Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
File:                     4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json)
Hash identifier:          lqrQr/jzh+/vpQivrJTVf55fwwMtHesRaoyjJSXay0g=
Subject key identifier:   24:D6:28:6D:D2:6C:F5:C3:11:E8:E2:1D:7E:31:59:FB:66:96:D0:06
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Certificate issuer:       /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
Manifest number:          024F
Signing time:             Mon 21 Sep 2026 02:24:59 +0000
Manifest this update:     Mon 21 Sep 2026 02:24:58 +0000
Manifest next update:     Mon 28 Sep 2026 02:24:58 +0000
Files and hashes:         1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: xsOMP8H6hH0Bobc1QgiMnuDQf9X4KlAdNRy7DtlLUus=)
                          2: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=)
                          3: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=)
                          4: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=)
                          5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
        Validity
            Not Before: Sep 21 02:24:58 2026 GMT
            Not After : Sep 28 02:24:58 2026 GMT
        Subject: CN=6ab0957b-a7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:e3:1e:6c:ce:b3:0d:99:cd:fd:39:47:d8:
                    98:1f:b5:81:b9:f4:f0:e2:ac:4f:53:3d:2f:6c:3e:
                    9b:b6:f0:b2:40:b0:f5:d5:a7:4f:59:a7:63:5d:f7:
                    ad:23:8c:2f:8e:82:49:f4:46:8e:d9:c4:b7:97:8f:
                    63:b7:6f:c4:37:50:8a:88:9f:4f:aa:3a:b5:6d:5a:
                    60:5c:c8:39:08:2c:87:43:c7:ac:fe:50:ae:f0:ff:
                    e3:85:8e:d7:89:5b:7a:d9:ae:55:d5:26:3f:94:7c:
                    02:4a:4c:57:41:ab:e9:1a:33:51:34:f5:1a:3b:2d:
                    ca:df:0e:10:e5:e7:bc:ab:04:15:36:8d:98:13:e3:
                    24:7e:c2:d4:73:42:35:1c:35:32:cd:58:5e:e6:23:
                    56:b8:5e:32:7c:8b:6a:b0:80:c0:e3:f3:e4:f2:bf:
                    04:08:c5:88:73:43:27:f5:46:d2:a2:b2:15:6b:0d:
                    24:5c:c8:e8:c2:a6:d7:55:06:bc:87:7c:6c:16:08:
                    d3:0a:a7:91:bf:f7:62:4a:76:01:85:02:7c:c9:a9:
                    61:d1:1a:97:be:0c:e7:1c:f6:2f:55:22:68:cd:fb:
                    ac:85:c6:81:78:29:1a:43:20:38:b8:df:86:c7:16:
                    c0:52:3e:37:df:bd:e2:a7:19:cb:2f:fe:1a:70:e2:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:28:6D:D2:6C:F5:C3:11:E8:E2:1D:7E:31:59:FB:66:96:D0:06
            X509v3 Authority Key Identifier:
                keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:5b:41:1e:2d:f9:3e:b9:37:28:d3:cf:5f:33:22:98:66:
         fa:09:98:df:d1:e3:a2:cc:7c:0b:89:e1:d6:7c:1c:09:cf:37:
         10:fb:7a:33:0f:97:3a:d7:74:a0:da:5c:8d:57:3b:55:bd:3a:
         4a:1c:66:ef:90:e4:7b:02:33:41:3e:12:d0:d6:74:84:6c:40:
         ea:30:72:e3:05:5b:c5:14:5d:ed:16:ea:88:dc:47:20:a3:6b:
         19:8e:1f:c8:82:14:73:0c:f7:6a:a2:3b:b0:e9:d4:12:49:43:
         17:e2:7f:60:38:3a:81:c9:60:38:40:f7:53:c2:cc:52:40:49:
         06:4b:da:42:0f:b9:1b:44:c3:ad:90:d8:a4:8c:20:18:09:a8:
         67:7b:c2:7d:a7:01:1b:fa:69:05:0d:9f:a3:96:67:af:c9:9b:
         52:2e:2a:30:1c:5c:7c:03:66:d9:4c:63:5a:d1:8a:d9:8d:37:
         fc:57:e6:52:70:af:80:79:03:df:03:b0:16:47:a1:ba:a8:71:
         8f:6d:46:c4:e2:c2:09:13:3b:9c:97:33:59:dd:34:72:50:c1:
         39:cb:b1:f3:39:1a:68:4f:dd:30:73:eb:f5:ec:01:6d:87:ab:
         a7:bf:3d:dc:ed:b3:d7:f1:e8:1a:58:13:d3:b7:e1:af:1d:0c:
         33:95:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:03:05 2026 by rpki-client