Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
File:                     o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json)
Hash identifier:          4A1/tSKKPOXxHH3QlgSWzew31/mJ1WTZ4fRsFIceGs8=
Subject key identifier:   5C:E5:FE:8C:0B:BD:BA:DF:C8:B4:AC:4C:E8:87:65:1D:40:0C:B1:50
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Certificate issuer:       /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
Manifest number:          78
Signing time:             Wed 23 Sep 2026 07:37:01 +0000
Manifest this update:     Wed 23 Sep 2026 07:37:00 +0000
Manifest next update:     Wed 30 Sep 2026 07:37:00 +0000
Files and hashes:         1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: Ogmc4XeV08XXcJMazQu5AAzQ0u0b29U+sXtPFmuEP80=)
                          2: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=)
                          3: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=)
                          4: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
                          rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
        Validity
            Not Before: Sep 23 07:37:00 2026 GMT
            Not After : Sep 30 07:37:00 2026 GMT
        Subject: CN=6ab3819c-c639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:63:74:a8:b1:df:98:63:02:02:7b:4c:36:
                    09:89:b5:83:8e:9b:39:5a:ac:07:76:5c:2e:18:6c:
                    03:e2:5f:61:4f:40:0b:da:99:cf:64:ad:b5:30:06:
                    fe:62:2a:96:14:6c:a9:a7:ef:e6:ee:2d:61:54:7b:
                    3a:2b:2b:ac:67:24:cc:af:79:cc:b3:c8:53:1a:44:
                    56:d9:fb:23:e3:7c:4b:07:a7:34:15:cc:71:f6:7f:
                    8a:36:f0:b4:23:14:6f:71:88:3a:7e:32:5a:24:ba:
                    de:91:f3:45:92:39:a3:8b:fb:2b:7b:84:15:e0:17:
                    6e:88:62:10:49:2c:af:18:3b:17:d7:31:fb:5f:38:
                    f7:a6:36:8c:94:89:ac:9f:fb:2a:9e:1b:ea:56:d4:
                    ee:74:74:52:d7:bc:e7:5a:33:07:9e:f0:10:65:71:
                    67:bc:b4:fe:23:38:67:77:11:41:dd:f9:b6:be:3a:
                    e9:c2:43:c8:35:72:f3:cb:a0:c6:4f:16:4e:a3:86:
                    7e:3a:50:29:8f:ca:42:11:ea:2b:fe:d8:32:04:99:
                    19:9b:3e:a3:05:76:80:98:77:46:60:0e:3f:89:32:
                    b0:80:9c:8e:6f:b7:e8:85:94:8d:2a:00:44:e3:eb:
                    3a:86:76:c8:87:fd:49:19:c4:6b:7c:05:62:c8:64:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:FE:8C:0B:BD:BA:DF:C8:B4:AC:4C:E8:87:65:1D:40:0C:B1:50
            X509v3 Authority Key Identifier:
                keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:f1:b8:fb:ce:45:a7:c3:ec:7e:8c:91:ef:d2:66:ba:ad:
         f1:5c:32:a2:ab:34:7b:14:4c:b3:8f:e6:c3:25:dc:33:89:44:
         5e:95:73:28:25:c1:7c:0e:27:ab:4f:f3:dc:80:b0:dc:2c:f5:
         95:15:31:42:32:97:f7:e2:a2:bf:ea:30:bc:b8:6c:52:20:c9:
         9b:83:c5:fc:67:51:af:f9:c6:a6:7d:8c:61:06:60:1c:f5:5d:
         b9:4a:56:02:b6:1f:d4:32:9f:c0:1b:0f:16:36:48:5d:c2:2b:
         d9:dd:8a:bc:bc:9e:f1:c9:79:e7:57:30:bc:64:8e:19:10:fe:
         7c:d2:cc:c6:36:37:83:9b:ea:a3:c8:ea:e1:8e:c5:74:5d:0d:
         d4:90:ce:77:51:00:6d:5a:18:d8:85:d9:78:9a:84:9d:a4:40:
         27:d1:70:44:8d:44:5b:b3:d4:00:70:09:e0:89:6b:e3:be:4a:
         ad:76:fb:8f:60:95:2f:16:8e:ea:4e:22:21:5b:8e:1a:b3:d8:
         34:07:2d:a6:ac:99:24:2b:a5:18:9e:75:48:ad:20:db:ea:e2:
         ad:06:d3:a9:4d:5e:89:22:41:4f:17:e3:64:e9:be:49:03:c0:
         33:de:f4:d3:0d:3b:3d:4a:62:89:6e:2f:07:8b:1a:e0:3e:4e:
         18:02:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:26:08 2026 by rpki-client