Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File:                     -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier:          a5EgiO7PT2NjzOhv6ZG2PTXO34cyu9P8cB0F7Drh4Zg=
Subject key identifier:   DC:61:B1:5E:63:92:75:D3:84:91:0F:4C:35:53:F0:B3:FD:3F:7B:98
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer:       /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number:          A5
Signing time:             Wed 23 Sep 2026 07:06:42 +0000
Manifest this update:     Wed 23 Sep 2026 07:06:42 +0000
Manifest next update:     Wed 30 Sep 2026 07:06:42 +0000
Files and hashes:         1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: iCgO83IwzvU0TaDxSIvZKWjIM4iycS8xaDaDK5SaHzA=)
                          2: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: m293MzTEWZiAF5PWcB1uJIBFUz6Ip96TCnY4Lfwrt54=)
                          3: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: dBp1q9iBhNYg20l9RVe8ZORxX8RfsfInEVB0fEU3OIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
                          rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
        Validity
            Not Before: Sep 23 07:06:42 2026 GMT
            Not After : Sep 30 07:06:42 2026 GMT
        Subject: CN=6ab37a82-a2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:76:7f:63:2d:3f:98:95:22:b2:27:21:5b:
                    9f:8d:46:95:a1:9e:ab:43:5c:f9:eb:8b:f8:4d:e8:
                    c6:07:ee:12:30:21:23:58:63:c5:4f:45:76:be:51:
                    1b:81:f6:77:b9:ce:c6:38:8c:4d:c5:3e:40:e8:b4:
                    9c:a3:f7:93:46:e5:f2:68:b9:28:1e:a8:1a:9a:96:
                    20:9c:03:b2:6b:c8:96:6f:52:57:23:f1:c8:dc:1f:
                    ee:21:ec:96:fa:c9:0e:2a:9a:91:cc:51:e6:a1:fc:
                    25:9d:fe:7c:aa:43:62:58:67:3d:4d:57:f6:69:08:
                    c2:7c:09:bd:6e:2e:89:cc:13:d7:30:2d:e6:46:86:
                    06:29:7e:b3:35:a1:48:3e:59:45:3c:d3:a4:fb:e8:
                    05:22:cc:b4:c1:35:68:ba:be:9e:ea:0d:96:19:ea:
                    de:4a:86:96:7a:97:cd:90:54:2e:52:fe:79:aa:22:
                    55:d2:f3:40:46:39:60:b2:d4:85:2a:37:a9:1e:18:
                    8a:82:b1:89:d9:b1:4d:62:f7:0a:d4:1d:0f:18:18:
                    fb:42:dc:fd:1b:c8:b1:08:62:aa:77:c4:84:8f:c1:
                    7d:3e:14:99:ea:f1:33:3a:8d:45:8b:b7:45:e7:ba:
                    53:d2:e0:c3:74:86:28:e9:f7:29:e6:79:40:15:b9:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:B1:5E:63:92:75:D3:84:91:0F:4C:35:53:F0:B3:FD:3F:7B:98
            X509v3 Authority Key Identifier:
                keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:c9:f6:08:90:68:5e:c6:79:9b:d1:61:28:31:69:23:7f:
         dc:ec:d1:af:86:04:ab:c7:89:d9:95:3b:2f:26:99:6b:78:70:
         0d:ff:4a:49:73:7c:49:f7:92:a3:92:a1:68:22:f6:1f:3e:7b:
         04:a4:64:ce:f3:99:99:ac:c8:6e:67:8b:3e:31:46:55:c5:04:
         6e:2e:dd:06:8b:7d:f0:15:13:fb:fb:e4:ab:97:d1:87:0e:95:
         64:a2:fd:aa:11:ea:9d:72:34:ef:72:60:50:7b:2a:03:24:df:
         23:8b:12:af:90:ba:7b:be:91:3a:28:1a:9c:48:4e:46:f3:9d:
         b8:7a:e4:ba:f3:86:75:7e:75:de:b7:1e:1b:6f:9f:e9:6d:ea:
         7a:57:f0:1f:60:a7:a0:87:d6:3b:90:c4:87:05:09:8b:1b:f2:
         a8:e4:5b:2f:d4:ba:5a:a3:62:1c:85:9b:f3:6a:fe:46:16:35:
         74:24:81:1f:4c:37:4e:2d:5d:cf:ed:ec:e8:fa:b3:1a:d8:c8:
         0f:2d:d3:53:0f:da:0a:6f:89:6d:32:30:6d:fd:9a:44:b8:d1:
         1c:67:fd:3d:b2:3f:ed:0f:5e:48:f6:00:fe:3f:7a:fa:fc:8b:
         21:89:a7:54:04:b6:ed:5a:a4:cb:fb:0e:ce:c0:87:79:e4:fe:
         16:59:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:55 2026 by rpki-client