Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          yVUdrE0cNQF4ic2S26rl/eoA5lSFrpY4E01uQLhFzDk=
Subject key identifier:   BD:98:81:7E:8B:F3:DA:7B:1A:3A:15:51:D8:77:C7:D8:3B:AB:84:F6
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          69
Signing time:             Tue 29 Sep 2026 08:35:20 +0000
Manifest this update:     Tue 29 Sep 2026 08:35:20 +0000
Manifest next update:     Tue 06 Oct 2026 08:35:20 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: yiKCz5Bfp2CGAVJOyTkvAvxsVcSIP1UCDQis/GAeqx4=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: Sep 29 08:35:20 2026 GMT
            Not After : Oct  6 08:35:20 2026 GMT
        Subject: CN=6abb7848-6d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:0b:c4:6f:86:a7:4a:ce:55:6c:19:82:e0:
                    ac:df:36:c4:a0:41:b1:0a:2f:6f:d7:8a:ce:9e:6c:
                    91:5a:03:45:1e:98:8e:06:9c:5f:bf:42:3f:4c:45:
                    d5:6f:df:d7:4e:82:c0:4f:8f:69:3e:f5:5d:19:ae:
                    77:60:b1:0c:66:24:22:47:f7:6b:dc:12:fd:fd:f2:
                    37:27:60:ed:ea:0a:dd:5d:40:53:97:26:2f:fc:26:
                    c0:ef:0b:3a:bd:b2:ce:9b:a9:3b:e4:c2:84:0a:c1:
                    47:51:a1:66:ae:e5:31:e2:e8:dd:ed:4b:d6:20:a9:
                    8f:ab:71:35:6d:fc:23:70:56:dd:ce:99:06:43:fb:
                    c6:ec:e7:51:1b:21:c6:2b:e6:1e:80:cc:35:3f:be:
                    45:4f:17:7c:a2:03:c7:7b:10:fc:73:a0:ee:b1:88:
                    7c:16:38:e6:1d:f0:e6:a7:49:44:74:e3:b4:d0:b1:
                    f6:80:92:34:b5:ad:7e:03:1a:d2:f7:ce:b5:dd:8b:
                    65:4f:7f:15:ca:00:2a:e9:e6:78:ce:fe:aa:7f:55:
                    a9:ca:a7:1c:0e:67:d3:2e:7c:85:d4:62:63:10:26:
                    2d:fd:fc:8f:62:a1:c4:b8:9b:39:44:d4:7f:2c:cf:
                    8f:44:ee:36:1e:21:58:81:b3:5b:3d:97:1c:9c:f5:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:81:7E:8B:F3:DA:7B:1A:3A:15:51:D8:77:C7:D8:3B:AB:84:F6
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c6:7a:d0:63:9a:ff:06:4b:90:45:38:84:a7:95:dc:ef:27:
         28:5f:17:de:06:0d:74:fd:57:18:1f:1b:20:2f:8a:09:0b:9f:
         18:e5:9b:50:94:81:80:ae:02:4f:3c:9a:4d:63:79:ec:c0:f0:
         9c:7a:07:d1:d7:e3:85:11:27:5f:39:11:8b:07:9b:4c:26:00:
         58:9b:a8:d2:4d:1d:f0:37:8a:10:e4:a0:b3:a8:af:bf:ce:d5:
         49:fe:9b:de:40:1b:c3:78:c2:ed:09:c7:99:9c:4a:9a:3e:ad:
         11:83:4c:f0:fc:91:84:e2:d8:4c:dd:ab:86:c4:04:f2:bc:d7:
         19:12:07:8a:72:1c:2e:91:4c:71:f5:3c:16:b8:9e:f7:ef:cc:
         df:22:02:58:9c:b0:56:2d:e7:82:44:cf:92:a3:e7:e8:6f:df:
         0b:17:3b:83:69:3c:5a:95:20:57:eb:6e:4e:88:2b:70:0a:3f:
         5e:e1:b7:4f:a7:8e:6d:fe:ab:fc:31:cb:15:11:27:cd:21:8b:
         d0:53:f9:b5:d2:9f:b5:8c:63:bb:8d:04:78:b7:a9:f6:23:8c:
         88:14:57:b9:6f:2f:ae:c5:d7:3e:7e:24:c3:3c:cd:2d:89:5d:
         73:a2:e5:28:5c:92:a3:b4:74:54:87:c3:70:a1:d2:b8:12:19:
         8f:c6:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:46:14 2026 by rpki-client