Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
File:                     s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json)
Hash identifier:          3qtZX1+2z3zge4WYVY0e7EZgmoUlLxpNLWmhWi4vQt0=
Subject key identifier:   33:D6:E9:B4:A5:81:4C:03:13:75:82:04:3C:19:0A:74:6E:9D:A3:28
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Certificate issuer:       /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial:       0952
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
Manifest number:          1C06
Signing time:             Sat 26 Sep 2026 17:05:59 +0000
Manifest this update:     Sat 26 Sep 2026 17:05:59 +0000
Manifest next update:     Sat 03 Oct 2026 17:05:59 +0000
Files and hashes:         1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: 1HydQFT+FyP28yK2p7XmBavquqrdLIfFsxGgRL4h7AA=)
                          2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: onIQBBgaYqQQQF/MByH2Uc0IXjytJM2CNUv7KzbvAOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
                          rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386 (0x952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
        Validity
            Not Before: Sep 26 17:05:59 2026 GMT
            Not After : Oct  3 17:05:59 2026 GMT
        Subject: CN=6ab7fb77-2abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:c0:2d:ba:6c:0d:1f:dd:6e:8d:25:44:3b:
                    d5:13:71:b0:df:05:09:82:45:b0:d2:44:ac:62:52:
                    ba:77:2c:77:70:7b:40:98:ad:76:33:42:91:b5:ae:
                    5a:a5:ec:77:75:5e:bf:00:55:c9:73:54:04:49:18:
                    2c:ee:21:c0:76:72:46:ac:e5:3e:94:ed:00:99:27:
                    d5:55:b5:b5:cd:13:3f:5e:82:c4:f4:94:f0:2d:b6:
                    c5:96:9a:ed:1e:0c:23:ce:4f:36:54:2b:08:97:c0:
                    f8:2c:1b:bf:8d:fd:11:af:cb:76:8f:38:53:23:7c:
                    1f:d6:eb:c1:38:88:d3:d6:44:06:18:d2:61:c4:52:
                    6f:02:15:da:05:25:86:e5:a5:fa:97:d6:70:04:dd:
                    32:d1:3f:a5:5d:28:0e:ae:a6:a6:0b:86:72:6a:9b:
                    b3:f8:00:5b:af:92:3a:bf:9f:e8:17:c3:d3:07:af:
                    61:35:1d:99:6e:72:35:1a:b2:90:42:85:38:5d:0e:
                    73:e2:60:fa:40:a9:e1:7f:e6:9b:06:61:a4:a2:df:
                    e0:a3:66:37:77:07:53:e0:63:fc:8d:58:34:0b:32:
                    77:d7:45:7b:e8:d4:7a:a4:e0:84:20:49:b3:69:00:
                    13:89:47:5b:06:6a:3c:9c:59:dd:1c:d3:df:d8:0b:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D6:E9:B4:A5:81:4C:03:13:75:82:04:3C:19:0A:74:6E:9D:A3:28
            X509v3 Authority Key Identifier:
                keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:13:bc:9d:72:71:02:68:7c:59:e9:9f:e7:f6:7a:6f:66:98:
         79:d9:51:66:68:4c:c7:5f:cc:89:9e:85:6d:2d:fa:87:98:e5:
         93:a6:40:22:15:0a:92:32:1b:2a:d6:86:08:d8:bf:e2:ac:b5:
         7c:0b:34:2f:af:81:4b:5f:33:00:81:4a:88:98:d6:52:cf:a4:
         d0:e6:71:26:6c:a6:d7:e7:4f:25:b9:c5:ce:df:c4:17:1a:5e:
         95:90:ea:25:7b:e6:1d:f1:c7:5e:b1:e5:e1:05:34:bb:e2:b2:
         56:ed:34:80:f7:28:f6:82:c1:6d:ba:47:d2:5c:c7:19:42:89:
         3c:58:e8:7e:d2:9a:93:ab:b1:21:4b:a1:0a:78:f2:8b:2e:5a:
         2b:8a:a1:42:40:03:b3:20:c8:6e:2f:8f:53:15:78:26:4f:6d:
         31:af:9a:93:0e:bf:fd:d0:8b:40:bd:e9:dc:1f:cd:93:36:5b:
         80:e8:03:5b:69:f4:6b:78:b2:f6:a8:f1:ab:48:6d:19:23:03:
         32:87:e8:dc:11:e3:0e:7d:c5:5b:e2:1d:a5:f4:0d:f0:35:bf:
         0f:94:c1:86:79:d9:e4:27:96:5b:3e:8f:02:28:de:8c:6f:79:
         86:aa:fd:fd:b7:89:67:87:cb:d9:84:aa:88:ae:b3:16:a2:f7:
         ba:ef:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:41:32 2026 by rpki-client