Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          fHTZDpPAWF1MF8KnhOt8qJVAn+eqCFVtBH3jqucW65A=
Subject key identifier:   5A:87:73:A9:D7:70:F4:66:FA:3E:CD:56:DF:63:51:BB:12:DD:65:96
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2E20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2DC7
Signing time:             Sun 20 Sep 2026 15:28:42 +0000
Manifest this update:     Sun 20 Sep 2026 15:28:41 +0000
Manifest next update:     Sun 27 Sep 2026 15:28:41 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: vedl5u3NWBb5IkZ5vMbsx8DOgyBB73QGSVt6OCC1UOA=)
                          2: DB6B2B08803F11F1AB5A5B056DA30FBC.roa (hash: gg6fEbQaTI3FAiG/15bQ8xPZcID84uGMnP/fMOciqAM=)
                          3: 89AC5C4686EE11F19E006003A7EE528E.roa (hash: PkydwwTolsEm1C1IlaW9dK4GplSAGjMdSU6I9gbAdos=)
                          4: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=)
                          5: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11808 (0x2e20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Sep 20 15:28:41 2026 GMT
            Not After : Sep 27 15:28:41 2026 GMT
        Subject: CN=6aaffba9-38ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:bb:0f:9f:e2:95:25:b9:27:d1:ec:e0:f0:
                    3c:08:51:70:4c:11:f8:03:eb:00:2c:bb:c5:f6:0b:
                    ba:6f:fa:2b:8a:22:fc:22:f5:69:4a:02:4b:e7:66:
                    75:a3:5f:93:af:12:18:39:df:45:1d:12:51:75:a4:
                    88:0d:b2:58:f2:96:1e:4e:ba:56:3b:6f:0d:d8:0a:
                    13:66:16:dd:f4:e9:f6:c6:04:ed:47:d3:91:7a:3e:
                    61:a8:57:53:35:01:05:9d:42:14:8f:1a:dc:4d:3a:
                    9c:73:00:79:24:6b:fa:9c:59:26:78:18:ff:d1:2d:
                    1f:ba:49:35:f3:b4:19:9c:ac:10:79:75:d4:0a:f6:
                    41:20:2d:f1:90:9a:fe:6a:24:b3:ec:b4:ef:bc:b8:
                    43:ce:6e:45:c1:6b:84:4f:be:c7:6c:87:5c:08:b7:
                    e2:b8:2e:76:b0:6a:d6:1d:e7:f1:29:b1:16:98:1e:
                    10:dc:30:44:fc:e0:7b:b1:aa:e8:89:27:6c:cd:59:
                    3d:13:0e:2e:b3:aa:80:7e:df:5b:2b:8d:ad:0b:53:
                    a1:a7:36:d6:59:d9:7a:55:ba:e2:49:46:a9:1b:ba:
                    b6:ec:c7:c6:65:f9:d8:82:a1:69:28:8b:22:93:83:
                    3d:3d:fe:fd:bf:74:d5:bb:2b:5c:03:ee:26:53:33:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:73:A9:D7:70:F4:66:FA:3E:CD:56:DF:63:51:BB:12:DD:65:96
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:44:57:cf:b2:20:7b:23:8b:c7:5e:f4:f7:f2:a2:6b:2a:3c:
         5f:fc:d0:79:fe:a0:c0:7a:41:d7:e8:44:1e:21:2b:7c:de:25:
         12:06:22:92:95:da:fa:84:6d:67:bb:95:c1:be:84:a8:b4:b3:
         3a:2a:e0:48:4d:d7:ab:69:df:84:b3:8e:f6:c7:83:c1:9a:57:
         f2:c6:8b:21:b7:09:67:7a:2e:45:07:f2:37:df:5b:e0:ba:d5:
         cc:79:39:b9:bf:3c:1b:c7:e7:e3:aa:6f:fa:db:94:ed:ed:4d:
         00:8d:8e:10:ac:4d:dc:a9:5f:a4:9e:d9:d7:d4:38:6d:7d:c0:
         34:a0:7d:81:c5:ff:2b:93:cd:09:66:4d:24:b8:7e:f5:77:d7:
         6b:68:5b:a8:a6:af:9e:a8:27:93:bd:bc:4e:79:96:91:31:16:
         2f:fc:dc:22:b8:33:a3:49:3d:dc:f2:d7:41:a7:5b:be:a2:94:
         23:97:8a:d3:5f:81:3d:70:2a:bd:db:a5:22:bc:67:dc:61:66:
         89:56:56:4e:2f:6b:93:a1:89:e4:e3:67:31:bf:23:b4:6c:96:
         65:a9:0c:f5:82:67:57:6e:de:d4:7e:32:0d:02:ee:40:d5:51:
         d1:30:82:6e:34:94:6a:e7:64:26:58:d5:72:e4:92:ef:eb:6d:
         c1:84:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:04:18 2026 by rpki-client