Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File:                     74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier:          bY1hSQxWmH/gQU5zg/qC/l6VSeBtKumySZmaT8Tl4PE=
Subject key identifier:   FC:BB:71:1F:39:8E:BE:E0:B6:CB:54:A3:30:AF:65:A6:7D:A0:4C:6E
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer:       /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number:          96
Signing time:             Mon 21 Sep 2026 07:26:10 +0000
Manifest this update:     Mon 21 Sep 2026 07:26:10 +0000
Manifest next update:     Mon 28 Sep 2026 07:26:10 +0000
Files and hashes:         1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: pLDOylPpOCEhAsxaTqJ1OM94jCub0zfjUPo042eD8vs=)
                          2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
        Validity
            Not Before: Sep 21 07:26:10 2026 GMT
            Not After : Sep 28 07:26:10 2026 GMT
        Subject: CN=6ab0dc12-1373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:d0:72:fd:ef:aa:1a:c7:21:cd:27:f8:c5:
                    3a:7b:8d:5b:ed:c5:8a:ab:1f:47:93:e0:66:2f:b4:
                    1c:4f:2f:66:f5:cc:55:9a:4e:fc:49:97:ae:26:48:
                    dc:fd:dc:aa:cf:64:d6:d1:f8:e5:e7:30:93:e7:f6:
                    fd:8e:59:83:d1:61:d7:99:24:b9:c0:70:1d:6a:27:
                    6c:9e:d3:f9:2b:98:02:9b:bb:62:60:85:57:b2:d4:
                    95:ee:47:7a:0e:41:0a:cc:79:50:a9:30:dc:f9:eb:
                    18:16:9a:df:53:08:db:42:48:82:be:6d:f5:67:0c:
                    cb:e9:89:0f:27:84:d1:05:e3:c4:3f:74:6f:4d:a4:
                    72:d5:22:2d:3c:dc:28:e6:5a:45:f7:03:63:6d:92:
                    35:08:98:d8:5a:95:53:9f:95:5a:66:84:a1:87:a6:
                    1e:e9:b3:17:11:af:47:f6:46:5b:f1:9f:8a:d7:7f:
                    24:13:0f:06:6a:a3:0e:b4:26:16:3f:67:5d:3e:0f:
                    de:37:eb:bd:08:3c:4b:44:42:7b:30:ca:1d:57:1a:
                    bc:e5:bf:14:e4:d1:0a:e1:97:33:8d:1d:b7:b0:e1:
                    02:7a:d6:9b:ae:55:f7:f0:56:7c:8b:77:7c:77:a1:
                    4e:42:7c:f0:47:1b:3b:ce:90:5a:77:35:78:43:b7:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:71:1F:39:8E:BE:E0:B6:CB:54:A3:30:AF:65:A6:7D:A0:4C:6E
            X509v3 Authority Key Identifier:
                keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:01:cf:91:1f:5c:a0:0d:2f:4d:63:90:9e:55:41:4a:ca:
         6c:3f:e7:21:82:05:90:77:9e:fc:49:d9:d9:3f:22:bf:47:3d:
         b0:e5:8b:56:6b:27:d5:ba:63:e7:fb:40:51:ae:8b:99:21:5d:
         e3:a6:1c:3c:2c:7e:99:87:80:8b:1e:2c:ff:9b:6c:02:69:e7:
         e2:4c:9a:99:09:86:b0:f6:9e:18:0e:57:96:6d:ac:36:77:bd:
         f9:a0:3e:c5:3a:89:f0:79:26:8b:0a:78:4c:49:dd:89:f5:d9:
         f2:4a:8e:ad:5b:1b:f6:c5:a9:b4:ac:47:58:df:58:15:ec:a0:
         87:8b:e4:1a:dc:ba:ea:c6:ac:44:65:22:4e:50:d7:32:4a:70:
         9a:61:de:43:51:d7:79:1b:41:fe:49:4d:66:58:b8:e2:0e:0e:
         e8:38:a1:86:1f:ae:1e:a3:28:42:a8:63:b3:b7:e9:60:e1:0e:
         52:bc:a3:94:18:33:23:51:5d:aa:d1:56:a3:9c:2d:56:12:eb:
         a2:4e:a1:40:15:d8:77:bf:a7:6c:05:f7:f1:74:3a:e2:91:aa:
         85:4e:39:b7:03:b4:08:c4:f4:58:b4:e4:2d:5c:3e:3f:95:c6:
         e1:3c:06:fc:11:2d:a3:24:88:7c:ce:5f:0a:94:83:69:2e:31:
         0c:a8:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:38:46 2026 by rpki-client