Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          UJtzK0sReGQFo2rZhO76fSptyA/pCIm9GzTQu7eJKuU=
Subject key identifier:   92:1B:84:9F:6B:CC:3B:91:99:F0:81:C3:7D:A7:F9:1B:92:F5:BF:10
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          0297
Signing time:             Sun 27 Sep 2026 02:03:06 +0000
Manifest this update:     Sun 27 Sep 2026 02:03:05 +0000
Manifest next update:     Sun 04 Oct 2026 02:03:05 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: rSSxndNxcJdtqlezFOCSCzB7xfjBTAJkwyObMau5wck=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: V4nKUz61HSZwR/ee6VqkEGirGyb2lynLTCpeF4/ug/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
                          rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Sep 27 02:03:05 2026 GMT
            Not After : Oct  4 02:03:05 2026 GMT
        Subject: CN=6ab8795a-0752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:d6:6a:2c:b6:56:51:8c:cd:7d:1d:10:0d:
                    5f:cd:90:03:89:d5:38:ed:e5:af:34:7b:ce:eb:ca:
                    ac:b8:54:00:de:0e:59:61:d0:08:fe:6b:27:d8:4e:
                    05:a6:e7:f8:06:31:df:9d:0a:af:ad:a8:e3:54:5e:
                    52:8d:79:e1:3d:e6:68:85:d8:b5:7c:06:f3:f1:5f:
                    7a:b7:60:a7:5c:09:ab:22:ba:88:0c:92:ec:3a:4a:
                    75:ea:2b:92:fa:9a:be:0e:7a:8d:13:f4:e1:ce:ad:
                    7a:1f:f8:f0:da:eb:2b:0e:4f:9d:d6:1c:1b:24:8d:
                    92:90:49:fd:49:b6:a1:72:9b:d3:52:61:ea:7a:01:
                    23:fa:31:e4:ad:a4:5a:3a:71:23:07:26:6a:92:a8:
                    08:37:7e:0e:38:cd:30:8d:f1:98:c7:92:56:42:51:
                    90:2b:d5:8e:a1:35:a4:f5:66:09:f0:6a:a5:c2:d1:
                    d2:42:60:47:e4:c7:8c:b6:31:4a:13:f7:41:d9:c4:
                    5a:d1:19:1b:4f:0b:d9:34:24:2e:ce:83:53:04:51:
                    78:3a:1e:64:9b:88:63:ad:65:d4:c2:33:1e:b5:7f:
                    22:d8:29:11:a0:4b:52:d8:e8:a7:b5:53:95:cf:ad:
                    6c:36:27:6e:50:15:4a:70:a2:b8:76:75:59:34:29:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:84:9F:6B:CC:3B:91:99:F0:81:C3:7D:A7:F9:1B:92:F5:BF:10
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:5d:ba:52:82:15:e7:55:60:dd:2c:1d:5c:a7:5d:7e:7f:
         af:c5:86:30:38:da:fb:40:de:07:e4:d8:cb:ae:66:33:61:df:
         fe:42:ef:27:4f:65:7b:b8:9d:49:e9:de:92:24:9a:19:b2:ad:
         2c:71:3d:1a:09:ac:e0:42:3f:69:83:04:88:ac:24:a2:65:1a:
         0b:25:ed:4b:16:a7:c9:92:e9:48:4c:ea:b2:44:b0:e5:1a:cb:
         3a:bc:82:2c:18:48:32:e5:1f:63:65:6c:de:00:91:bf:60:e3:
         ca:fc:43:c6:b3:45:1c:da:62:15:8a:4a:68:82:9f:a0:d3:1b:
         24:27:fc:a3:59:28:42:d0:80:81:a0:3f:4d:bd:a6:ec:f9:fb:
         a9:43:27:d5:3c:ae:12:43:d7:d3:f8:07:c4:79:5c:75:1e:64:
         fe:d0:84:4f:ad:49:1a:e1:81:20:98:8e:b0:46:3a:23:d0:f9:
         47:12:e0:8d:ba:c4:87:d0:3b:01:36:11:02:28:37:8b:a7:54:
         65:81:45:50:04:04:96:e4:66:93:0c:51:5d:ac:6f:4f:34:3a:
         d0:0a:24:2f:5f:2a:44:86:84:99:98:e9:09:63:0e:fe:47:d8:
         41:81:03:fa:08:57:36:0d:ea:1e:2f:36:cc:ec:f0:4b:29:be:
         88:65:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:21:06 2026 by rpki-client