Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File:                     RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier:          mGfaaJlEkKGC/5c/s+nCFdG6Ugv5mWE8WdZbAYiI/8U=
Subject key identifier:   C5:02:6E:CB:25:15:E2:6A:8D:31:B9:05:4A:A7:00:C9:B2:C4:CB:CD
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer:       /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number:          C3
Signing time:             Tue 29 Sep 2026 07:06:09 +0000
Manifest this update:     Tue 29 Sep 2026 07:06:09 +0000
Manifest next update:     Tue 06 Oct 2026 07:06:09 +0000
Files and hashes:         1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: McQ2cQHnjO1DQq9uPIGxpg2gegtiaZDM2W7GTL38amY=)
                          2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 07:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
        Validity
            Not Before: Sep 29 07:06:09 2026 GMT
            Not After : Oct  6 07:06:09 2026 GMT
        Subject: CN=6abb6361-7294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:fb:63:63:a9:0a:56:ad:d7:77:6a:75:d6:
                    cc:c6:0b:5c:cc:ae:b7:f6:d1:30:c8:66:59:6d:c7:
                    d8:7e:f3:95:63:17:0b:ce:9a:0b:70:0a:99:5f:cb:
                    44:57:65:d9:66:08:32:a4:06:06:12:29:29:2a:9a:
                    32:51:58:3c:2c:27:33:b4:8e:f2:c1:af:1c:af:47:
                    f2:ec:f1:27:da:a9:4f:39:8e:9b:ff:8a:98:d2:d8:
                    62:30:cc:aa:5d:a5:c6:8f:85:6f:94:13:66:ce:bf:
                    a6:2a:43:34:51:d1:41:ea:08:2e:25:18:37:52:54:
                    f0:10:57:89:4a:ce:3e:68:36:dc:2a:a6:f9:b8:65:
                    ba:b8:17:db:4f:90:64:2c:31:e8:de:9f:a0:be:97:
                    0c:86:ff:fd:6d:bb:0e:ca:35:c0:78:54:a7:0c:71:
                    6a:d8:2d:a5:57:e0:38:72:9f:33:88:df:43:2c:2b:
                    bc:4d:f4:32:ec:af:0e:1c:87:cb:c5:6f:16:c6:6d:
                    90:d9:ac:f7:58:ae:fd:13:d9:68:18:48:c8:e6:fc:
                    25:6f:f7:75:0d:97:c6:64:dc:2a:ea:4a:78:07:a1:
                    aa:6d:cd:d9:16:5b:dc:15:51:5c:52:a5:98:2e:92:
                    c4:86:6b:63:0d:c5:2e:0f:31:d4:0a:7b:45:6d:4c:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:02:6E:CB:25:15:E2:6A:8D:31:B9:05:4A:A7:00:C9:B2:C4:CB:CD
            X509v3 Authority Key Identifier:
                keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:74:ef:4c:69:1d:94:57:62:38:44:d9:99:2e:ba:79:d1:
         a3:b5:5a:b6:63:00:b0:52:1f:06:9c:ca:40:db:b5:39:f2:ea:
         7c:a8:31:fe:55:48:e0:52:dd:3e:e6:d0:c7:3e:8e:fd:3f:d0:
         c3:8a:c9:c7:90:40:0e:1e:ec:a7:46:59:75:d8:2c:0c:bd:b9:
         c5:60:b7:ff:05:bb:05:26:1e:82:1d:07:1e:05:60:5a:54:9e:
         41:0c:2f:b5:27:e9:e3:30:7a:49:f1:cb:d3:4e:96:ff:e0:80:
         49:bc:db:b2:32:55:31:d2:c3:12:a3:f1:57:eb:e2:8c:13:fb:
         54:fd:65:5e:13:46:c3:a3:fd:f6:65:49:06:b6:fa:55:8c:46:
         03:9a:8d:3b:5c:41:cd:bc:c9:0a:b0:18:e6:05:60:0c:af:a3:
         cb:72:28:0e:82:87:36:5c:23:f4:1d:c5:4d:7a:7e:f8:23:5b:
         bb:99:7d:d6:de:ca:65:95:99:f3:eb:8b:38:5f:8d:d7:e4:5b:
         0d:ef:ce:a0:e0:dd:70:64:9c:44:b9:f4:d0:9c:2f:bd:eb:72:
         68:21:4a:65:d9:c7:37:3b:96:4c:d9:3b:3e:f9:9b:db:87:65:
         22:ed:85:3e:c7:f7:e9:65:6f:cf:96:b3:2b:d7:33:8d:c8:3a:
         0f:c9:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:51:57 2026 by rpki-client