Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.mft
File:                     repvT3TABdGbwpGTG4wajzQZB_E.mft (raw, json)
Hash identifier:          EHy5U12Hmy/4Zs53tJGekq4a/5dQZxXEyQ1UdUkOHzQ=
Subject key identifier:   42:3D:07:E2:4A:DB:F4:6A:F5:C7:4E:BC:29:3D:F0:80:E9:81:D6:AA
Authority key identifier: AD:EA:6F:4F:74:C0:05:D1:9B:C2:91:93:1B:8C:1A:8F:34:19:07:F1
Certificate issuer:       /CN=A91281AC/serialNumber=ADEA6F4F74C005D19BC291931B8C1A8F341907F1
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.mft
Manifest number:          49
Signing time:             Fri 25 Sep 2026 08:29:42 +0000
Manifest this update:     Fri 25 Sep 2026 08:29:41 +0000
Manifest next update:     Fri 02 Oct 2026 08:29:41 +0000
Files and hashes:         1: repvT3TABdGbwpGTG4wajzQZB_E.crl (hash: whT7PexllkCjNtlKPYn98hPhzP0QoDXnO+hmeTxiCXw=)
                          2: 095A900E485E11F19C8E7347A2833773.roa (hash: i0zNc9repKF5CGp6D95VSysFWBtQLS/5goar7nKkzq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.crl
                          rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91281AC, serialNumber=ADEA6F4F74C005D19BC291931B8C1A8F341907F1
        Validity
            Not Before: Sep 25 08:29:41 2026 GMT
            Not After : Oct  2 08:29:41 2026 GMT
        Subject: CN=6ab630f6-9326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:e5:e1:0d:0b:b1:47:e1:d3:28:b4:f2:9f:
                    e7:73:b4:40:91:7b:e1:f9:93:7f:55:0d:a8:f7:af:
                    aa:23:f7:3a:69:fc:2a:05:77:ac:b2:d0:4b:3a:50:
                    68:75:1a:f6:f8:ce:60:2f:54:7e:c6:59:24:4f:6d:
                    62:74:5b:e1:f7:9c:4a:ad:7f:2f:f2:af:14:de:b5:
                    dc:a7:32:f7:d0:35:d1:a3:08:75:39:96:01:1e:cd:
                    b3:14:97:92:e8:0d:a8:a1:21:57:9c:0d:00:42:44:
                    de:3d:9e:98:f1:96:63:38:00:de:b0:2e:3a:63:f2:
                    45:27:da:91:6f:de:6b:60:87:53:51:c8:71:41:d4:
                    3c:4a:6f:3a:73:14:50:f1:dc:ff:54:90:af:ae:1e:
                    8a:ad:d3:03:4c:6f:f9:ee:cc:d3:95:ee:41:8c:9f:
                    04:f4:c9:57:ce:b2:9a:76:4f:cd:30:93:d7:f0:75:
                    d3:82:e2:be:c1:19:e8:e7:77:93:06:16:1f:bf:d3:
                    57:f3:b9:a6:63:96:f7:58:fc:d7:e6:02:bf:49:1b:
                    13:b6:a4:92:d9:83:6c:2f:d4:ed:ce:6c:22:53:53:
                    91:06:96:75:35:18:8f:66:cd:49:b0:81:45:57:d6:
                    50:0d:4b:02:4b:38:88:cb:07:d0:11:bc:a0:f8:91:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:07:E2:4A:DB:F4:6A:F5:C7:4E:BC:29:3D:F0:80:E9:81:D6:AA
            X509v3 Authority Key Identifier:
                keyid:AD:EA:6F:4F:74:C0:05:D1:9B:C2:91:93:1B:8C:1A:8F:34:19:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/repvT3TABdGbwpGTG4wajzQZB_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281AC/563CE85A485D11F1BDBD021CA2833773/repvT3TABdGbwpGTG4wajzQZB_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:70:7d:c7:a8:f8:c4:e9:ac:ec:a5:7b:09:47:37:a9:49:4d:
         ea:ad:4d:85:96:be:93:d8:9a:00:6e:a7:65:6b:d1:ad:64:f9:
         76:89:fc:cc:cd:86:8b:cd:e4:39:3f:3f:29:e7:0f:ef:13:d9:
         bb:5c:26:e1:ea:b9:e3:eb:88:aa:d7:8e:08:8a:d7:db:51:4f:
         79:a8:db:4a:51:8a:1b:ed:a8:0c:c7:6c:bc:4d:1e:9e:d0:67:
         ee:2b:15:d7:9f:bb:91:88:0e:d6:f1:a2:36:1c:31:00:88:d1:
         c6:2a:ab:4c:11:2a:63:40:31:b5:51:8f:be:9d:98:a0:b4:34:
         c4:53:e7:fd:50:81:69:98:3b:0b:aa:b0:86:e7:99:fb:cd:8e:
         43:ef:e4:ad:60:58:b8:93:75:2b:41:44:44:15:5f:65:e5:c6:
         6b:ca:70:7c:77:12:ba:28:ba:19:59:ef:a7:24:aa:21:ec:34:
         63:40:ca:96:aa:9c:2a:e4:42:c3:ba:27:a2:77:8e:b4:f6:76:
         93:a8:86:d4:29:9b:f1:32:e9:39:f9:b2:42:52:9d:18:f8:0c:
         94:b0:36:98:05:f9:27:9c:36:51:1f:1d:0e:c6:1d:0b:00:fd:
         45:96:e3:e1:9c:3b:33:7b:6e:89:d8:0f:15:4e:9e:c9:18:9c:
         4f:98:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:06:04 2026 by rpki-client