Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
File:                     m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json)
Hash identifier:          veppoHH3ebhK9omCwRUua5yH0IopyJP+QvVx9B7pk4g=
Subject key identifier:   77:05:E1:48:20:0D:B3:94:9C:DE:F3:A1:CE:8D:53:7C:2E:4D:D2:9C
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Certificate issuer:       /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
Manifest number:          02C7
Signing time:             Mon 21 Sep 2026 01:18:15 +0000
Manifest this update:     Mon 21 Sep 2026 01:18:15 +0000
Manifest next update:     Mon 28 Sep 2026 01:18:15 +0000
Files and hashes:         1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: 9JmPvXfkGfMLxW4qk5UtxQXSVf1qYx13Y72RRZ38lzM=)
                          2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: P5W/HtK4kYY99pZQGqCLFlxhulp8kHcGK4SUQtwdoQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
                          rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
        Validity
            Not Before: Sep 21 01:18:15 2026 GMT
            Not After : Sep 28 01:18:15 2026 GMT
        Subject: CN=6ab085d7-a471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:7b:ec:58:c5:fa:97:9a:0f:52:f1:da:c7:
                    34:3e:44:f3:21:69:df:73:39:7a:a7:19:73:fe:cb:
                    96:2d:14:60:13:02:81:fd:88:8b:88:6b:05:a0:0d:
                    7c:f7:70:96:ed:e8:67:59:d6:fe:97:7a:09:35:19:
                    2d:3f:88:a9:72:f3:2b:79:08:24:9c:f4:24:b6:26:
                    9a:15:17:d1:7e:f4:96:7d:11:d4:95:3f:50:3d:3e:
                    32:15:e5:f5:08:6d:8e:5e:46:a9:33:4e:db:4c:12:
                    17:f9:d2:19:e9:a3:79:84:c8:1d:1e:a8:29:20:25:
                    b8:5f:da:f1:1c:9f:3a:e2:ad:6e:ff:c9:c3:de:56:
                    28:7b:4a:a6:63:c2:58:0c:2d:64:5f:55:03:46:e3:
                    87:ff:d1:10:a6:88:83:a2:11:fd:81:47:97:cd:e8:
                    d9:ac:cd:46:4f:41:4c:24:6c:fc:5d:12:5e:f9:34:
                    65:bf:80:1c:4c:af:69:89:ce:7c:71:4a:ea:38:69:
                    c2:8c:3d:a2:02:8d:78:22:96:38:15:34:ff:e3:02:
                    be:21:0c:a6:9c:e6:b0:63:25:1c:60:e9:e0:26:3f:
                    7b:f8:6e:27:2a:d8:54:a5:c6:f9:6b:5d:b0:b2:60:
                    5b:6b:e5:85:55:46:39:7a:ed:20:d0:4b:8e:2f:81:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:05:E1:48:20:0D:B3:94:9C:DE:F3:A1:CE:8D:53:7C:2E:4D:D2:9C
            X509v3 Authority Key Identifier:
                keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:29:da:af:ce:ec:cf:d4:b2:40:cb:03:f4:41:21:64:09:
         ca:80:e7:80:d8:da:7d:77:d9:0b:98:ed:1a:9a:b6:67:cf:30:
         c3:e2:a4:6a:62:ac:bf:42:bc:08:32:7f:cd:15:e6:46:9d:35:
         1a:86:48:b6:aa:b7:54:2a:28:17:d7:ed:36:ba:6c:85:cf:19:
         20:e6:07:47:a1:42:1b:72:ae:7c:2d:f4:12:f7:bc:d6:b7:b4:
         4b:5c:53:95:7c:35:18:e4:3c:d6:92:d5:38:d4:56:b0:1c:d5:
         7b:72:26:de:ae:ff:89:e4:7c:24:b3:95:3f:fd:ee:46:93:d2:
         ec:a4:ac:e6:19:7b:b3:a4:2e:80:d4:2a:81:44:04:55:67:9d:
         65:f3:de:60:ea:f4:eb:24:45:46:3c:89:14:f8:f3:45:ea:3d:
         c0:c2:a9:af:59:88:26:16:e0:6e:40:87:0a:ae:af:4c:0a:14:
         25:80:25:0f:6f:d3:41:2a:69:08:5d:61:45:21:a5:73:b8:73:
         c8:6b:41:26:f1:d6:39:34:b7:7a:ce:63:ac:a6:d3:93:e8:73:
         6f:ae:0d:43:ef:43:75:c3:1b:9a:64:b6:a8:58:8b:30:e0:fa:
         03:f4:45:08:2d:54:cb:f3:2c:cc:7f:58:7a:34:f2:4d:87:00:
         d9:b4:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:22:52 2026 by rpki-client