Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File:                     _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier:          IEuQB5h/Di87i5wpM18PU30VbYdKqKF2gEW2+GBpqBQ=
Subject key identifier:   60:BD:43:BD:BF:93:FC:26:95:6B:B0:E3:8E:35:5B:67:B0:52:29:87
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer:       /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number:          65
Signing time:             Wed 23 Sep 2026 07:47:27 +0000
Manifest this update:     Wed 23 Sep 2026 07:47:26 +0000
Manifest next update:     Wed 30 Sep 2026 07:47:26 +0000
Files and hashes:         1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: 5O8mubpXAFq1yOsZUr2EQ+7Npg8VEieE7OYbJV4NGDE=)
                          2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
        Validity
            Not Before: Sep 23 07:47:26 2026 GMT
            Not After : Sep 30 07:47:26 2026 GMT
        Subject: CN=6ab3840f-7aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:98:19:f7:f7:f9:e6:38:ce:7e:5b:7e:10:
                    46:45:ce:cc:28:6a:72:bf:62:f6:72:3e:5d:61:97:
                    80:c0:59:43:cf:72:70:ce:04:d0:3d:8c:1c:1f:af:
                    f6:41:b3:15:44:11:83:a0:e4:ff:51:77:72:ae:15:
                    ab:30:c5:a0:86:9c:eb:7c:49:e4:32:2a:bc:b7:ea:
                    34:a1:d2:50:a2:d4:0a:45:f9:36:b6:d1:f1:1c:16:
                    47:f0:31:2c:7a:dc:2f:c5:db:5f:e9:b4:d4:93:a8:
                    2f:af:fe:4f:65:2e:d5:cd:24:02:07:5b:cc:e6:70:
                    09:d1:1a:09:f5:1c:c4:03:bc:60:48:61:25:83:98:
                    4a:1e:59:c3:b2:26:3a:f4:b8:3e:31:de:10:13:13:
                    ba:67:48:75:25:73:e9:07:70:95:22:18:95:b2:22:
                    9b:6d:bf:94:28:3b:06:cc:8b:4e:34:57:af:57:09:
                    71:3e:1a:13:38:3e:99:9a:28:54:2c:d7:c2:1c:10:
                    97:41:45:74:cf:93:0b:be:a2:f9:f8:21:88:2c:8d:
                    3e:32:3d:64:b1:e4:56:48:a1:84:89:9a:85:fa:c0:
                    1d:a3:d0:81:8e:19:38:bd:60:95:58:fb:54:82:2e:
                    82:02:48:9d:80:e4:1c:c7:c4:4a:e3:f0:26:57:7f:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:43:BD:BF:93:FC:26:95:6B:B0:E3:8E:35:5B:67:B0:52:29:87
            X509v3 Authority Key Identifier:
                keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:25:c0:48:72:18:a5:67:c7:a5:c7:ad:e7:84:a8:72:5b:
         bc:68:d3:58:09:f4:e4:ac:8a:1d:1a:79:88:a8:03:ba:81:01:
         f1:3c:43:33:af:1e:2a:b2:00:4b:f9:c1:89:9a:15:07:cf:a5:
         43:dc:2a:ac:3c:45:c9:66:38:db:0b:c1:ff:54:ff:6a:30:04:
         b8:7c:de:73:8c:9b:35:54:dc:2a:bc:81:7a:b2:29:95:c2:3a:
         8f:fb:ba:b2:cf:22:90:e2:e5:36:ec:7c:e2:3e:5c:b1:3f:26:
         a3:2a:32:6f:32:06:85:f2:ad:ec:c7:ed:7c:fb:ce:4c:b0:f9:
         12:b4:d0:ca:c9:3a:9c:f2:30:b3:02:4a:54:d5:33:77:c4:98:
         0d:ff:2d:7d:e1:2e:04:21:9a:b8:c3:20:00:62:03:08:a6:c3:
         63:7b:6c:67:ad:f1:58:32:fc:bd:98:46:9f:b5:b6:0f:39:c7:
         82:8e:92:fd:4b:58:e4:70:a7:33:b7:32:26:cd:21:2f:3f:14:
         77:68:4f:9e:cf:d5:de:ca:7a:75:36:f7:71:d7:41:74:86:03:
         5f:78:97:a9:e0:66:02:09:f0:9b:e7:56:f3:79:47:a9:78:05:
         b0:5a:1a:5e:bb:4e:7c:42:c8:ca:dd:05:da:c3:43:35:e3:7b:
         1c:db:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:35:54 2026 by rpki-client