Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File:                     grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier:          c7fsPQBMOJwWPG17CTN7hqCjQLLV1cMWmsow04P0q2o=
Subject key identifier:   97:98:8D:4B:B8:29:90:27:18:B9:0F:7A:09:EF:08:DF:D4:72:98:77
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer:       /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number:          01A1
Signing time:             Mon 21 Sep 2026 04:13:52 +0000
Manifest this update:     Mon 21 Sep 2026 04:13:52 +0000
Manifest next update:     Mon 28 Sep 2026 04:13:52 +0000
Files and hashes:         1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: BU1MBXKWfndcn8PZj19lJeTY0CSihPS756aFdhIGSuU=)
                          2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: w49yHIqbKO5UQXgKCrDZvpiyw+EK/7buhVnIPU9D8V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
                          rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
        Validity
            Not Before: Sep 21 04:13:52 2026 GMT
            Not After : Sep 28 04:13:52 2026 GMT
        Subject: CN=6ab0af00-8283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:e6:79:07:8a:57:dc:66:37:f5:5b:f4:96:
                    be:d0:a1:8b:03:dc:75:46:f0:a3:b4:56:d3:2d:3f:
                    dc:58:39:a4:ae:35:a4:a8:2a:16:51:a8:c6:cb:4e:
                    0c:84:0c:0c:7d:b3:a5:1e:09:af:a2:fd:b0:7b:94:
                    da:f0:52:02:18:63:1c:a6:6e:d2:44:fa:3d:3c:08:
                    cf:b6:d1:e8:8e:51:ef:76:cb:5d:74:b2:9c:9b:51:
                    03:14:c3:1a:be:89:9d:8d:dd:f9:ec:45:27:a0:0b:
                    3f:29:bb:14:2b:c6:02:20:cd:ae:7f:34:d4:f0:96:
                    56:9e:cb:f1:6c:e9:90:0c:7a:d2:ac:dc:a2:d8:0a:
                    f9:93:c6:85:25:2e:df:fb:30:c0:82:b9:39:78:4a:
                    77:37:e6:e8:e2:c3:91:60:a1:30:1e:5e:b7:1b:20:
                    d4:c5:e2:a3:0e:aa:10:38:0f:10:f3:a5:bf:2a:5d:
                    a0:fc:d1:e1:0c:5e:d5:37:64:54:10:8b:b2:f3:96:
                    eb:a1:c3:44:25:6b:07:64:41:70:49:88:e2:93:d9:
                    22:c2:51:29:5f:fc:00:6a:2f:a6:4e:ce:f7:91:d0:
                    a2:40:ff:be:44:08:bf:a5:18:65:3f:fe:c3:fb:2c:
                    0b:81:dc:4e:22:21:66:2d:0d:72:32:3d:d1:bd:ad:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:8D:4B:B8:29:90:27:18:B9:0F:7A:09:EF:08:DF:D4:72:98:77
            X509v3 Authority Key Identifier:
                keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f8:8b:e5:4e:c5:63:b5:aa:ce:4e:35:bc:74:ea:70:d9:27:
         81:35:71:d3:3c:5e:2c:c8:6f:db:f3:31:54:50:a2:63:50:71:
         a1:d8:b9:63:35:95:39:4f:a7:81:67:16:bc:13:98:fc:f6:01:
         67:16:2d:bc:38:2a:30:a2:72:30:dd:75:42:e8:1c:31:47:f7:
         a5:da:d1:21:8b:eb:51:a3:f1:38:5a:3d:1f:05:91:9c:a0:f3:
         e6:84:d4:71:92:26:8d:e2:1e:8f:dc:a4:d8:fb:db:e6:94:46:
         75:8b:33:18:51:bd:c1:63:5e:81:ec:38:a3:84:bf:40:7e:3b:
         5c:be:b4:f5:19:e0:53:f6:b5:3c:ae:99:a7:d1:9f:2e:56:2c:
         53:dd:f2:db:2e:b1:ea:e0:b8:7e:d9:24:96:f0:d8:a0:70:28:
         89:45:bb:ae:3a:c3:0d:76:92:57:00:30:49:a4:f9:3f:59:45:
         88:aa:05:a1:38:22:fc:7c:ad:c1:13:36:b3:f1:74:e3:64:98:
         20:1a:12:56:7a:36:83:6d:88:9e:de:6c:78:ba:04:f1:3e:2c:
         60:ef:45:a6:7f:ea:e1:32:33:f9:96:e2:f7:8b:0a:21:b2:21:
         58:96:c0:8d:e8:8b:9f:7a:64:27:20:4b:e4:2d:21:f3:37:12:
         61:c5:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:26:45 2026 by rpki-client