Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File:                     phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier:          p+HDrYl4oTSuAgQd7lkWRROAdXc/0JhbqKmbHGcb42I=
Subject key identifier:   8D:70:0C:95:88:03:08:B7:0D:CE:83:8B:D0:BE:93:3F:30:DA:20:E8
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer:       /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number:          026B
Signing time:             Fri 25 Sep 2026 02:12:09 +0000
Manifest this update:     Fri 25 Sep 2026 02:12:09 +0000
Manifest next update:     Fri 02 Oct 2026 02:12:09 +0000
Files and hashes:         1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: HlfP/4pGxC4OQMIrNQOQK2lo+97lVBXRCKchL/2I1ek=)
                          2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: OERBSyFT8v44ydtzk1MlGhOChgpisosmqtVzJOaCSn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
                          rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
        Validity
            Not Before: Sep 25 02:12:09 2026 GMT
            Not After : Oct  2 02:12:09 2026 GMT
        Subject: CN=6ab5d879-eec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:3c:41:50:fe:5b:8d:79:5c:af:43:80:b2:
                    34:10:5b:34:b7:a1:27:1c:19:b3:7e:76:9c:47:ff:
                    1a:37:c7:d6:b5:31:46:00:e0:d7:44:cd:c6:d1:33:
                    f3:e2:27:73:e4:16:9b:a8:fd:f6:9e:1f:dd:3c:0a:
                    cc:7e:07:c0:a3:ab:b3:d0:85:05:be:fd:69:52:fa:
                    c3:eb:bc:29:39:98:41:5b:8f:dd:ca:0b:3f:17:71:
                    4f:fd:18:ec:11:2a:f3:df:bf:04:72:33:66:ed:e9:
                    a0:77:93:2b:73:65:d2:5f:b9:2c:3d:5d:a7:1e:0a:
                    e0:ce:ae:aa:a2:c2:a8:2f:59:30:9a:a4:a8:95:3f:
                    b0:8a:b7:d6:82:f7:48:4d:e2:31:64:03:37:3b:20:
                    59:a1:9f:b6:ef:f6:d2:87:a2:73:7a:a6:97:9e:15:
                    ac:8a:c4:5b:9d:24:af:45:58:bc:2e:28:a5:95:ad:
                    bd:35:0f:99:9f:ef:91:ed:68:65:3d:93:f6:19:f8:
                    e5:96:57:b0:e0:42:a5:fa:19:be:6f:09:8c:c2:63:
                    90:b1:0a:8f:18:63:b6:ec:b7:a2:5d:f7:77:33:a3:
                    76:79:e4:5d:37:bb:f6:be:53:d8:2e:7f:13:be:e6:
                    71:b6:2c:bf:fc:49:0c:25:55:9c:b5:9d:f4:11:b4:
                    78:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:70:0C:95:88:03:08:B7:0D:CE:83:8B:D0:BE:93:3F:30:DA:20:E8
            X509v3 Authority Key Identifier:
                keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:38:14:e7:2a:fc:16:a9:c7:31:53:0c:b3:2c:22:8b:11:
         84:d5:76:8c:93:77:91:da:18:4a:d4:aa:8c:6a:ff:30:6f:b1:
         c4:6a:19:cb:b1:26:f1:17:3f:39:a5:e8:33:89:ad:72:5e:b6:
         96:76:49:68:ad:16:70:0d:3f:6e:03:20:e4:8c:bc:81:75:fb:
         2c:25:28:04:11:dc:b5:69:c1:b3:78:b6:d3:46:c0:2d:60:9e:
         28:6d:76:86:7d:77:4d:86:41:ec:75:97:88:70:f0:4c:7e:5d:
         ac:45:43:64:a6:84:2d:82:de:0b:3d:cd:4c:dc:34:d0:47:b3:
         24:e8:e3:fc:51:0d:19:fc:04:c4:d7:c3:e8:87:ac:b6:dc:66:
         48:6a:b2:ce:82:e4:83:b3:82:f7:bf:91:6c:05:11:44:14:c8:
         8b:dc:f6:9b:fd:37:98:7c:6f:d6:ef:76:b3:b6:f5:06:73:f3:
         86:14:7e:7b:8d:ba:76:f7:29:64:1f:97:f2:ca:3e:65:26:41:
         7d:9c:65:69:96:80:c4:6a:cf:d2:92:a7:2f:0b:4c:27:46:8c:
         36:66:70:10:79:37:07:18:a6:97:d3:8d:82:15:af:4b:35:9a:
         f8:49:8d:a2:76:f5:43:e6:6b:d4:0d:2f:9f:95:14:8a:f8:44:
         2f:33:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:15:47 2026 by rpki-client