Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File:                     sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier:          fV4Zr4PPXtSzisb9OzWHWUvNVmUKq27lwjGWV2bMja0=
Subject key identifier:   65:3E:46:0B:65:BD:18:35:46:04:BE:37:29:35:8E:69:82:39:7F:17
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer:       /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number:          05AC
Signing time:             Sun 20 Sep 2026 23:02:51 +0000
Manifest this update:     Sun 20 Sep 2026 23:02:50 +0000
Manifest next update:     Sun 27 Sep 2026 23:02:50 +0000
Files and hashes:         1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: YEJngPq6riyY/2Ga0Iu3B9mwndS4lotNBjwTtXO1fho=)
                          2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: f53D5d+q3fUodPkmYKhBtis6mgmJc3a1K68eaX3leUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
        Validity
            Not Before: Sep 20 23:02:50 2026 GMT
            Not After : Sep 27 23:02:50 2026 GMT
        Subject: CN=6ab0661b-3c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:85:80:5c:db:b1:38:07:c9:9f:40:15:b8:
                    16:28:90:3e:3d:88:df:75:49:9e:0b:9e:72:9a:03:
                    93:da:c6:bd:a6:43:30:68:85:19:80:09:13:dc:13:
                    e9:66:8d:4f:36:b2:45:e9:e2:54:1a:62:dc:19:98:
                    68:e4:c6:23:94:66:75:e1:36:4b:a2:f4:95:83:6f:
                    ec:51:f0:db:b2:26:7f:a6:6e:4a:d2:3e:ad:00:f6:
                    02:9c:71:85:fa:d1:6d:ff:ec:a1:86:07:1f:e2:0d:
                    ab:13:ce:37:eb:d0:c7:20:88:88:3c:82:82:95:71:
                    cb:36:92:13:86:98:61:71:a8:db:aa:5f:8f:75:11:
                    6f:1a:d2:48:03:77:81:c0:61:0f:d3:97:40:d0:b3:
                    34:15:35:bd:e7:6e:0f:0a:c0:48:a6:af:d3:32:00:
                    04:5d:07:e7:4d:18:4e:52:05:30:60:14:1b:c1:76:
                    c9:a6:7a:e9:d8:14:12:2b:24:29:1c:98:2b:5f:a5:
                    d2:92:5b:29:74:80:cd:99:b7:25:a3:5f:68:bb:0a:
                    f2:78:25:51:48:fb:95:13:ab:91:b1:f9:05:1d:ee:
                    9e:35:fc:f4:14:f0:89:ed:98:19:47:2a:47:86:fd:
                    9e:ed:ad:02:ee:a5:42:ac:17:48:f6:8f:48:c7:8f:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:46:0B:65:BD:18:35:46:04:BE:37:29:35:8E:69:82:39:7F:17
            X509v3 Authority Key Identifier:
                keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:3e:2e:a5:a3:31:2d:c9:a2:66:60:08:e3:cb:c1:f5:e4:
         ba:09:6a:f1:8f:af:b1:0b:48:74:06:fd:3e:52:cf:e9:be:e7:
         28:48:0e:6e:fe:62:ba:c0:4d:75:18:98:0e:7f:56:d4:bd:5d:
         a6:cc:34:fa:5c:20:bb:c0:f4:c0:1b:e2:34:62:c3:3e:80:e5:
         c4:5f:22:71:4d:b0:f2:39:de:bc:aa:a1:42:74:c1:19:71:11:
         87:ed:9a:61:64:e5:f1:d1:2c:97:9b:5b:2c:fe:79:10:34:05:
         18:40:d4:f5:5e:ef:4e:34:de:5c:d1:ad:ae:b2:a9:35:ff:e5:
         74:f6:d1:c7:75:b7:6a:33:2c:d3:ba:62:9a:b8:de:f7:35:96:
         9d:6e:55:91:2c:c6:ef:19:22:cf:46:00:56:b7:69:95:7d:c9:
         a4:c0:b6:99:00:bd:74:c4:86:19:00:c4:ab:47:a7:d2:df:70:
         27:a3:fb:0e:d2:2a:c8:df:e2:9c:09:a6:e1:46:62:73:8b:96:
         7f:68:68:75:c1:16:42:c4:43:74:05:41:fa:5e:98:b2:6f:e4:
         6f:42:c3:b2:35:f2:06:d0:f4:9d:5b:ff:6d:0c:94:8c:b6:37:
         62:f6:e4:e4:a5:51:22:d5:18:b9:46:87:28:f2:1a:9a:fa:19:
         7d:95:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:22:36 2026 by rpki-client