Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File:                     4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier:          ZFXJiXmnCIwN6id9SIRu6DWKVA8TvRUrUVJqJCJCB7c=
Subject key identifier:   11:E4:A0:23:1D:0B:27:B2:42:91:A6:E6:2D:0F:3B:AA:54:F3:02:05
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer:       /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial:       0379
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number:          0372
Signing time:             Mon 21 Sep 2026 00:38:27 +0000
Manifest this update:     Mon 21 Sep 2026 00:38:26 +0000
Manifest next update:     Mon 28 Sep 2026 00:38:26 +0000
Files and hashes:         1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: OUFxn0P9237IXMtitc4TlUJN2eXQweqeZmYfyNLZcU0=)
                          2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
                          rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
        Validity
            Not Before: Sep 21 00:38:26 2026 GMT
            Not After : Sep 28 00:38:26 2026 GMT
        Subject: CN=6ab07c82-83a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:1f:46:28:c8:da:b9:15:52:e7:9f:cd:b9:
                    3c:1b:2a:18:53:f8:dd:c2:98:47:b4:5a:ff:47:14:
                    2c:6f:e3:4d:7e:7d:46:15:e5:d2:9f:87:3b:97:47:
                    f5:76:76:a3:d7:16:7f:bd:11:80:22:74:79:a6:33:
                    78:8f:9c:e9:86:07:3d:af:3d:68:9c:c1:02:24:91:
                    54:45:df:93:00:43:6b:9c:dc:84:f9:f7:e6:36:59:
                    4c:65:2f:9c:14:93:89:d0:b1:19:5c:d5:b0:50:dc:
                    6c:2c:53:3d:34:ab:05:0a:26:a5:21:8e:b6:c6:9f:
                    07:65:30:a9:ba:17:68:67:f2:d1:94:dc:01:d3:b1:
                    2d:c6:b1:6a:01:b7:5c:1a:92:a6:05:42:0a:f4:1d:
                    5e:65:3c:58:00:46:38:f1:44:38:56:8a:62:86:ce:
                    96:b6:7c:95:53:2a:81:35:1f:1b:12:5f:b4:4f:70:
                    43:57:23:70:f1:94:7e:c3:ad:b6:a6:bc:14:c1:e0:
                    6a:49:49:72:70:4b:a9:56:ae:4e:c6:21:7d:2e:73:
                    3b:61:7e:e8:fb:93:1a:bd:b2:29:f6:42:b7:2c:6e:
                    d3:49:d7:d2:3b:bc:59:e8:d7:81:9d:62:e6:8a:37:
                    34:2c:d4:83:be:ca:c0:45:24:26:67:b6:8b:91:57:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E4:A0:23:1D:0B:27:B2:42:91:A6:E6:2D:0F:3B:AA:54:F3:02:05
            X509v3 Authority Key Identifier:
                keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:ca:f2:7c:b1:08:a5:d2:3f:c3:96:2b:1b:d7:6a:fc:28:
         0d:cc:44:12:f5:03:b9:8b:bd:5c:a8:ae:81:24:c1:eb:f3:19:
         f7:df:c1:6c:17:80:e4:9c:6e:29:5f:5f:08:18:03:68:73:17:
         7f:37:10:e0:b1:78:fb:c5:23:23:f8:1e:ec:96:aa:d3:a6:7c:
         f1:56:7e:fc:cd:83:8e:51:88:80:30:07:8e:a4:2e:a9:f5:1b:
         4c:57:b0:8f:ba:01:dd:15:c0:37:d5:66:32:a8:5c:27:dc:eb:
         a4:48:7c:49:99:8c:3f:ca:f5:ce:b7:ca:22:54:5f:61:db:c1:
         e1:bd:8c:d3:3c:55:bc:4b:e4:8f:09:42:bf:21:30:bd:b2:72:
         1f:eb:ab:1c:e2:96:1f:9c:05:96:89:82:d2:86:b8:3d:99:35:
         22:5f:02:eb:48:32:e2:87:6a:98:72:dc:43:c6:cd:e3:9d:47:
         a4:a6:1f:40:17:ac:f2:40:a6:56:a1:6a:54:a5:f2:3e:ab:a0:
         08:13:87:36:c8:e7:00:0f:48:be:3c:33:de:a5:7e:7a:d3:7f:
         dd:8c:b5:69:aa:91:6c:c8:46:dd:8c:5e:1a:96:b2:92:2a:15:
         08:6c:ab:9a:4f:23:58:96:2a:b8:5a:2b:48:f6:3b:2f:a9:29:
         28:91:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:11:19 2026 by rpki-client