Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File:                     0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier:          Qn7RVBxEkP9dJEbVkAUwC4f4/W7jom7kW+YnZc9snqg=
Subject key identifier:   97:62:62:0F:BB:31:15:9D:1C:BD:2B:DD:83:B2:E9:E4:9A:0F:B3:5A
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0A73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number:          0A18
Signing time:             Sun 20 Sep 2026 19:48:55 +0000
Manifest this update:     Sun 20 Sep 2026 19:48:54 +0000
Manifest next update:     Sun 27 Sep 2026 19:48:54 +0000
Files and hashes:         1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: JtDxMNPCmkTA6pubxsRNH7KWKV2xHSMIuWhlbk2+YDM=)
                          2: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
                          3: 5B0320A08B4411F1945A06324611F970.roa (hash: Da4zwaxvzw5gNNRbJ84b/uhlFao3ehlVxBi7a6sytcM=)
                          4: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
                          5: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675 (0xa73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Sep 20 19:48:54 2026 GMT
            Not After : Sep 27 19:48:54 2026 GMT
        Subject: CN=6ab038a6-2499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:40:de:ac:e8:ed:d4:9e:92:2e:d8:91:3d:
                    db:7c:98:08:4a:c1:00:99:a0:31:ae:89:ec:20:e3:
                    31:dc:6f:5e:55:c6:ed:c5:86:c9:fc:d8:34:c3:60:
                    ec:c9:a6:19:4c:82:af:60:b2:4d:fb:42:9c:2a:3b:
                    da:73:32:ed:5b:c5:92:fb:69:f7:08:78:ce:05:f4:
                    e3:f8:4f:4b:05:20:da:c8:2a:60:a7:77:d5:03:4b:
                    65:bf:4c:60:dc:34:55:a8:ca:67:de:65:91:27:3d:
                    bd:d6:32:fb:09:05:97:c2:e3:93:06:55:ce:b0:03:
                    a2:fa:72:88:77:3b:1b:6b:a5:75:89:23:ec:a8:c3:
                    a5:05:e0:13:25:49:d1:ee:9e:ce:07:af:7f:86:20:
                    b8:a2:44:da:5b:ef:8d:05:00:62:58:12:b1:47:77:
                    40:d7:27:86:58:16:bd:57:85:e1:4f:2b:fb:07:c9:
                    b3:10:33:b3:73:79:e9:ae:ac:05:ab:00:7f:1b:33:
                    ec:7a:0d:0e:3c:65:fd:ad:a5:10:2b:ac:3c:05:0a:
                    18:64:29:fa:df:68:9e:b8:66:22:fe:6e:db:57:e4:
                    bd:ee:94:71:43:d9:df:1e:10:f0:77:2c:26:4c:18:
                    60:c4:38:51:71:c6:e8:82:df:1a:d5:7f:23:f9:52:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:62:62:0F:BB:31:15:9D:1C:BD:2B:DD:83:B2:E9:E4:9A:0F:B3:5A
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:76:61:d3:7f:84:1e:01:74:5f:59:34:6b:e6:5f:e7:62:f1:
         49:5f:12:1e:2b:93:ea:77:b0:2a:6c:e5:b2:27:64:ba:43:09:
         1a:e5:32:4e:e8:29:cc:36:c2:f0:ce:17:ee:69:ee:48:60:aa:
         ef:c5:d6:e3:68:12:35:17:e2:d9:22:6c:ad:fc:28:88:3e:27:
         14:a8:71:25:b5:fa:2b:74:5c:76:d9:8b:5a:75:89:48:f4:a8:
         86:b0:19:05:53:f1:63:d1:24:8d:94:5c:15:ce:4e:ea:54:7f:
         bb:d5:f2:13:8a:31:cb:d1:4a:69:43:8c:ed:d6:c9:bc:ab:c3:
         48:be:72:b3:0c:2a:9d:d8:ee:67:56:b3:27:74:07:33:de:16:
         06:db:ec:c5:69:46:c9:ab:6e:6b:85:ff:c9:e9:52:37:e7:99:
         6b:12:36:f8:b9:2e:89:e4:ea:62:b2:ff:81:46:95:c8:6d:28:
         7e:ef:9b:2b:9d:5c:83:6b:cf:d7:ce:8d:3e:e9:97:68:04:16:
         13:88:3f:d4:be:29:a6:5b:e0:6a:1c:87:a3:c8:43:8f:48:9d:
         07:64:bc:eb:67:00:c5:78:88:fd:26:81:91:74:40:4b:93:d0:
         7a:44:f4:3d:e8:18:e5:06:c7:ff:90:fc:9d:4b:67:07:6e:4d:
         ff:a0:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:26:30 2026 by rpki-client