Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
File:                     66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json)
Hash identifier:          GIDdPnSaNvfEMbZYBPdnsZGq/66c/6ImLbhN+Jo/lfk=
Subject key identifier:   A5:A8:BA:24:65:BD:77:6B:53:05:4A:FD:70:5C:94:BE:66:5A:45:61
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Certificate issuer:       /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
Manifest number:          01A9
Signing time:             Fri 25 Sep 2026 04:09:21 +0000
Manifest this update:     Fri 25 Sep 2026 04:09:20 +0000
Manifest next update:     Fri 02 Oct 2026 04:09:20 +0000
Files and hashes:         1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: +WnOmD1TVf5GLlkdw/8/Uc2rRjTK6UEbQh6GNPb6p88=)
                          2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: TP1lZPycmwhzIV9eyCEIRMOWox0jw70KYaYid67Sq48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
        Validity
            Not Before: Sep 25 04:09:20 2026 GMT
            Not After : Oct  2 04:09:20 2026 GMT
        Subject: CN=6ab5f3f0-8d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:56:fd:4e:4e:35:19:1b:73:23:cd:ca:78:
                    aa:5b:51:03:27:66:bc:5a:3b:f3:3f:27:da:5b:ba:
                    45:ff:93:ba:bd:d8:eb:1a:cb:bb:51:c2:e7:05:35:
                    04:af:fe:06:95:66:23:41:ee:0f:76:4a:da:6b:30:
                    84:2b:4b:94:ba:e0:f1:05:c2:2c:d6:4d:07:67:f8:
                    25:21:af:cc:7b:31:69:9a:a7:1e:ef:d9:44:e4:33:
                    f6:3b:b2:28:02:d7:15:24:c8:ac:66:eb:ec:91:de:
                    ac:6a:f8:79:92:13:4f:1e:77:7d:b0:55:27:85:74:
                    ee:05:2a:8c:12:7d:17:0d:9c:9c:da:c9:20:67:b6:
                    74:9c:0b:e4:59:00:f4:0d:28:ce:2e:58:37:7a:a6:
                    21:16:99:30:a5:8b:b8:50:bc:c6:9c:94:17:99:de:
                    27:2c:e0:64:ba:8a:ed:17:1e:5b:24:d3:21:71:18:
                    af:5a:2c:7a:ec:6e:f1:7a:ed:43:12:7f:b2:4f:01:
                    e6:b0:c9:b9:92:6a:53:35:c2:dd:3d:e4:2c:8e:23:
                    dc:b9:b2:85:55:b8:80:a7:5a:bd:d2:fa:44:55:1a:
                    c2:db:28:34:eb:c6:3e:8c:be:76:dc:a5:1b:f6:19:
                    41:75:7d:ff:92:0b:86:8e:23:1c:75:cf:fd:a0:68:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A8:BA:24:65:BD:77:6B:53:05:4A:FD:70:5C:94:BE:66:5A:45:61
            X509v3 Authority Key Identifier:
                keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:55:ba:0b:68:f3:2e:db:c4:4b:72:62:e6:e4:c7:7b:b8:2e:
         c7:d2:e6:b9:03:10:c6:ef:70:37:11:f2:24:e9:c9:54:1e:28:
         d3:d0:34:a3:4d:f5:a7:7b:30:01:fe:15:06:98:7c:d2:da:9d:
         16:c0:f9:b6:a9:51:9b:9a:0c:0c:3a:f1:51:4c:ff:e8:a7:38:
         59:da:d9:44:4d:ae:7f:41:ae:69:c6:15:e4:fc:2c:c5:6c:0e:
         59:9c:52:48:80:b1:76:e5:e3:a1:dd:a5:9a:26:66:10:fb:d7:
         01:ae:ec:ad:f1:f8:52:19:6e:0a:61:57:6f:66:35:47:7c:45:
         53:db:68:99:53:c6:bb:b6:55:3a:fb:93:63:a6:4f:16:c3:ec:
         9a:31:c3:50:99:1d:7c:dc:c5:a5:06:ec:98:be:fe:21:74:de:
         cb:3f:36:18:00:dd:ed:c7:44:8d:b6:2b:bf:97:24:29:8e:e1:
         40:e6:d0:8c:2e:41:fd:24:28:d6:a1:35:fe:9b:d9:29:07:1b:
         6e:63:6d:84:6f:f8:6c:19:8c:c1:87:ff:cb:b4:91:4b:6a:17:
         46:ab:8b:28:c5:9e:12:2e:6b:97:9b:0f:c0:54:a4:81:d4:7c:
         fb:64:a0:41:b0:82:f0:90:7a:f2:a6:56:d4:b8:d5:df:bf:9c:
         cc:7c:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:16:56 2026 by rpki-client