Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File:                     fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier:          yqXfDgr3NN4DBd7yc7VcRtJ7/kcW19AgMrgIp83UaIw=
Subject key identifier:   04:E8:58:B6:D8:7B:EF:66:CB:A6:82:1A:6B:17:4A:42:0C:01:97:9A
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer:       /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number:          A6
Signing time:             Sat 19 Sep 2026 07:14:50 +0000
Manifest this update:     Sat 19 Sep 2026 07:14:49 +0000
Manifest next update:     Sat 26 Sep 2026 07:14:49 +0000
Files and hashes:         1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: QGeIrWLlMt7jev0EakrIE6/4vWwwoAS2j9u74biBrlU=)
                          2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
        Validity
            Not Before: Sep 19 07:14:49 2026 GMT
            Not After : Sep 26 07:14:49 2026 GMT
        Subject: CN=6aae366a-45e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:2f:7b:05:a7:33:c6:27:5d:9a:22:2a:a8:
                    6f:bd:62:19:30:0d:6e:51:17:34:3c:f0:d2:78:be:
                    d7:b4:15:27:d8:6a:8d:cb:91:ef:c2:f8:ff:ed:ce:
                    2e:dc:d1:88:69:26:cd:f1:78:5c:8b:0b:f3:6f:20:
                    ad:06:6e:29:c5:62:3c:7c:93:42:f8:f8:36:19:25:
                    bb:e0:4d:dc:a0:30:fb:8b:b6:83:4b:69:21:b3:d1:
                    28:77:28:e6:49:a9:ad:37:c7:9d:6c:a9:09:0a:a2:
                    1e:c4:5b:1a:67:08:ff:08:38:d3:79:29:e8:ba:ae:
                    56:57:c6:38:95:29:02:1c:65:8a:c8:92:7f:05:24:
                    5d:2c:20:04:65:b1:22:72:f5:48:3c:91:03:70:84:
                    22:66:54:8b:a5:7f:cc:01:37:21:47:13:0f:84:c0:
                    81:84:c9:29:d7:2b:b4:07:25:fc:01:a0:e1:64:51:
                    0d:06:84:67:d9:ee:d6:6d:b8:e8:f9:e4:05:59:ec:
                    17:57:8a:11:d8:f6:17:a6:a4:ab:b2:8a:fe:b6:b3:
                    cf:bc:22:eb:b3:9e:72:39:61:a0:4e:ff:a9:5d:7b:
                    de:99:79:7b:e4:b2:db:67:82:72:3e:3d:09:fc:c8:
                    45:6e:2d:27:af:e0:57:65:02:0c:4a:9d:4f:8b:d2:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:58:B6:D8:7B:EF:66:CB:A6:82:1A:6B:17:4A:42:0C:01:97:9A
            X509v3 Authority Key Identifier:
                keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:33:52:dd:47:cd:93:63:dd:d7:92:2f:01:83:b9:0e:08:4e:
         c7:6b:1d:0f:9f:f6:8d:57:96:a5:10:a8:65:e9:41:6b:46:e5:
         b8:52:84:1c:2d:f6:ed:73:43:83:eb:14:52:18:fb:f4:43:6c:
         21:21:c8:dd:da:0a:c0:bf:1c:2c:91:cd:da:fd:6f:43:e5:6b:
         de:03:53:74:d6:af:53:60:43:64:c7:69:fb:34:86:65:be:09:
         36:30:ab:c1:18:12:f5:cc:14:1c:95:8d:7e:d7:86:78:64:ce:
         57:ce:ac:4d:af:93:9f:74:a7:d3:aa:c8:62:a9:6e:a8:d5:c0:
         1e:e9:08:d5:ac:b8:3e:69:08:e6:98:1f:3c:65:27:01:56:ce:
         a8:b9:7b:3d:16:50:d5:ba:81:d3:ba:3f:55:91:88:80:46:a9:
         b6:9a:e7:2a:56:3c:64:e9:77:ec:01:8b:f7:0c:d0:69:32:d0:
         93:d0:f0:38:41:97:70:2b:62:53:da:2b:27:8b:e0:c5:2d:47:
         bd:e0:77:e3:a6:c1:99:cc:e5:35:b9:58:6c:6d:13:95:5d:28:
         d1:83:8d:11:5f:41:45:af:1b:96:d7:03:84:c3:49:bf:79:d7:
         87:76:82:87:82:46:85:8d:50:64:e6:1f:0e:93:5d:b9:5e:d6:
         f5:4b:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:12:17 2026 by rpki-client