Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          FzhkJW9ss5/bi2mwe7Rg7uQxzI03Z1Tlyfu2/Yol6wQ=
Subject key identifier:   D3:D8:B6:29:95:DD:2A:DA:5D:D1:54:17:19:EB:67:00:3E:0F:D3:41
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0C62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0C48
Signing time:             Sun 20 Sep 2026 18:42:19 +0000
Manifest this update:     Sun 20 Sep 2026 18:42:18 +0000
Manifest next update:     Sun 27 Sep 2026 18:42:18 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: nW3bV2cYmVvZO+ZyAro4fwHESJpO6sQuVkr2kIKp8Dw=)
                          2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: LDiFdNaZoZIrEKZ4J2tu1FR/lQxHX7nyvF7xLwKiOpI=)
                          3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: ay4GIuiEnpuYZETBZhn2rjkhmfn883sJShryuS/KCcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3170 (0xc62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Sep 20 18:42:18 2026 GMT
            Not After : Sep 27 18:42:18 2026 GMT
        Subject: CN=6ab0290a-9a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:cd:52:5b:e7:86:34:74:ff:de:e7:ab:e5:
                    7b:af:42:1e:51:13:41:09:28:7f:9c:63:71:25:19:
                    04:72:9f:2c:d4:55:97:27:16:a7:a0:56:17:95:f3:
                    fd:a5:3e:c3:61:ff:8f:99:32:12:19:de:c5:e9:17:
                    33:34:8b:08:f3:7c:1e:d2:44:ef:dc:95:1b:0c:3a:
                    e1:60:45:87:ee:0d:62:fe:7e:80:c7:f1:7b:c2:ce:
                    b6:ac:18:f3:fb:ff:c0:51:5e:01:26:fe:51:24:56:
                    df:f5:93:7a:d4:6c:c2:2e:ee:e8:ef:d2:d0:5f:26:
                    66:23:d4:10:eb:ee:98:ab:6e:c5:93:5c:a3:6b:69:
                    b6:3a:d9:35:27:e0:02:ec:eb:2e:23:c5:39:10:e5:
                    2a:6f:43:71:fb:e0:df:f3:fc:24:e8:c6:5f:51:02:
                    bd:97:28:07:d8:98:d2:1f:0b:f0:09:58:f4:63:0a:
                    13:e7:64:37:ef:48:4a:fa:0e:c9:de:92:6a:e2:ea:
                    e9:ae:d5:6c:4f:b2:de:5c:bc:20:d4:7a:0c:c4:00:
                    ec:19:9c:16:28:c0:e6:be:28:5f:62:26:76:ae:9a:
                    19:41:70:b3:63:f0:d9:ff:00:20:64:22:0a:67:d7:
                    47:74:3f:b6:b7:79:52:41:93:5f:67:ba:55:2a:18:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D8:B6:29:95:DD:2A:DA:5D:D1:54:17:19:EB:67:00:3E:0F:D3:41
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:d0:87:97:30:5b:8a:1c:6d:16:25:c2:c7:df:66:a5:1e:
         f6:e3:5e:93:08:1a:5f:47:b6:9b:2c:19:01:0d:5d:54:fa:f7:
         d4:9b:2b:d3:8e:9c:ad:c9:c7:d1:0a:9c:0f:f2:40:b3:26:17:
         23:03:1f:2c:d5:ee:78:a5:4a:c6:11:f6:54:6b:f3:a6:b3:ac:
         cc:c2:f0:7a:25:df:3d:cd:3a:93:4d:e3:5c:b5:45:ab:08:5e:
         5e:a6:1c:13:45:b9:98:0d:f4:d6:dd:2c:65:ee:27:e0:b2:17:
         a0:0f:89:b4:23:43:17:c8:36:c0:c0:73:9d:79:c0:58:52:e3:
         48:6d:74:e7:74:6b:e9:26:38:8f:a2:3c:a3:e9:36:39:a6:a6:
         57:0b:76:55:5b:5a:ff:41:5e:5d:40:35:70:22:bb:35:71:45:
         40:b0:0b:ed:99:f0:dd:07:00:8e:5e:7d:45:05:93:60:86:8a:
         8c:fa:51:ed:7e:3e:05:b0:17:86:ee:eb:3b:87:cb:df:81:f5:
         ee:54:75:c8:d0:89:0c:c6:6d:ff:9b:05:4c:98:1e:8c:ae:7f:
         a7:cd:a8:03:89:7b:ef:e3:27:8a:ec:80:3f:74:1a:68:28:d4:
         57:12:9e:c6:e7:cd:a1:e1:31:46:1c:3d:b0:ba:48:f4:31:67:
         4c:4c:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:59 2026 by rpki-client