Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
File:                     sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json)
Hash identifier:          AeQakHwl0r4Ee6dyOmpPDBgT83sEmbf1czZYMApK5qI=
Subject key identifier:   17:08:96:3C:26:44:59:0E:2C:B4:B4:C9:50:6F:7A:BF:47:CA:15:81
Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
Certificate issuer:       /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
Manifest number:          0883
Signing time:             Sat 10 Oct 2026 20:52:22 +0000
Manifest this update:     Sat 10 Oct 2026 20:52:21 +0000
Manifest next update:     Sat 17 Oct 2026 20:52:21 +0000
Files and hashes:         1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: 95YiAPcLQztS+oCVBwxCBbIrCp9kkZTBNELK/wXMAzc=)
                          2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
        Validity
            Not Before: Oct 10 20:52:21 2026 GMT
            Not After : Oct 17 20:52:21 2026 GMT
        Subject: CN=6acaa586-f4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:4e:8d:2a:4b:d6:4b:59:b3:91:d5:7e:8d:
                    cf:49:4e:30:6a:96:90:6b:58:84:7a:db:ac:0c:61:
                    ae:f2:78:a5:73:8d:b0:91:9c:10:f3:b6:5e:e4:39:
                    f3:0a:90:06:3b:e8:10:fe:28:3b:f8:af:c0:6e:06:
                    d7:64:a4:77:9f:6a:da:ab:af:73:4b:1d:4f:49:63:
                    44:20:a6:ce:d9:1f:c3:e5:91:c4:90:90:c7:ef:d8:
                    69:42:16:57:80:b5:b7:65:7d:c4:4e:b9:1a:ad:84:
                    3b:67:d5:72:ad:f7:eb:ae:8a:b8:e5:5c:6d:8d:7d:
                    fa:a8:e0:56:4a:63:3e:67:2b:f0:78:ab:e7:78:11:
                    1a:22:08:13:9a:45:42:34:22:c8:b7:43:2b:ee:62:
                    24:3c:f9:72:46:18:5b:e9:f0:5a:41:a0:fd:bb:9e:
                    15:ff:da:ec:fc:2b:5e:73:6d:d7:f0:3d:26:8f:18:
                    0a:84:ab:e0:7a:6c:3e:82:4d:4d:3b:c7:47:ab:78:
                    7f:06:ab:e2:78:78:2d:e0:80:66:7b:6e:e3:06:b5:
                    a9:94:9a:b6:bd:db:35:fc:bf:9b:ce:20:e8:84:30:
                    64:65:fc:23:0b:43:c3:a7:c6:6c:5c:49:11:f5:f3:
                    da:cd:4f:ee:f1:be:2d:c9:d0:78:5a:c9:28:8a:2b:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:96:3C:26:44:59:0E:2C:B4:B4:C9:50:6F:7A:BF:47:CA:15:81
            X509v3 Authority Key Identifier:
                keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2a:44:5d:83:91:88:f0:d9:18:d9:b2:8e:00:7f:f6:43:c0:
         92:03:9e:9c:42:02:34:2a:f6:6d:1a:ba:99:72:21:67:05:98:
         48:8c:06:6c:a9:75:a6:d1:82:52:cf:ad:a0:dc:1f:10:85:b6:
         70:af:b8:89:66:32:55:a4:a7:d6:38:f5:1f:8c:09:fd:2d:3a:
         4d:c2:74:f1:8c:e4:e7:c0:a4:b7:1b:d4:a1:a3:78:89:93:9b:
         9c:7d:12:e8:3e:dc:49:b4:bf:43:0c:31:8b:f4:56:48:73:c0:
         d4:7c:c5:84:15:5c:df:20:f5:53:29:c2:df:15:a9:36:63:3e:
         76:0b:1a:01:23:13:6e:dc:a0:83:3f:91:06:91:a2:56:da:be:
         da:ae:70:b3:c9:0e:0a:03:e9:ce:9c:f4:2f:d6:8c:b5:16:0d:
         ce:f2:5b:02:0a:f9:b5:4e:d6:55:ef:5c:3c:69:3b:e8:2a:f9:
         04:b7:5b:28:db:1f:17:6b:72:51:73:e5:8d:1d:b5:05:93:cd:
         9e:2d:3e:05:1d:30:7a:16:a9:ca:c1:59:8f:26:1c:c6:17:c1:
         2e:df:05:92:20:62:00:e2:68:49:08:8d:bd:46:37:ff:cb:6c:
         eb:4a:dd:9a:ec:69:17:ec:2e:d2:c6:6f:78:9c:dd:bd:7e:ef:
         75:31:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:41:35 2026 by rpki-client