Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
File:                     0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json)
Hash identifier:          BWxwhUuqcyBAqCqPN41JD+IipoddnBnLm3HoDeexPPA=
Subject key identifier:   B9:D2:23:39:56:89:38:9E:45:36:5A:47:67:B1:0E:93:A3:A8:2A:6B
Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Certificate issuer:       /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
Manifest number:          74
Signing time:             Fri 25 Sep 2026 08:00:58 +0000
Manifest this update:     Fri 25 Sep 2026 08:00:57 +0000
Manifest next update:     Fri 02 Oct 2026 08:00:57 +0000
Files and hashes:         1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: 2ltX3WtX06tM6LRhwTdJqFI9tahV+BYCgujcE1RgPsU=)
                          2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
        Validity
            Not Before: Sep 25 08:00:57 2026 GMT
            Not After : Oct  2 08:00:57 2026 GMT
        Subject: CN=6ab62a3a-f05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:03:71:44:a2:87:97:3f:5a:da:25:f2:70:
                    97:e0:eb:5f:88:88:9e:23:9a:44:28:3b:a6:8d:f4:
                    fd:61:9d:57:00:8f:1b:b5:15:ea:4b:87:65:3d:65:
                    c0:e2:8b:01:60:c0:f7:6c:a4:4b:87:c5:6f:d9:94:
                    c2:93:ec:ef:19:92:c6:9e:01:22:72:0d:64:c6:16:
                    9c:52:00:e2:9a:2e:2b:b6:36:eb:9c:d5:b6:45:5f:
                    90:c1:9a:60:d0:63:e8:8d:b9:8e:41:fb:44:d0:eb:
                    d6:54:7d:3a:01:84:61:52:41:63:a4:34:31:cd:a8:
                    5e:70:1f:38:ad:7a:0d:7f:f7:a9:51:89:2a:b6:15:
                    e4:e8:af:6f:0d:f3:61:4c:25:7c:80:fb:1e:e1:32:
                    15:29:bd:0e:59:30:83:f2:b7:37:5b:c0:bf:b1:75:
                    f7:ce:7f:06:a7:16:ee:48:d7:1c:26:f6:8f:36:53:
                    f7:c1:32:d2:dd:e5:a6:e2:82:ab:a6:02:ed:e1:c9:
                    e0:95:c6:5d:78:d4:ab:d4:6e:c9:17:f1:09:21:98:
                    53:b2:68:c0:c4:f6:38:32:25:f1:6e:68:88:13:ab:
                    27:45:d5:9e:c1:4f:a4:fa:d8:9f:9c:e6:9c:72:b9:
                    4d:7a:ac:f5:a7:13:7f:5c:0b:1f:88:49:01:c6:06:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D2:23:39:56:89:38:9E:45:36:5A:47:67:B1:0E:93:A3:A8:2A:6B
            X509v3 Authority Key Identifier:
                keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:44:f9:ff:55:8c:04:2e:64:80:f1:4e:d1:a9:5c:39:87:
         aa:63:93:e4:42:22:e3:c2:6c:bc:08:98:93:ed:4c:8e:93:57:
         22:46:34:e7:6b:ca:9a:3c:00:ad:e3:06:12:04:a8:92:c0:c4:
         1a:82:ff:5a:c2:de:a1:ca:56:a9:2b:cd:7e:b1:3b:5f:ac:3e:
         da:43:fc:0d:2e:50:a2:ab:16:e6:68:01:24:b3:2b:ce:05:3b:
         77:ac:2c:f5:2d:cf:72:9f:90:20:13:ea:01:60:16:d5:06:2d:
         c3:96:5f:e8:bd:75:84:06:33:42:77:89:6e:92:5a:f3:56:df:
         4c:26:a6:1c:c5:55:4a:14:85:72:07:a8:63:13:07:1a:ba:03:
         3d:22:91:c2:d3:35:de:ec:c9:94:46:ae:05:dd:68:93:f0:3a:
         07:2a:22:b8:e3:e9:a7:5e:cd:1a:8d:f2:aa:03:9a:cc:a3:83:
         c9:05:22:d5:37:dc:2e:13:59:2e:5f:47:23:fb:78:bc:9f:0d:
         8f:dd:5d:4c:11:cb:11:be:8c:fc:8a:b3:a6:16:2b:6c:8e:5f:
         e4:a2:1c:5f:2f:e3:1f:36:ff:70:a6:54:0d:08:3c:19:38:a8:
         b3:04:8b:ec:a8:dd:d4:59:e7:01:ba:2e:2e:b4:82:11:35:23:
         65:69:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:25:33 2026 by rpki-client