Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File:                     CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier:          PVp3lVlu/mMz7xfMvzvNwsrG/YeiNJmCcAVvNPxsCCw=
Subject key identifier:   B0:56:19:5B:BE:8F:AF:D8:3A:E8:A7:8C:00:0F:D0:92:AE:DE:7F:79
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer:       /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial:       05BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number:          05B6
Signing time:             Tue 22 Sep 2026 22:46:42 +0000
Manifest this update:     Tue 22 Sep 2026 22:46:41 +0000
Manifest next update:     Tue 29 Sep 2026 22:46:41 +0000
Files and hashes:         1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: VTAzrN/aeoY0B7/0YjCjievqmuFHnKZ+etFUOiWtut0=)
                          2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: +7NkBk/u5npDwrIEbh3l98hKn0nLCCDAbxWMC/GKCXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
        Validity
            Not Before: Sep 22 22:46:41 2026 GMT
            Not After : Sep 29 22:46:41 2026 GMT
        Subject: CN=6ab30552-7fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:33:54:f5:56:f4:ce:58:58:60:a9:f0:69:
                    f7:8e:2a:08:f1:b7:0c:48:5f:46:9b:1f:ff:fb:4d:
                    a4:24:92:e7:3a:a3:69:17:1b:63:c0:eb:b4:39:52:
                    db:ce:18:c3:13:07:d3:ec:fd:9c:cc:3d:f7:93:a0:
                    2f:60:b1:fc:1f:3f:b8:c1:3f:ba:3a:4f:65:04:1c:
                    6c:ea:01:96:19:10:2e:a6:22:ba:29:6e:25:7e:b4:
                    2d:51:c9:e8:ac:59:2d:8f:3a:fa:ff:68:39:26:2b:
                    9d:62:2b:5d:68:eb:75:84:02:33:f7:14:8e:05:53:
                    d1:f4:7a:c9:31:5a:a0:07:d9:a6:51:c3:9a:f2:63:
                    d7:03:93:92:03:14:0f:ea:6a:7d:2b:96:4b:4a:53:
                    91:ad:fb:fb:53:5c:25:18:dc:04:72:73:b7:e7:78:
                    c8:93:9b:9f:a6:84:8c:42:2b:e6:14:f4:bb:dd:3b:
                    0c:0d:ef:70:e7:72:d9:ec:74:d0:c0:c7:c7:4a:2d:
                    4d:97:38:46:77:c7:ba:8b:ff:12:d3:ba:e0:d1:25:
                    85:ac:5a:03:87:b5:12:34:71:fd:ae:29:b7:7c:50:
                    91:9a:d0:26:93:2d:11:b4:b2:b0:79:5a:b0:1e:f2:
                    5b:19:c1:2b:f0:cc:72:03:50:ef:ba:48:07:69:db:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:19:5B:BE:8F:AF:D8:3A:E8:A7:8C:00:0F:D0:92:AE:DE:7F:79
            X509v3 Authority Key Identifier:
                keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:93:c2:d1:11:41:f5:37:13:9a:e4:e3:2b:73:90:cd:32:
         b6:5b:5d:49:81:0f:91:e0:aa:67:1a:a0:23:f8:34:86:77:d1:
         ba:aa:a8:a6:e0:e3:e4:89:bc:77:7d:08:ef:ab:45:0a:5c:4f:
         1e:a4:c7:d6:50:83:8c:33:39:21:75:82:e6:22:cc:8b:27:43:
         50:18:d0:5a:b0:54:2b:26:f5:48:24:5a:8a:de:3d:1c:d4:41:
         ff:45:10:d4:87:24:91:4e:88:37:f7:27:c5:66:e7:69:06:35:
         3a:83:bd:67:23:08:d5:02:76:ff:31:97:96:bb:6f:dd:bf:d7:
         b2:9e:15:b4:3a:17:14:a1:c0:cb:49:79:8f:63:0c:6d:78:6f:
         25:98:2d:e3:0e:cd:61:12:d5:de:e5:25:3d:e2:be:66:45:2c:
         3e:2e:09:61:01:2b:09:14:34:ef:6c:ea:a4:e0:6f:e0:1f:85:
         53:72:06:b1:18:44:8a:50:f8:3b:74:3e:44:60:71:8c:69:8a:
         f8:3a:c4:a5:21:6e:85:c0:42:ea:85:1b:1b:7e:85:af:d4:06:
         28:b1:41:56:da:b2:e1:cf:57:82:3b:f2:cd:00:5b:a9:18:13:
         c4:01:7e:50:ac:e5:be:04:6a:be:89:56:72:5b:4b:3f:90:34:
         1d:36:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:43:27 2026 by rpki-client