Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File:                     ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier:          vCS59RpjtVIQMnzea/3FfoAt5xM3fdiUIAl8i/bBPg4=
Subject key identifier:   94:F8:CB:F0:62:1B:CD:60:91:28:A5:9C:13:E0:31:77:7C:59:61:1E
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer:       /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number:          019C
Signing time:             Mon 21 Sep 2026 04:18:15 +0000
Manifest this update:     Mon 21 Sep 2026 04:18:14 +0000
Manifest next update:     Mon 28 Sep 2026 04:18:14 +0000
Files and hashes:         1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: sD9gN8dOkmaUDC3PkkDKZ3BkOueYklOGBNtyux8qmMQ=)
                          2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
        Validity
            Not Before: Sep 21 04:18:14 2026 GMT
            Not After : Sep 28 04:18:14 2026 GMT
        Subject: CN=6ab0b007-b500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:96:a2:b2:1c:c2:a8:fd:9f:b8:b2:9f:39:
                    8d:4a:c3:40:72:46:d0:0b:e4:7d:25:38:22:bd:1e:
                    8e:a7:08:02:3d:16:6e:19:03:ce:4e:ba:6a:3f:79:
                    28:0c:dd:2e:c1:61:20:07:58:f4:a0:74:d1:81:cb:
                    80:cf:fc:a7:0c:0c:80:fc:98:9f:08:a5:f7:ec:54:
                    cb:be:c6:ac:45:f2:d8:20:b8:2c:9c:e5:ad:b6:da:
                    d8:d0:78:5e:d5:77:8d:96:51:32:1e:45:b2:5d:3a:
                    a0:56:d8:bb:ce:f9:d7:0d:dc:92:b8:17:5e:67:31:
                    9b:09:80:be:79:8c:39:ac:4f:74:2c:79:c7:2d:1f:
                    20:3c:88:3e:4b:d1:e4:83:38:b2:8f:a2:59:0c:ad:
                    8d:cd:3a:5b:01:61:86:23:97:ce:20:80:11:7d:b5:
                    88:76:5a:94:48:4c:3b:38:55:ed:48:43:ee:72:f8:
                    4e:0e:7a:ee:e5:21:07:e9:9a:92:0c:a9:6b:8d:dd:
                    12:b6:5f:8b:9f:88:5b:c7:97:94:c3:9c:01:c6:ab:
                    45:27:fb:2d:d7:df:2d:d4:8d:96:2c:0b:b3:c9:41:
                    f6:1f:e4:c3:d6:6d:50:20:6a:f0:92:45:cd:a4:5b:
                    a9:12:e7:e0:8c:69:e1:48:d9:95:54:ea:6e:60:4e:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:CB:F0:62:1B:CD:60:91:28:A5:9C:13:E0:31:77:7C:59:61:1E
            X509v3 Authority Key Identifier:
                keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:30:e1:75:fc:e7:b0:f4:1a:15:03:59:b3:be:f0:60:05:
         90:ab:7e:0c:0a:06:ba:e2:b4:e0:65:12:4d:32:fc:b2:59:e2:
         f5:72:92:2c:1e:b5:60:1a:51:cb:b1:92:be:6d:6d:57:4e:bb:
         22:25:3e:6e:36:64:c8:44:56:3c:5b:ff:f7:14:96:ec:d1:b5:
         a4:7e:16:9a:23:1f:72:31:b2:a2:44:f0:0b:05:b1:d5:a1:8e:
         cf:07:79:0b:52:a9:88:56:c0:f9:49:8e:5e:a7:9a:0c:ff:a0:
         0b:6f:52:7f:66:20:a0:67:d4:35:ee:e0:3d:89:c6:ee:6e:4c:
         f1:ab:72:4c:ac:ce:4a:a2:dd:8b:4c:17:d5:8e:40:64:c0:40:
         b3:84:22:d9:f0:fc:db:e8:86:54:8c:c8:4a:d5:2c:d6:fb:c8:
         df:71:8f:46:fa:09:02:45:5b:b7:96:af:9b:19:b6:d5:e2:0f:
         1a:d2:7f:18:20:53:ed:c5:52:9b:56:08:d5:32:87:d1:c5:f0:
         5b:94:76:10:b6:df:20:2e:c6:5b:a7:e6:0c:2e:61:dd:99:45:
         f1:03:cf:5c:2b:30:62:16:3c:97:3d:8e:67:fc:78:15:2f:e9:
         33:7d:8f:0c:06:a2:db:d5:87:3e:f5:03:ae:07:c7:3c:ad:48:
         49:d0:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:27:10 2026 by rpki-client