Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File:                     1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier:          p8S8AJR75gexXIimaYJM5cFdejz/9MMNGVGA0obG8NQ=
Subject key identifier:   AA:1C:F9:26:F7:BC:32:A3:0D:AB:05:E9:30:13:80:95:08:63:A1:6F
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer:       /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number:          4C
Signing time:             Mon 21 Sep 2026 08:24:39 +0000
Manifest this update:     Mon 21 Sep 2026 08:24:39 +0000
Manifest next update:     Mon 28 Sep 2026 08:24:39 +0000
Files and hashes:         1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: IcTunhqhRBVs7xc6vnDOl9qkY7J4hdicjrqaj+Fy1NI=)
                          2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: 6EW9oyrc2THGvuQYeyC3+cEZ3GaEIxha4d/V0/xHUxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
        Validity
            Not Before: Sep 21 08:24:39 2026 GMT
            Not After : Sep 28 08:24:39 2026 GMT
        Subject: CN=6ab0e9c7-7d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:18:8a:e7:fa:e5:dc:32:cf:7d:cc:21:52:
                    33:5c:a1:3e:21:f6:c3:45:bf:a0:f2:af:3b:ed:f3:
                    c8:4f:57:7d:c6:7c:ce:08:6b:d6:6a:23:37:9d:db:
                    bc:1e:33:74:59:e2:8a:e5:d2:eb:51:a8:75:35:bc:
                    96:c9:77:0c:c1:12:74:8f:46:0a:c4:4c:54:ef:3f:
                    11:c1:81:94:25:a0:46:84:d5:da:18:ce:a6:55:86:
                    4c:64:42:3f:b8:d4:9f:c4:15:be:4c:1b:32:59:e9:
                    ff:f2:08:af:37:a2:6a:4d:c5:8b:2e:4e:35:40:31:
                    33:62:66:3a:c0:72:e1:13:58:03:dc:ef:d4:64:aa:
                    23:9e:1a:75:73:cd:63:13:cb:db:19:07:47:3b:48:
                    34:5b:07:cf:7a:1c:7b:67:01:bf:3b:bb:18:18:df:
                    7b:4f:d8:cf:07:58:87:eb:a8:0e:b9:56:13:69:c2:
                    c8:eb:46:ad:fe:6b:0d:41:c5:01:f0:94:01:52:4f:
                    23:82:7b:48:fe:b0:f1:cb:d2:17:ad:b7:1f:64:b4:
                    d2:c8:37:0b:fb:ef:b1:c1:33:76:15:18:4a:29:a5:
                    fa:7a:49:72:0f:d6:37:81:3e:39:07:62:d7:03:ab:
                    51:d9:84:05:3a:85:5a:b8:8f:79:b5:db:fd:16:13:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:F9:26:F7:BC:32:A3:0D:AB:05:E9:30:13:80:95:08:63:A1:6F
            X509v3 Authority Key Identifier:
                keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:c9:8d:83:02:b7:6e:cb:b1:40:cc:2a:41:6a:04:60:ee:7a:
         6f:f7:12:22:17:f9:b6:9d:3c:cd:fe:4e:bd:54:a9:10:69:ff:
         f7:9c:83:73:a6:13:ec:70:9f:6b:26:a2:18:a0:4a:ad:bf:e5:
         f7:1f:48:08:52:e6:d5:56:ec:da:2a:65:ce:70:f3:75:be:92:
         8e:d7:61:f7:c1:2a:4d:aa:a3:d1:64:90:5e:9a:51:e7:c4:46:
         4c:f2:9d:bd:33:53:84:39:20:9a:ab:ea:7b:0c:65:e7:57:5e:
         17:35:58:01:93:be:4b:c2:41:7c:db:26:0e:2b:93:78:b7:58:
         62:ca:bc:5d:a9:2e:75:ad:9e:50:c6:1a:ad:1d:57:6e:a8:2a:
         28:5c:89:98:51:79:73:ca:a4:0a:c9:87:da:44:12:7b:95:3d:
         2e:a9:74:4f:ab:82:d4:0b:8f:19:4a:82:b5:1d:58:3e:18:73:
         d2:96:c5:11:e2:b7:95:16:1e:d2:f4:e7:7e:38:b2:48:08:5f:
         0a:39:0e:75:71:55:9f:09:05:52:da:b4:57:2d:48:39:75:66:
         39:4f:ed:56:27:96:5f:77:17:40:75:30:66:f4:67:aa:33:a0:
         d0:4d:5b:88:4a:5d:ca:96:6e:54:03:d6:e5:fd:3a:1e:b5:fc:
         7d:90:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:00 2026 by rpki-client