Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File:                     pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier:          LQgxFDXVqC0DZN9fnBDXsSt99huK6wucTPLGklR+NFE=
Subject key identifier:   80:C4:FB:44:55:86:32:4C:8C:3E:A9:64:EA:F9:D6:5B:E4:A3:C6:B6
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer:       /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number:          0292
Signing time:             Mon 21 Sep 2026 01:46:10 +0000
Manifest this update:     Mon 21 Sep 2026 01:46:09 +0000
Manifest next update:     Mon 28 Sep 2026 01:46:09 +0000
Files and hashes:         1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: TcS9EkfCBZHgtra/dbYGHdKQ2pok2ovr3VfaXUxyUVs=)
                          2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
                          rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
        Validity
            Not Before: Sep 21 01:46:09 2026 GMT
            Not After : Sep 28 01:46:09 2026 GMT
        Subject: CN=6ab08c62-9fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:27:4b:46:aa:a1:c4:b3:43:97:7f:c9:7b:
                    d0:c4:20:5b:a6:80:33:60:8a:74:9e:0f:c2:23:85:
                    e6:78:ae:dd:6b:00:40:9c:20:85:6b:b6:e9:17:06:
                    75:87:44:f2:cd:79:07:8e:cf:79:40:10:9a:d3:bc:
                    01:c4:80:e5:d4:d8:42:e9:9e:0d:8b:ba:2a:b4:0f:
                    7d:53:fd:8b:6a:8e:2a:2b:b4:27:c6:f6:6f:15:f3:
                    1d:83:c4:5b:b4:a2:ea:55:52:71:36:04:83:de:8f:
                    bd:d8:be:99:94:5f:68:18:40:19:f4:2f:02:1c:37:
                    c8:52:1b:6e:c6:90:a8:69:4b:7d:1a:78:b9:70:7b:
                    07:62:69:2c:ed:3c:21:a4:3e:e2:83:9e:2e:e3:8a:
                    86:d1:08:df:0f:ed:fd:7d:9a:a3:1e:cc:f1:80:d9:
                    b7:22:73:7d:e8:65:c4:ab:5e:e1:8e:80:43:38:f8:
                    08:4c:13:6e:7d:21:e6:09:e2:21:6e:93:d8:79:71:
                    b1:16:00:5b:9c:50:f5:c9:47:78:f7:80:5e:d6:9a:
                    12:3f:e7:d9:20:94:18:0a:d9:91:31:de:e6:05:49:
                    bd:e3:5d:d2:6e:98:14:a0:d9:87:76:01:dd:fe:a9:
                    4c:c7:af:0e:53:58:b4:e8:2f:8d:f6:2c:49:fb:08:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:FB:44:55:86:32:4C:8C:3E:A9:64:EA:F9:D6:5B:E4:A3:C6:B6
            X509v3 Authority Key Identifier:
                keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:3f:f1:b6:6c:3c:63:b4:72:da:3a:c5:17:5d:c3:97:5b:
         7c:d1:67:d9:71:87:9e:9a:8d:b0:53:49:ad:db:a1:18:d3:22:
         03:51:ed:8c:11:7e:d0:84:10:db:7b:13:da:07:f8:4d:b5:e7:
         6a:e2:e2:35:8d:46:e8:ce:c6:39:c9:5f:e2:53:f9:7f:59:8b:
         5a:92:2e:18:01:33:71:1f:15:ec:9d:50:f2:2f:91:89:58:8b:
         3a:73:7b:c9:05:63:08:a5:70:fc:ac:e5:03:29:72:a7:42:f3:
         ee:b7:0a:d3:7f:06:b0:4a:55:d0:e7:7e:9b:a6:d8:54:b3:08:
         bd:fe:80:58:64:d2:85:37:7d:53:c5:f9:c7:db:1c:db:a4:c2:
         6c:a3:91:76:fc:23:bf:45:ee:f7:41:3f:01:f7:fa:53:f9:cb:
         30:1a:e2:07:55:ee:c8:00:d4:65:5b:72:ed:3a:f7:74:ad:52:
         a0:19:f2:c0:a1:06:25:ce:74:bc:0e:a7:29:fb:cb:43:4f:e2:
         8b:9a:74:35:5c:1d:80:84:7a:a3:f9:d5:7f:03:46:20:83:0b:
         af:24:7c:e9:b8:c9:d2:6b:45:1c:c3:05:92:c0:b8:35:ed:21:
         69:1a:2b:7e:64:f5:ea:6f:b5:d3:4d:f5:99:54:96:ca:93:f4:
         14:f2:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:29:36 2026 by rpki-client