Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier:          NjADF7uWUc0LhfMDpObSOFzyJ4x+6K0tw60ip7txu5o=
Subject key identifier:   FD:E7:5E:1F:2A:7A:A2:EE:E6:AA:4E:77:94:4C:1C:A0:9A:C4:C3:F0
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer:       /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial:       1000
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number:          2E89
Signing time:             Mon 28 Sep 2026 16:46:15 +0000
Manifest this update:     Mon 28 Sep 2026 16:46:14 +0000
Manifest next update:     Mon 05 Oct 2026 16:46:14 +0000
Files and hashes:         1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: j7KmdF/uSjNTWBVQU970/z6diq9l0hMZ+QH9jgIP/NA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 16:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4096 (0x1000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Validity
            Not Before: Sep 28 16:46:14 2026 GMT
            Not After : Oct  5 16:46:14 2026 GMT
        Subject: CN=6aba99d7-ed86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:72:85:b5:8e:b3:0b:38:24:f0:16:fa:a9:
                    c0:31:05:1d:ac:b2:f0:df:a2:3b:73:64:81:75:ee:
                    66:28:a4:bb:c7:fc:cd:cd:2a:a5:e6:3c:a1:da:60:
                    28:0f:15:cd:93:dd:88:4d:ca:fe:7b:1f:10:c0:62:
                    6e:5e:ac:04:69:6c:11:05:1d:cd:c7:d6:8b:80:22:
                    38:cd:9e:e1:7a:fe:af:58:9d:61:d6:48:5e:0e:b8:
                    9a:98:2b:d7:0a:f7:22:64:b4:93:8d:bb:09:d7:ac:
                    7f:25:f6:2e:fb:80:1b:8f:cf:6e:46:cb:6b:bd:2b:
                    7c:67:88:0c:9d:7f:cf:fd:b2:bb:42:47:d0:41:d5:
                    f4:ec:15:8d:12:eb:d8:8c:60:85:66:6b:ed:2e:bf:
                    59:96:04:9d:49:6c:80:9d:52:93:12:22:33:29:5e:
                    6e:b6:b2:3f:2f:b3:4b:26:1a:33:f4:95:5d:ab:82:
                    e3:04:da:20:a8:5e:32:ba:19:84:33:d6:78:df:00:
                    4f:8e:2c:9f:f9:8f:ec:ca:97:e5:f2:01:2c:20:21:
                    82:35:84:81:50:2b:dc:aa:0a:cb:d0:12:2e:01:6a:
                    5d:36:7a:16:95:b4:80:90:ba:56:84:7e:25:ff:e0:
                    61:50:ad:7e:80:07:53:fe:4c:aa:ad:f4:aa:58:14:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:5E:1F:2A:7A:A2:EE:E6:AA:4E:77:94:4C:1C:A0:9A:C4:C3:F0
            X509v3 Authority Key Identifier:
                keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:b6:8a:9d:21:85:ec:76:43:1c:fc:9d:de:62:00:e7:a7:
         5d:a1:07:a9:f1:73:7a:fc:cd:0e:cb:ce:39:4a:41:9c:37:0d:
         70:dc:d0:a7:20:f5:82:18:b1:7d:d6:95:f5:a5:35:50:73:c2:
         0b:95:5a:81:40:ad:e0:63:62:ab:14:b6:fe:a5:67:8f:17:b4:
         92:1a:64:8c:5f:8e:5e:8a:b6:e2:53:fc:6f:ad:93:28:fc:8d:
         73:b9:d7:2e:7b:05:92:00:ab:3b:d0:82:d9:d8:63:89:ae:ca:
         96:57:07:64:d4:fc:a5:e9:70:98:3c:a4:64:e2:14:8f:c4:5c:
         d6:dd:39:ff:76:ea:f7:f3:75:73:90:1c:82:d9:14:3a:75:ed:
         54:59:4f:0f:f6:8e:4c:fa:8a:eb:59:a5:5a:1a:6d:d1:95:a0:
         03:f5:a1:30:6c:a2:cc:92:ef:8e:7c:4b:bc:30:9d:62:cf:78:
         80:b1:3e:ea:99:0f:12:4e:da:c4:d5:6a:c5:e2:93:ee:f6:5c:
         50:45:c5:71:8d:2c:84:30:52:88:8a:0f:60:ba:f8:39:9f:31:
         d3:1f:68:fa:b7:43:17:99:59:76:6b:17:e3:20:77:2b:f7:b3:
         32:4a:2c:9d:85:7a:ac:ef:3a:d2:1e:31:44:cc:9b:8d:4f:ec:
         db:01:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:21:41 2026 by rpki-client