Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          5xqW20dw8DFSF/L5GlU4ENzOlsuvlter7Eoa5+/MnGI=
Subject key identifier:   E4:C7:C0:2C:B5:A4:DF:A4:B5:2B:A9:B5:D7:2F:FC:A0:4E:45:B7:E3
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       35E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          35B6
Signing time:             Tue 22 Sep 2026 14:27:58 +0000
Manifest this update:     Tue 22 Sep 2026 14:27:57 +0000
Manifest next update:     Tue 29 Sep 2026 14:27:57 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: 5drjNTxM4oh7qar+NEko6qicsb9P6W8El4LG57/KweM=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13800 (0x35e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Sep 22 14:27:57 2026 GMT
            Not After : Sep 29 14:27:57 2026 GMT
        Subject: CN=6ab2906e-0ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:b6:19:ac:ff:bf:3f:3a:03:f6:bf:4a:2c:
                    62:17:68:06:4b:b0:ef:a7:3c:6d:cd:f1:e5:48:a7:
                    75:7e:c3:66:90:ce:a9:31:6b:61:a9:cb:fe:f4:39:
                    0f:cb:fb:5c:f1:f7:1b:0b:f4:27:1e:0d:d6:e3:cb:
                    a6:a0:28:78:d4:45:77:01:d4:1d:03:a5:00:5b:67:
                    31:40:7f:f9:cd:b3:32:7c:e5:3a:bc:4a:6d:ea:f4:
                    1a:39:c9:13:0c:77:31:31:9b:53:85:c6:05:33:6b:
                    26:98:8c:d8:b9:8e:66:e4:b0:a3:be:01:8d:8c:87:
                    1a:69:7f:3d:5e:92:66:a4:08:ee:06:e2:85:2e:43:
                    12:fe:36:c9:7f:de:9c:9b:45:dc:c9:4d:a9:67:59:
                    55:38:ba:7f:a8:ac:16:38:35:ae:47:06:39:63:19:
                    03:36:61:1b:d2:61:3e:03:6c:a2:54:5b:a2:cc:5a:
                    e6:57:d7:e6:ea:9f:90:1d:22:80:b0:d8:d5:05:3d:
                    b0:91:0c:1b:b9:f9:a3:6f:1a:10:47:d1:c7:16:38:
                    7a:fd:6f:e1:ee:c4:cb:a8:a3:73:79:2f:77:ab:8e:
                    9b:ab:a6:9e:60:2c:ee:6c:de:85:f9:9e:48:dc:f9:
                    07:c0:cb:d7:8d:9a:25:d6:b7:5c:a3:5a:64:ea:71:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C7:C0:2C:B5:A4:DF:A4:B5:2B:A9:B5:D7:2F:FC:A0:4E:45:B7:E3
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:dc:14:cf:72:c6:fc:8c:66:ae:45:d5:45:63:54:8d:35:1b:
         18:12:c8:96:11:29:2b:85:dc:2a:e8:03:8c:72:16:2a:90:c6:
         fd:4f:ff:e4:33:ce:43:68:78:29:8f:74:c0:ef:33:32:03:9b:
         43:96:ab:ae:92:f8:f1:12:cb:a3:c9:3e:c3:2c:10:b8:a6:a4:
         2d:01:73:36:40:3d:03:0a:1c:77:87:73:3e:f2:e3:f3:88:ed:
         73:f6:56:8a:0e:ed:fd:87:05:36:71:a0:e1:49:04:db:40:c9:
         29:8a:ec:06:23:f0:e6:8b:d5:85:b9:4d:5f:06:06:28:e9:13:
         f2:da:b1:a6:b9:02:63:c4:90:d2:b6:3c:04:49:0b:cb:3b:2d:
         01:40:ba:36:f2:fd:cf:f2:0c:9f:f7:48:52:05:1f:21:ed:7a:
         e7:69:0a:d8:df:e8:6a:3f:5c:91:9b:07:b6:94:2d:29:ff:b1:
         f0:98:59:a5:1f:54:f5:59:82:39:a7:fb:71:73:7f:35:2f:45:
         fd:39:4e:5a:bc:c2:fb:92:40:3a:4e:74:52:98:f5:b6:99:3e:
         4e:99:e5:af:59:95:45:40:dd:ad:97:d5:9a:2c:e8:b2:dd:c1:
         19:da:73:f6:5b:5c:9d:5a:0f:3b:05:98:a6:61:79:e0:d5:d8:
         80:c4:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:12:41 2026 by rpki-client