Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File:                     rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier:          kdcMyTMjNRCov9obH2V8At0sMeMgaZbFscVbkdtqNHY=
Subject key identifier:   12:C6:E7:04:93:60:87:5B:57:4D:A8:B1:44:1C:66:60:D3:94:7E:A9
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number:          016D
Signing time:             Sun 27 Sep 2026 05:24:28 +0000
Manifest this update:     Sun 27 Sep 2026 05:24:28 +0000
Manifest next update:     Sun 04 Oct 2026 05:24:28 +0000
Files and hashes:         1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: /yBVOZjJX47hSFsU9qAxvNhTG7O6sX0yDLuPtmwcTio=)
                          2: 496B943085B811F1904E05A160A30FBC.roa (hash: kzKLI8ZxIk66mC3lTcah6XxCKgGcbN+/Y9xbXXYxul4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
        Validity
            Not Before: Sep 27 05:24:28 2026 GMT
            Not After : Oct  4 05:24:28 2026 GMT
        Subject: CN=6ab8a88c-6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:a7:97:73:26:0c:d2:3b:46:ab:99:3f:71:
                    a1:9f:0a:7f:3c:18:30:75:c0:2a:2f:1a:b3:99:12:
                    25:9e:9b:16:86:50:63:cd:02:56:b1:65:be:a5:db:
                    c9:7a:b2:9e:ee:8c:98:a8:bf:54:de:b6:c4:d2:72:
                    4a:68:b1:47:26:a3:72:4e:90:28:8d:29:fc:49:ea:
                    9c:e5:9b:5e:6e:68:d3:cd:cf:92:74:a9:bd:12:54:
                    8e:51:05:42:d6:50:3c:04:f0:81:d4:c8:ea:66:c9:
                    b5:b7:8b:51:08:f1:e7:b3:d5:a1:5f:d4:a9:7a:f6:
                    79:61:74:63:3d:6c:54:54:17:55:1b:d5:d8:48:37:
                    2a:a2:86:6f:10:22:21:70:b5:50:4d:df:51:f9:f2:
                    5f:9a:55:4d:2b:de:8f:63:b0:7f:ae:62:b4:26:34:
                    91:55:44:62:df:8c:cc:20:88:46:a8:8c:b4:8e:00:
                    36:bd:71:19:4b:ab:28:dd:48:b2:a4:d8:b6:5b:5b:
                    26:43:3c:67:38:ad:2b:df:3b:3f:d6:c0:f3:da:93:
                    ab:35:98:74:94:0a:0a:1c:b9:b6:65:81:1a:44:f1:
                    c5:ff:3c:91:02:3f:c3:6d:38:73:09:ef:20:34:b9:
                    67:26:01:46:8f:f5:9d:38:c9:4c:71:51:f1:32:e5:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C6:E7:04:93:60:87:5B:57:4D:A8:B1:44:1C:66:60:D3:94:7E:A9
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f1:8f:19:d7:81:ef:56:d8:65:96:f1:e6:2e:84:0e:d3:ea:
         c7:c0:c3:ac:b6:e2:d3:37:98:18:a7:4c:df:98:97:02:02:69:
         3c:c9:d2:54:58:c2:8a:d9:1b:67:44:94:e1:1c:07:c8:c4:88:
         af:66:74:a5:20:84:14:4e:38:1b:1e:35:1b:3a:10:d3:22:41:
         b3:74:1b:1e:29:7c:21:91:f9:cd:2a:27:fc:a1:59:4f:4b:b9:
         92:0d:19:d9:34:bd:67:24:ff:ce:32:a1:8f:cc:e3:c3:aa:33:
         12:62:e9:f6:78:0a:7b:13:6b:25:72:d6:9a:d7:41:41:1d:c9:
         d6:7c:17:c0:32:1a:05:b5:68:b7:4f:66:f2:3e:bd:9f:df:57:
         83:a8:e6:87:86:3a:e1:b1:2b:a9:42:27:43:7b:41:e9:b6:3c:
         b1:7d:db:87:d1:e1:d8:c5:b3:11:4e:00:fd:94:92:e6:04:9e:
         6a:62:2b:b1:e1:91:9a:9a:8c:56:7c:bf:b7:0f:eb:c7:6e:08:
         19:27:7b:b3:b3:3c:2d:29:9b:ac:cc:f7:da:92:0d:ae:2d:26:
         5d:be:d7:d0:26:5f:04:77:69:2b:50:b8:dc:85:8f:80:5f:30:
         92:e6:3c:bb:77:e3:46:c8:51:be:a0:63:f6:32:34:2a:86:4c:
         58:b1:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:32:04 2026 by rpki-client