Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File:                     pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier:          4e63L05QvWP8EWaCGpAnKCefnbYq4LueJfD+twCLsFs=
Subject key identifier:   89:7A:2D:93:60:A2:FE:41:E5:36:15:08:CB:B5:8D:9D:87:30:2D:CC
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer:       /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number:          97
Signing time:             Wed 23 Sep 2026 07:10:05 +0000
Manifest this update:     Wed 23 Sep 2026 07:10:05 +0000
Manifest next update:     Wed 30 Sep 2026 07:10:05 +0000
Files and hashes:         1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: 8xZyU0S6Rn7Cv0W9h3sVqpkozcUsco+50dfp1KweZ+E=)
                          2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
        Validity
            Not Before: Sep 23 07:10:05 2026 GMT
            Not After : Sep 30 07:10:05 2026 GMT
        Subject: CN=6ab37b4d-cad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:12:c5:77:6a:0b:83:65:dc:92:96:3d:8e:
                    b3:79:b3:c5:6e:3b:01:74:0b:5b:0c:84:2e:8a:e2:
                    f6:72:1e:b3:f9:c2:0b:45:0f:50:84:21:fb:85:c2:
                    6e:91:05:e4:40:75:be:2e:57:48:4e:f3:5f:fc:5b:
                    83:47:83:a6:0b:4e:d9:bb:d4:e9:30:de:4f:4e:f3:
                    1b:25:88:37:39:b3:ca:8e:be:f0:dd:c4:54:88:ac:
                    6a:c6:c2:e5:7c:c0:e3:da:b3:fa:b7:ce:2c:9b:ad:
                    9a:de:c9:bc:18:44:4a:94:d6:0b:15:b3:6d:a9:c5:
                    f3:e4:7b:ac:be:f8:f8:a0:2b:cf:ed:c1:94:2b:63:
                    f6:72:2c:b8:7f:32:70:8d:67:2a:58:c8:e1:2f:ab:
                    f9:93:50:b0:b1:fc:a2:3e:80:19:f8:67:a9:fa:1b:
                    12:c9:43:2f:69:c2:ba:48:6a:05:c8:d0:9b:bd:06:
                    2e:7f:bc:1f:26:67:1b:dc:4d:f0:66:da:8b:df:26:
                    09:2d:d9:bb:fe:74:12:ac:74:d9:98:e4:cd:21:6a:
                    3e:4a:8e:6a:30:66:bc:36:0b:d3:42:7d:46:f3:91:
                    e0:60:93:7d:cf:e5:c3:e5:74:59:c0:61:c9:14:08:
                    76:b4:56:9c:75:d2:7a:13:39:1e:d5:97:b8:0c:eb:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:2D:93:60:A2:FE:41:E5:36:15:08:CB:B5:8D:9D:87:30:2D:CC
            X509v3 Authority Key Identifier:
                keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:d2:2f:7c:bf:a7:b5:4b:0c:0d:ef:3f:60:d0:6a:13:91:
         cc:5a:98:05:43:63:ae:70:f7:ab:31:b8:44:1f:47:f7:80:44:
         9e:e5:50:bd:24:d2:a5:85:86:bd:62:21:6a:0a:e2:18:22:1c:
         75:1b:91:97:71:36:c0:25:4a:43:4a:aa:04:9a:0b:fc:16:1b:
         8c:8e:01:f5:21:0c:a1:87:fa:11:bc:6e:a3:33:06:bc:f0:c9:
         a5:b1:52:8f:47:d6:ad:13:66:18:e8:6b:bc:e9:b3:40:7a:8d:
         55:9e:10:0a:34:82:3c:47:0a:f2:be:42:8f:a8:1c:7d:be:2c:
         4e:68:f1:ba:74:6a:f6:c3:1f:b5:9f:6f:a1:22:f5:c2:df:2c:
         f5:14:b0:5b:92:e8:3f:b5:0e:d2:00:e1:67:9d:19:56:c9:5d:
         a4:0b:60:3e:ee:1e:03:47:f9:2f:bb:ff:44:c5:0d:a5:4e:75:
         e2:23:0e:5f:7f:4c:d0:75:81:af:94:03:f9:be:d3:ff:43:11:
         45:83:ab:27:58:8a:f6:8f:cc:8c:37:d9:02:c6:eb:4a:1a:97:
         a5:9a:4c:29:e5:73:37:1a:f2:d0:4f:aa:08:15:e1:ea:cd:54:
         c9:e4:f6:8a:81:ef:d1:bf:0d:8c:9e:a8:b0:6f:90:74:1b:3a:
         b3:67:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:07:08 2026 by rpki-client