Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
File:                     MYH5m8WFngRexECQnaM0uPSdFtI.mft (raw, json)
Hash identifier:          XkRLm7j36akjSF8UEIq/FqH3UHeYoCdTtAvlW9mCrZ4=
Subject key identifier:   44:A6:61:11:D3:87:75:9A:6A:4C:9E:7D:46:7A:A7:C0:B7:82:40:97
Authority key identifier: 31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2
Certificate issuer:       /CN=A91F7C06/serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
Manifest number:          81
Signing time:             Mon 21 Sep 2026 07:43:45 +0000
Manifest this update:     Mon 21 Sep 2026 07:43:45 +0000
Manifest next update:     Mon 28 Sep 2026 07:43:45 +0000
Files and hashes:         1: MYH5m8WFngRexECQnaM0uPSdFtI.crl (hash: o85dRzY2JBRD1XSrA4rw8XtLOgJKeATrNlkbhXT7yKc=)
                          2: F2229F54F6BD11F09D68ADA04A6F56BC.roa (hash: GPBxzgkKMaaG3/PAbiTitYUtRx+LwfxYpF4stDa35Tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C06, serialNumber=3181F99BC5859E045EC440909DA334B8F49D16D2
        Validity
            Not Before: Sep 21 07:43:45 2026 GMT
            Not After : Sep 28 07:43:45 2026 GMT
        Subject: CN=6ab0e031-0345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:3a:c6:00:48:30:dd:04:fc:44:e5:93:65:
                    fc:10:57:d7:58:2e:96:00:03:e1:31:75:18:aa:ab:
                    f1:00:d8:b5:c1:b9:c9:cc:9a:af:c7:f9:7b:92:d4:
                    18:17:16:72:75:15:bd:8c:52:c7:03:00:21:e6:20:
                    8e:30:63:e0:0c:32:de:01:a6:6d:3d:ef:35:e7:45:
                    42:00:d7:cf:1e:de:5b:04:cd:90:c6:09:54:23:aa:
                    92:7b:49:2a:30:00:7f:97:24:e8:ce:cc:85:20:6f:
                    65:16:50:12:82:83:df:21:a1:42:79:7e:ee:e0:13:
                    1d:19:4f:f3:09:1e:10:b2:39:cf:98:6c:02:79:ca:
                    9c:93:71:5c:ad:91:18:25:af:57:66:7a:31:af:9a:
                    12:b8:58:33:9e:89:80:1b:cc:59:24:14:9f:8e:9a:
                    1a:d0:bd:2f:84:ec:63:d1:73:29:dd:a5:35:41:bb:
                    da:e4:e0:1a:6b:eb:1c:f4:aa:cf:ce:34:c4:05:fb:
                    69:ea:bf:6c:17:9d:95:ac:7c:da:63:8f:08:e1:db:
                    88:a3:93:b4:8d:29:ad:fd:80:44:f1:c2:08:ad:e3:
                    a5:a3:fc:33:db:97:a7:48:b0:30:c1:bb:bc:ce:70:
                    33:8d:98:fa:50:00:b7:83:93:25:85:b5:94:32:97:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:61:11:D3:87:75:9A:6A:4C:9E:7D:46:7A:A7:C0:B7:82:40:97
            X509v3 Authority Key Identifier:
                keyid:31:81:F9:9B:C5:85:9E:04:5E:C4:40:90:9D:A3:34:B8:F4:9D:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MYH5m8WFngRexECQnaM0uPSdFtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C06/01D32852F6BD11F0B6FD6D6F4A6F56BC/MYH5m8WFngRexECQnaM0uPSdFtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:1e:41:77:96:45:64:99:4d:da:e4:b7:bc:22:d1:de:0f:
         bb:f6:e1:8f:a1:97:b5:3d:eb:3b:64:bd:f1:ef:fe:c3:db:92:
         02:bb:d8:8c:04:6e:25:9d:e4:e6:e2:98:bf:a5:85:3a:c1:19:
         7a:54:e0:c4:c2:7c:9d:91:b6:37:87:27:60:b4:b1:2c:79:84:
         be:29:ff:8b:df:05:41:96:04:66:0b:6f:b0:57:69:a0:35:38:
         9e:4e:a1:e8:d9:3d:1d:60:16:85:c8:a0:b6:63:97:8b:8d:ee:
         5e:f6:a6:8b:e6:9b:df:91:a6:57:28:fb:38:ec:ca:cb:cf:7f:
         c5:5a:4d:b0:66:8c:41:ee:50:30:16:96:b1:73:df:18:77:67:
         c3:f5:45:a6:3a:5f:ad:4a:a1:40:03:60:b4:a9:90:68:c5:d5:
         c8:80:03:6d:28:76:ea:df:21:ea:d2:63:3b:b2:0a:d3:c8:ce:
         72:c1:ee:62:35:ea:e1:ef:da:c1:8a:05:ae:5f:1e:3e:ab:86:
         bb:24:e3:e4:f0:6d:d0:4a:56:8e:3d:80:4e:62:c6:06:d4:0f:
         43:f8:ca:cb:3c:dd:ae:f4:26:1c:f0:d8:27:f0:9d:ea:f9:ae:
         cb:1e:9a:21:0f:d1:e3:3c:75:30:14:08:c3:8c:32:ff:f5:e9:
         52:31:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:19 2026 by rpki-client