Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
File:                     loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json)
Hash identifier:          8opvJ/oQ9GLTQRHmSup1BUjnkVl4cgFEVhcwe5Cqfxc=
Subject key identifier:   1D:ED:DB:FE:0A:91:5E:E4:1C:51:B1:B2:D7:81:DB:DB:8F:66:1D:98
Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
Certificate issuer:       /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
Manifest number:          038B
Signing time:             Fri 25 Sep 2026 00:36:30 +0000
Manifest this update:     Fri 25 Sep 2026 00:36:29 +0000
Manifest next update:     Fri 02 Oct 2026 00:36:29 +0000
Files and hashes:         1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: Agmjez0l8yES4hlI/z3boEdcfApdVVIT7txqPvKS1HE=)
                          2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: vDY7lV8edjns4HhVnBehxYGRkX0r+4hBoe2Cr3cXbqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
        Validity
            Not Before: Sep 25 00:36:29 2026 GMT
            Not After : Oct  2 00:36:29 2026 GMT
        Subject: CN=6ab5c20d-10f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:81:45:8d:31:2e:5a:df:47:4e:72:49:8d:
                    b3:8f:f5:fb:e2:b9:37:40:dc:8b:f5:b0:d4:6b:f3:
                    73:25:82:1a:e0:63:04:d0:65:5d:b2:d1:2a:0c:ba:
                    3f:a3:41:92:95:87:49:4f:4e:97:00:4f:4e:cf:e0:
                    31:7f:74:47:2b:b2:be:15:ce:dc:4e:eb:d8:b5:b6:
                    dd:b2:2a:49:04:40:5b:86:1c:3f:ea:b1:06:c4:c4:
                    70:2e:18:fd:46:49:f1:29:74:48:96:59:4b:61:42:
                    bf:50:51:6b:9f:50:92:89:1b:68:8d:f9:d1:10:ae:
                    7c:39:83:d7:83:2d:be:87:e9:66:d7:2a:36:cb:9f:
                    60:b9:5d:ae:04:8f:bc:3d:a5:e9:87:2c:56:0b:25:
                    de:5f:39:77:88:6f:2b:45:23:73:ba:6b:db:7a:4c:
                    7d:15:97:d3:10:44:48:1a:a1:f4:89:b3:18:90:89:
                    5f:e4:33:8e:9e:d6:9a:c7:43:d2:d2:78:b3:c2:6f:
                    b4:47:5e:7a:ca:de:57:81:60:f0:68:28:1e:7e:33:
                    4a:cb:19:8b:5b:1e:08:53:4a:78:10:39:75:8c:25:
                    15:08:6f:b0:36:b7:e1:5c:86:47:53:4e:6a:3f:28:
                    a6:aa:54:dd:d3:c4:dd:b7:11:e0:e2:ce:ff:7a:e4:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:DB:FE:0A:91:5E:E4:1C:51:B1:B2:D7:81:DB:DB:8F:66:1D:98
            X509v3 Authority Key Identifier:
                keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:1f:9f:ad:8a:e9:43:9a:c2:c6:65:00:ac:a7:b7:3b:3b:c3:
         20:05:87:74:e9:b1:83:f6:89:3b:e0:16:c6:84:c3:3c:18:0b:
         38:e4:6d:45:9b:e1:24:8c:d2:84:b7:ff:db:fe:26:25:0b:33:
         d1:bd:32:c1:94:00:ac:5c:33:f4:b9:66:05:73:f5:11:47:31:
         34:a2:1f:64:fd:03:2a:73:c5:78:8e:79:05:7f:13:fd:d7:6b:
         5d:85:b3:7e:fb:b4:6b:ed:c3:6d:ae:80:16:bd:59:eb:0b:c7:
         11:09:0b:c8:1e:30:40:16:5c:59:2c:82:67:2a:ff:8b:f2:bd:
         65:3c:58:fd:9d:ff:17:bc:c6:37:ff:9a:dd:4f:36:bf:97:88:
         3b:84:b0:64:97:49:21:19:1c:66:3a:d0:38:cb:2e:1e:56:db:
         1f:67:c4:5b:ea:7c:5e:e9:0e:f2:05:88:64:6d:02:68:d2:d7:
         90:29:30:04:4e:66:0d:27:1e:5b:60:51:4c:76:17:07:fc:da:
         e8:0d:5c:be:c2:9d:37:a7:61:4f:ed:3f:f9:b1:7d:10:8e:e2:
         b9:a3:8e:c2:19:9d:2b:d4:d4:0d:77:8b:06:c3:a8:3d:1b:ff:
         41:ea:9f:f9:4a:85:9b:5b:6a:d0:e9:a6:e7:9e:98:b5:fd:b9:
         8c:cc:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:07:47 2026 by rpki-client