Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File:                     M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier:          tCp3oV2K8FrtSev5WThg2dgvv1sG9UrP3/ksXcqvuO8=
Subject key identifier:   C5:1E:4D:D5:EC:A0:C3:F7:CC:5C:AE:C1:0E:43:B9:D9:D7:D9:AD:C8
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer:       /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number:          98
Signing time:             Wed 23 Sep 2026 07:12:45 +0000
Manifest this update:     Wed 23 Sep 2026 07:12:45 +0000
Manifest next update:     Wed 30 Sep 2026 07:12:45 +0000
Files and hashes:         1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: XolSg1AMDqaEcbxEj+6a5VOLRNxnCBL9uxc2KJs5Src=)
                          2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
                          rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
        Validity
            Not Before: Sep 23 07:12:45 2026 GMT
            Not After : Sep 30 07:12:45 2026 GMT
        Subject: CN=6ab37bed-0b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f6:25:98:43:0f:ad:39:2d:fd:72:f4:9f:0a:
                    bf:30:f9:6d:8f:e1:73:73:ea:7e:92:48:18:94:aa:
                    da:8d:32:8a:50:7a:fb:0d:3e:f1:c2:7e:91:f4:b1:
                    d5:32:45:2e:ac:80:6d:48:28:1e:52:a7:cd:d3:a0:
                    b4:28:c6:2b:28:08:f8:97:8c:0e:ba:9d:e0:37:80:
                    d7:f7:a7:f2:fb:95:76:72:2b:69:81:07:f9:33:6d:
                    9c:69:0b:86:c4:67:29:90:71:c2:10:67:48:1f:85:
                    f7:ef:d7:98:bf:47:1a:8f:17:bc:e5:c5:1b:91:84:
                    ae:75:8e:6e:2c:d3:a2:81:9f:69:b4:85:2f:09:48:
                    c8:43:04:69:fd:2c:14:9d:be:d3:2e:19:5a:56:2e:
                    70:05:fa:9d:9d:b5:ed:ee:1f:f5:8e:67:f1:15:4f:
                    a2:d9:9b:90:1c:21:7e:2d:61:55:14:a4:6a:f6:a7:
                    d3:b8:f4:3a:66:af:86:fe:2c:d1:88:95:3a:17:1a:
                    92:4e:86:99:d4:ad:84:af:3b:7c:61:15:69:cc:38:
                    30:67:df:1f:a1:ba:2c:31:63:15:bb:df:12:46:59:
                    57:bd:a4:da:34:0d:e5:c5:f7:6f:85:a7:ed:bc:54:
                    19:83:ec:b7:bf:92:98:2e:19:1e:83:bf:9d:c8:1a:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1E:4D:D5:EC:A0:C3:F7:CC:5C:AE:C1:0E:43:B9:D9:D7:D9:AD:C8
            X509v3 Authority Key Identifier:
                keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:08:53:33:b7:85:b7:fd:52:b9:f1:0c:eb:ba:96:0a:63:
         68:93:0d:73:88:eb:e0:7d:ec:79:0e:e4:ad:69:59:34:44:ca:
         e4:8f:91:db:c8:fe:0b:a5:bd:88:40:f5:ac:c8:1d:30:a4:a8:
         a4:23:31:4c:f9:59:fb:4d:44:bf:c0:49:6c:20:f1:e2:dd:17:
         bd:e4:3d:1f:01:5d:a7:26:88:d1:46:ed:71:c7:63:86:00:97:
         ce:f3:c0:6b:80:a6:a6:19:c4:c2:0d:5c:9d:3e:83:6c:b1:d9:
         a8:21:a5:2c:b8:c6:df:f8:8c:29:ed:ac:71:a5:34:cb:c0:da:
         1a:75:5d:47:08:b8:04:5b:bf:31:c1:da:05:fc:c2:cb:24:9a:
         fe:2d:dc:e5:84:e4:4c:3d:a1:e7:98:2d:94:14:cb:5b:bb:cb:
         ce:b9:e5:76:02:4a:5c:34:96:e1:f9:e3:10:91:3e:04:31:0a:
         c9:9b:3a:10:2b:6f:e4:de:bd:3e:c6:d4:9e:ea:af:cf:c1:c6:
         06:75:bc:f1:68:bc:b4:ec:f0:66:fd:44:fb:80:a9:6a:64:70:
         98:26:aa:4d:14:6b:7f:41:9f:b2:b4:bb:e2:1c:c2:c3:ed:85:
         bc:7c:dd:b6:2a:09:5b:8a:53:02:0a:cb:59:54:71:b2:2b:d8:
         e2:86:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:44:52 2026 by rpki-client