Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File:                     0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier:          ehGvsGU1gsEwE0AqKVZLzOssek5qYJTDiJL4VqvrlFc=
Subject key identifier:   52:98:9E:0E:86:0D:6F:1C:40:6C:10:F2:C7:51:20:B2:47:10:89:CF
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer:       /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number:          029A
Signing time:             Wed 23 Sep 2026 04:09:11 +0000
Manifest this update:     Wed 23 Sep 2026 04:09:11 +0000
Manifest next update:     Wed 30 Sep 2026 04:09:11 +0000
Files and hashes:         1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: KWpetP8WKbT7MoG0ksxJLxxCoKPPvlupkHczNxPDCxs=)
                          2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=)
                          3: Iq213V9poNmimnDJaewA0A7kP2M.asa (hash: 3aVxmTVaoGjTC2fTJCHZyqpyJ2TocfCD5A8GhTzQspY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
                          rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F
        Validity
            Not Before: Sep 23 04:09:11 2026 GMT
            Not After : Sep 30 04:09:11 2026 GMT
        Subject: CN=6ab350e7-a988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:60:b5:fd:ed:13:48:76:af:df:00:5d:b3:
                    f0:a0:c2:36:01:47:8e:37:8f:de:b0:b3:be:31:70:
                    21:d8:4a:5e:ae:d2:b3:94:02:52:98:0a:ae:9d:95:
                    39:20:20:81:22:0e:2c:17:b3:6c:08:9f:b8:02:50:
                    ef:d1:ad:1b:82:52:1f:3c:e7:23:de:4d:b4:20:97:
                    58:81:f0:3c:39:1b:15:0d:95:2a:3d:2f:46:c7:4e:
                    c4:0d:2d:b9:e7:9e:35:58:6d:17:ff:d1:b5:b3:2a:
                    22:53:dc:0c:a1:77:d5:be:f1:36:6e:b1:81:fe:8c:
                    d7:46:4e:09:81:ee:ba:f8:cf:fc:fa:d4:5b:f3:bb:
                    70:a4:7f:cc:df:e5:de:0c:ca:f6:2b:11:92:75:dc:
                    73:f9:83:93:74:8e:12:8c:b7:fd:3e:94:54:ed:f1:
                    8f:d0:09:e1:37:c3:1c:c8:08:c2:f1:07:aa:f8:c9:
                    24:33:1c:73:2a:50:9c:08:9c:f9:e7:c0:20:f6:c9:
                    4a:a4:f8:55:94:e7:b5:97:45:b9:3a:b7:66:8a:5b:
                    6c:81:24:d0:ba:a1:03:e2:44:90:b2:c5:22:f9:5c:
                    17:f3:ee:c1:cd:95:1b:42:35:f8:9d:c1:7f:7b:a2:
                    60:2c:56:8e:af:16:07:40:14:38:e0:5e:57:bd:ba:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:98:9E:0E:86:0D:6F:1C:40:6C:10:F2:C7:51:20:B2:47:10:89:CF
            X509v3 Authority Key Identifier:
                keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:bf:23:d7:a6:88:55:97:36:3d:09:09:37:71:a4:7b:17:
         50:fd:d1:e5:f1:5a:af:43:8c:21:fd:5f:18:c3:04:07:a7:8f:
         85:d9:13:aa:0b:af:14:97:e5:35:32:2c:58:2c:de:8d:30:93:
         36:89:f3:08:76:1c:4d:e0:b6:56:de:f5:a6:38:ce:c5:84:9a:
         36:4d:3b:20:29:f0:97:1f:e3:99:a3:29:bd:47:32:fa:f0:e3:
         99:d2:4b:2e:92:eb:01:42:3b:ae:a3:9e:85:59:7a:b4:80:38:
         98:75:2e:7f:e9:06:4f:c2:ce:ed:dc:aa:98:4f:95:ef:04:17:
         ce:18:27:98:60:4f:3a:e7:e3:d8:eb:ff:29:20:9d:d0:6d:1c:
         e0:17:6a:e8:4b:a4:df:e8:99:ab:7d:76:5f:83:58:ef:74:0d:
         ca:91:07:00:8c:60:7a:ac:b5:11:e0:ab:ad:39:f9:6e:7e:2f:
         8f:8d:89:98:e7:06:7c:f2:e4:30:ca:8a:1d:cb:ea:4e:35:d4:
         7f:6b:ac:86:10:ab:a2:14:fb:91:91:6d:46:fa:7e:65:0f:9d:
         b9:37:c7:05:a7:e2:fe:60:8c:2d:71:7d:b5:64:68:40:bb:f5:
         2e:15:df:0d:f5:7a:75:25:09:a7:12:d2:a5:d0:5f:24:bd:1c:
         23:ee:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:04:20 2026 by rpki-client