Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
File:                     aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json)
Hash identifier:          llmd3RNbM+5S8+Vo4oLypA/Ief2Xz43NvykSpp5LSyw=
Subject key identifier:   A8:5C:80:52:1A:6B:8B:C4:3B:A2:BC:A3:4C:AB:21:D5:FE:E1:13:A5
Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52
Certificate issuer:       /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
Manifest number:          AB
Signing time:             Sun 20 Sep 2026 14:44:33 +0000
Manifest this update:     Sun 20 Sep 2026 14:44:33 +0000
Manifest next update:     Sun 27 Sep 2026 14:44:33 +0000
Files and hashes:         1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: hg8fietFOLSR9xltkHrLsXZ59BqmW3xXzwRFhD0ar4s=)
                          2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: N+AjEat6kkgxUWydiRZM9AqAylRYPPRcAECxuvM7gb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl
                          rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52
        Validity
            Not Before: Sep 20 14:44:33 2026 GMT
            Not After : Sep 27 14:44:33 2026 GMT
        Subject: CN=6aaff151-6b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:0c:6f:00:13:72:e3:a7:a2:25:35:f6:b5:
                    97:62:7e:b4:f3:bc:07:3b:e8:a2:f5:a5:3e:93:1c:
                    62:63:7a:8e:e5:52:49:c4:24:c7:2f:07:3b:e9:bc:
                    e1:7d:d5:e9:48:f7:04:c9:72:b5:25:34:c1:f4:a6:
                    8f:82:b7:af:73:91:24:eb:20:06:27:8d:b1:9d:b3:
                    0b:7e:d6:18:ba:59:56:f1:29:62:fa:17:15:ef:58:
                    4a:40:ad:ba:6d:a3:8e:ba:5c:c8:21:40:a1:10:f6:
                    96:71:02:be:a1:06:29:65:3b:23:25:86:ec:1f:7b:
                    e4:44:d4:d3:79:45:f2:cc:53:98:1d:eb:eb:0c:6f:
                    48:9b:31:a8:c2:d1:ee:6e:99:1b:ac:d0:d3:7a:12:
                    a9:b0:5d:e3:9b:c4:11:82:36:bb:90:ff:c9:cf:15:
                    d3:42:38:ff:86:20:6e:d7:fc:43:63:a5:57:01:02:
                    16:16:39:e8:07:b8:7c:f0:a6:8f:23:ca:88:ca:d7:
                    a9:1e:c6:80:e3:04:58:bc:cf:1f:6b:3b:9c:b5:fb:
                    af:21:6c:ef:19:2a:84:51:43:a3:32:24:b4:7b:ee:
                    83:20:c4:fe:a4:f7:4b:0f:75:db:ef:69:c4:87:6e:
                    1b:40:51:4f:0a:0a:80:5d:be:cd:08:ac:ee:8c:03:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5C:80:52:1A:6B:8B:C4:3B:A2:BC:A3:4C:AB:21:D5:FE:E1:13:A5
            X509v3 Authority Key Identifier:
                keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:bc:15:38:cd:15:77:05:c7:33:8f:6b:b8:04:13:e6:53:
         44:e2:c2:0a:6a:ce:66:69:64:f9:98:87:e4:59:0d:d8:f7:6e:
         bb:60:33:dc:7f:c1:17:3e:e7:bd:da:8f:d5:27:3e:f5:4b:7a:
         e9:8a:2a:e3:7a:21:68:c3:9f:d3:0e:c2:4f:c8:6d:a6:f7:3f:
         e1:78:0c:28:6d:dc:cc:11:8b:47:d9:a8:15:e9:7d:6c:40:2e:
         c8:4b:a2:54:84:61:62:8a:cf:3f:12:da:ca:1c:74:96:48:a8:
         18:a8:96:03:3a:2f:15:1d:e5:51:85:70:4a:c2:7a:3f:88:94:
         7f:f0:59:94:b6:2a:99:e6:66:bb:2c:38:6c:0e:b3:de:e7:17:
         c0:87:c0:b6:9c:09:21:f2:53:ac:02:a2:59:81:c7:aa:2b:84:
         ba:12:99:18:80:41:b1:32:38:f7:82:1f:07:e5:17:aa:57:19:
         9e:69:4f:f3:f7:67:aa:e9:ec:d1:c5:85:64:38:6b:a7:77:ef:
         f0:be:6a:37:f6:11:a6:fb:18:51:37:63:fb:6e:9e:3b:f3:17:
         54:a8:b6:cb:c2:1d:1c:a7:68:39:29:e0:68:48:58:0d:98:96:
         c9:93:15:0b:cd:35:55:78:f8:0c:39:56:5c:e7:7c:eb:95:60:
         0c:3d:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:12:53 2026 by rpki-client