Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          vcwqjh90XSqGNIbQaWQGU2pajBHTlzjUKjiV/WWeJm8=
Subject key identifier:   85:26:EF:47:AA:E8:A7:1D:5A:D1:5D:08:F9:5C:41:AB:A7:06:CF:7B
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          9B
Signing time:             Mon 21 Sep 2026 07:25:07 +0000
Manifest this update:     Mon 21 Sep 2026 07:25:06 +0000
Manifest next update:     Mon 28 Sep 2026 07:25:06 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: cjyHajtl0iaifQHaIxHSAJ26YlG5Cq5gms822CuTTkE=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Sep 21 07:25:06 2026 GMT
            Not After : Sep 28 07:25:06 2026 GMT
        Subject: CN=6ab0dbd2-5062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:f6:43:08:74:a4:ce:b1:05:ee:82:c4:47:
                    2c:18:98:a5:b7:2c:2f:93:6d:30:1c:6b:bf:b1:be:
                    08:bd:0b:13:b7:3e:99:f8:7f:27:d5:92:18:0a:ab:
                    95:08:31:28:04:98:be:df:6d:80:60:96:5a:96:b2:
                    46:45:9d:5e:9c:4c:97:9a:b9:20:2d:3b:88:66:46:
                    e4:ca:62:e2:5e:6f:21:34:25:98:91:c8:86:54:02:
                    3b:e5:e9:00:b9:94:37:e8:17:1e:7b:e3:dc:93:0c:
                    8d:74:36:f8:c6:19:3c:76:4f:0f:97:d9:81:18:86:
                    91:e6:f4:fb:6d:25:dc:ec:1e:25:e0:55:cf:99:23:
                    9e:04:71:fe:20:65:e3:24:4e:08:e0:36:03:cc:73:
                    14:db:9a:a6:3f:65:a6:39:56:02:8f:55:38:dd:c8:
                    e6:9c:6c:7b:0e:df:49:1f:48:6c:da:11:8b:b7:ab:
                    18:37:fe:95:e2:49:e4:6c:cd:b0:7b:35:9c:df:6a:
                    5e:d1:15:10:21:dc:71:c3:0e:36:cc:a2:f7:3b:c5:
                    f5:43:c7:89:2a:39:81:9d:91:a8:1e:20:ef:c7:3f:
                    5d:75:0c:34:6a:6a:37:b2:86:59:77:d9:ef:4e:f9:
                    fb:3f:98:9a:e7:45:af:b1:d6:24:a3:45:cf:be:4d:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:26:EF:47:AA:E8:A7:1D:5A:D1:5D:08:F9:5C:41:AB:A7:06:CF:7B
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:26:c7:fd:49:1a:df:41:14:64:e0:6b:cd:a1:20:cd:9c:29:
         93:81:35:87:eb:7e:73:3d:e8:e1:f1:13:ec:61:b2:3f:2d:9c:
         32:fa:8c:08:da:22:b3:49:69:05:34:f6:f1:b2:d7:84:27:e1:
         92:b1:62:44:4f:2c:f6:6e:e4:be:d8:bf:43:28:4c:09:6f:c4:
         a1:af:68:85:1a:eb:c7:7f:c1:10:54:96:8b:99:1e:e6:39:c4:
         fc:a8:ad:92:5a:7e:11:8a:24:4a:16:d2:8d:8c:ff:c5:ff:13:
         2b:a7:87:65:7f:b8:ea:f7:b6:ab:75:d9:ec:a1:e6:c7:99:d0:
         81:39:a9:2e:10:86:e1:fc:c5:28:a4:0d:af:91:27:14:a6:ae:
         69:28:ab:df:9f:66:85:7c:67:84:c6:cf:7f:aa:61:01:cc:47:
         6d:c7:f4:d8:bb:2a:80:e9:12:ea:c8:a7:fe:3a:5d:46:c1:0e:
         79:eb:d5:62:8f:ed:82:04:61:8a:cf:21:55:1a:68:58:1a:36:
         dc:a9:72:aa:49:b2:d5:63:ff:4f:b1:a4:52:47:c3:e6:b6:6b:
         66:55:4d:ed:8b:2e:b5:ec:91:d2:dd:21:76:bd:38:81:dc:f3:
         9d:51:6d:fc:09:d4:cb:01:68:04:35:df:a5:1b:dd:fa:f1:a1:
         52:56:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:32 2026 by rpki-client