Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File:                     tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier:          hzw4Nk+GaM8QFHn/h7Alb8VvE5ff9MDmMbCpGYbdsEU=
Subject key identifier:   D5:4A:AA:67:E9:36:D9:6F:5A:9E:E8:1E:E8:7E:57:97:44:8B:8E:B0
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer:       /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number:          0266
Signing time:             Wed 23 Sep 2026 02:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:37 +0000
Manifest next update:     Wed 30 Sep 2026 02:00:37 +0000
Files and hashes:         1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: NlRGDbAaFgbzfeLLZVPISQtrFQTneYxWy4NY0Ym6Iv4=)
                          2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
                          3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
                          rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
        Validity
            Not Before: Sep 23 02:00:37 2026 GMT
            Not After : Sep 30 02:00:37 2026 GMT
        Subject: CN=6ab332c5-3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:b5:f5:19:82:f1:50:ad:42:d6:b5:90:3b:
                    87:6b:43:85:5c:b0:3b:c2:22:5e:7a:8b:aa:46:61:
                    42:40:8b:76:15:92:34:5f:74:13:b3:16:29:b6:e7:
                    5f:8a:93:2b:8b:1f:f2:ba:6b:cf:54:bf:38:98:3b:
                    be:5d:37:af:d9:67:66:c1:a9:26:99:1c:f4:52:eb:
                    7a:4e:d3:e6:3b:a0:c6:0b:28:f2:d0:55:7a:13:2a:
                    ef:aa:65:43:35:17:81:e4:7b:11:53:ca:c4:65:19:
                    e5:50:ae:ee:13:69:ff:b4:12:37:0e:53:c3:ef:c4:
                    30:91:f5:73:1d:71:47:87:a4:4a:3b:db:81:db:8e:
                    90:dd:15:2e:44:55:18:cd:98:d2:00:bd:9f:fe:fe:
                    d7:51:53:b9:3b:fc:4a:e8:a7:18:b2:67:a0:fe:72:
                    eb:dd:0c:6d:7f:33:9d:c8:45:b9:80:63:51:68:21:
                    80:99:cd:b3:02:87:94:48:04:41:9a:49:1b:db:3e:
                    8f:83:52:ae:2c:ea:d4:eb:c6:80:eb:92:6c:0e:b7:
                    da:26:95:a9:1c:c9:bb:fb:44:13:a1:9f:94:17:93:
                    fb:12:52:d0:8f:4e:22:0e:be:2c:26:05:8d:6f:41:
                    af:0f:3e:54:64:e0:6d:f9:a9:df:b0:80:e1:3c:96:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:AA:67:E9:36:D9:6F:5A:9E:E8:1E:E8:7E:57:97:44:8B:8E:B0
            X509v3 Authority Key Identifier:
                keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:52:66:32:e7:4d:ac:74:01:81:c0:5b:13:4c:9b:ed:fa:
         0c:6d:1f:41:ea:27:77:ad:7f:22:87:43:36:e4:66:92:9e:b1:
         77:15:d1:0c:76:b3:7a:43:16:dc:10:13:4a:99:94:92:6a:94:
         b3:b8:14:71:90:69:10:bd:9c:d1:95:a3:10:5c:a3:4a:13:5b:
         8f:fe:7b:5b:65:de:e8:76:f0:cc:48:80:f2:ff:f4:e9:fc:9b:
         9c:b7:34:c8:4a:d2:e1:4e:69:65:5d:13:34:a8:85:99:e9:07:
         c7:18:9d:63:4b:35:49:24:7e:4f:db:59:a0:75:f3:44:fc:d4:
         ea:6c:0a:43:9c:df:20:bc:c1:be:ea:2d:1d:9b:ba:f2:35:f8:
         78:41:fa:66:0c:84:00:52:28:1d:bf:c6:24:d7:53:96:f6:7b:
         23:12:f0:3c:c5:1f:7f:63:b4:82:a0:aa:ee:14:9e:a4:7a:69:
         e8:e0:39:c8:54:4c:a9:c5:73:e5:c8:ae:98:be:ec:36:a1:88:
         21:59:5e:24:bd:8a:18:46:3f:24:4b:97:db:5e:1e:a3:2b:28:
         2f:04:af:54:2e:e8:7a:d8:c0:d5:e2:8a:be:a6:5d:50:66:25:
         a0:48:f4:db:12:21:8a:a1:7f:00:0d:26:ec:6e:4d:88:61:2e:
         3e:46:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:17:17 2026 by rpki-client