68:9E:58:27:6D:50:23:73:C4:B0:58
Authority key identifier: 17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
Certificate issuer:       /CN=A91C3809/serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
Manifest number:          1E
Signing time:             Sun 27 Sep 2026 09:29:42 +0000
Manifest this update:     Sun 27 Sep 2026 09:29:42 +0000
Manifest next update:     Sun 04 Oct 2026 09:29:42 +0000
Files and hashes:         1: F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl (hash: lRFOLSUS1xteqOr01hHlm7mtmZ7ioFSC1t7MQRktaEI=)
                          2: 39CD26E88EEA11F18D5914636411F970.roa (hash: +/GsjYmLP1MJ0UBnltZuLmnLB7EDcP7VF/Red6/k4FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl
                          rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3809, serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
        Validity
            Not Before: Sep 27 09:29:42 2026 GMT
            Not After : Oct  4 09:29:42 2026 GMT
        Subject: CN=6ab8e206-3834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:cf:a9:40:85:e5:3e:83:4b:af:b9:9b:58:
                    3d:63:10:6f:ef:b1:d9:87:44:12:be:01:89:97:16:
                    ce:e3:a9:51:c0:79:26:60:97:5c:54:16:74:5e:2e:
                    c3:57:cd:01:23:e7:65:1e:d6:3e:74:e5:f8:e2:13:
                    fa:ee:28:a2:08:25:9b:83:4d:8e:1e:25:1e:27:96:
                    8e:e9:e3:52:f1:97:9d:1d:f7:5b:68:10:33:42:3f:
                    0c:c4:25:d3:a2:c2:28:be:0f:0a:e4:f7:fb:64:96:
                    7a:63:ad:dc:6c:29:16:51:96:ba:fc:55:b4:df:e4:
                    ca:96:34:e3:b8:8c:ec:e1:69:bd:42:05:1b:c9:c2:
                    24:4d:9a:51:ac:b8:df:7b:c0:ca:b4:52:99:2f:72:
                    c8:41:ee:7f:e3:53:cb:98:cf:69:69:7a:f0:56:13:
                    fb:a2:74:8e:d9:18:c1:45:79:f9:aa:ae:29:62:f3:
                    6d:12:1a:c5:1c:67:2a:1e:93:29:a2:bf:40:d3:70:
                    f2:26:e1:2c:03:7c:5a:0d:42:83:5a:9d:1d:f4:7d:
                    8a:82:ac:97:e8:4d:e2:1f:36:4a:36:be:03:41:45:
                    0a:95:9f:c7:44:c6:8b:76:04:5c:7c:77:3c:0a:53:
                    8d:b0:22:df:fd:97:71:b1:f6:e5:e4:1b:06:b3:ca:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B0:3A:A8:78:D5:6A:C1:A9:68:9E:58:27:6D:50:23:73:C4:B0:58
            X509v3 Authority Key Identifier:
                keyid:17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:42:d8:de:53:ac:f1:df:e0:79:59:b8:1c:08:1e:0a:c4:
         69:cb:2e:3c:bc:a2:b3:fe:9b:b8:bf:0a:4c:de:7a:0e:a9:9e:
         19:35:2e:85:98:66:bb:be:c0:66:26:57:c6:f9:e2:6a:9d:b4:
         07:00:a4:09:8a:85:86:64:6d:96:89:f0:42:f2:25:90:9a:e2:
         70:4e:9b:68:be:7e:33:69:9a:85:e3:30:95:d9:35:10:a8:9e:
         d8:60:92:0f:f9:f4:9a:4a:3c:70:c6:f9:75:c6:d3:d8:6f:7c:
         d4:97:5f:c7:96:8d:a1:45:09:b5:90:16:7a:5a:0d:90:e3:05:
         16:6e:ef:01:a4:3e:96:80:40:34:9b:9c:40:b2:46:7a:7b:e0:
         30:d1:d8:cd:d3:0e:93:1a:b8:47:ff:4b:a1:dc:85:43:92:b0:
         53:5f:1a:3f:57:24:0d:de:83:73:9d:40:56:47:4d:31:60:67:
         26:a0:9f:20:28:d0:a2:5a:07:2c:f9:97:ee:e4:21:97:74:37:
         b7:f2:78:13:03:45:a1:f9:64:56:60:57:d9:7f:b0:c4:c1:3d:
         60:cf:46:de:65:16:08:d7:a9:ba:4a:2c:ab:df:08:b3:be:2b:
         da:42:5d:16:f2:a7:71:d4:bc:50:72:48:3d:a8:a2:b4:be:65:
         fe:c8:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:55:14 2026 by rpki-client