Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File:                     AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier:          w66saX3eWxEc2i/sD00upsB1SASoXoBFnde08imw89M=
Subject key identifier:   58:6F:99:EA:A3:3B:6C:8B:59:7D:2A:E3:B1:C5:8F:A5:44:87:0B:A5
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer:       /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial:       0C4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number:          0C42
Signing time:             Tue 22 Sep 2026 18:36:08 +0000
Manifest this update:     Tue 22 Sep 2026 18:36:08 +0000
Manifest next update:     Tue 29 Sep 2026 18:36:08 +0000
Files and hashes:         1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: kBwcI0fSvOeGQqu8RWnQnnzgOZeVP4+rgs1LBSC56Hc=)
                          2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: jQEsRXKGQd/Fm36zrxqAJNpuT36PbNJ9lnCBkWVizjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
                          rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3150 (0xc4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
        Validity
            Not Before: Sep 22 18:36:08 2026 GMT
            Not After : Sep 29 18:36:08 2026 GMT
        Subject: CN=6ab2ca98-5c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:14:88:38:43:2f:49:ff:ad:34:00:2c:75:
                    ab:5d:db:b0:97:68:ac:81:6c:70:cc:bb:8e:8d:1f:
                    ef:b2:1f:b0:75:28:b7:e0:88:f9:86:9d:a7:33:f5:
                    3a:59:e0:f3:02:ab:11:e5:cb:9f:7d:10:be:35:b5:
                    29:ab:12:e1:46:33:b7:a4:6d:2b:9c:19:59:37:60:
                    46:34:cb:49:90:6e:ad:2e:8d:e0:5b:6b:41:39:51:
                    1d:d5:cf:36:ad:85:4b:d0:d7:a6:e5:4b:ad:88:13:
                    00:3c:c7:47:ba:4d:11:c2:05:97:0e:08:cb:d0:1f:
                    1b:e4:c1:4a:c2:8a:28:b4:9c:cc:47:00:06:c4:88:
                    44:31:89:df:7a:f5:1a:04:f5:a1:0a:d6:8e:58:e2:
                    b5:db:ab:1e:7c:bb:d9:e1:cc:d1:27:9b:84:85:a4:
                    19:3f:ed:c6:23:b3:3c:ff:07:95:7b:17:a4:92:6c:
                    d2:03:bf:8d:cc:8c:04:58:e1:4d:47:36:a8:2d:04:
                    85:24:ff:ca:52:fd:48:8b:f9:f6:76:1d:95:b8:14:
                    8a:ce:74:58:d7:f6:e8:5f:0b:6f:e8:a4:9a:4f:5d:
                    20:e7:07:ed:ee:4c:6e:61:bc:4e:5b:6d:52:39:75:
                    15:67:6f:ff:78:14:6c:d5:e7:72:a6:64:ef:1d:e4:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6F:99:EA:A3:3B:6C:8B:59:7D:2A:E3:B1:C5:8F:A5:44:87:0B:A5
            X509v3 Authority Key Identifier:
                keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:06:82:37:c5:a5:34:cd:b2:74:0d:13:29:1c:c2:ef:85:
         35:63:31:f5:a1:29:aa:8f:5b:a8:01:55:fb:6f:ed:c3:f7:75:
         16:39:6a:93:85:c8:08:98:09:72:8d:77:1e:88:31:fc:52:64:
         2e:84:1e:e6:d5:6b:ab:02:1e:83:7b:0c:89:b6:48:71:86:8f:
         74:72:09:1c:52:15:ad:fe:db:42:c7:94:b5:a0:60:95:a7:fe:
         49:ea:58:20:0e:41:57:7a:a2:02:85:4b:aa:73:ef:4a:8a:4b:
         ef:3f:10:ed:0a:92:cc:bc:82:56:90:11:03:2a:76:55:c9:6d:
         b8:5d:28:e8:af:d2:85:54:7e:ad:b3:10:d8:29:ec:08:e5:f5:
         b1:cf:ee:a8:40:13:e8:1b:ed:6e:c9:ac:6f:c2:44:f1:72:31:
         07:b7:a7:8c:03:84:d5:05:f4:74:70:54:58:4b:00:94:22:8b:
         1d:9f:14:38:a7:f4:5b:0a:7b:1c:50:f7:6c:f6:9c:0d:d4:ca:
         c9:98:79:f0:a6:48:1d:b4:40:56:cc:85:a7:f7:dc:5f:12:6e:
         5d:20:0e:a7:60:26:22:5f:4a:be:db:f2:5b:67:29:4e:16:c4:
         42:fe:f5:af:95:c3:35:2f:09:ca:e0:2e:f5:a9:63:7a:4d:f4:
         ad:d6:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:15:15 2026 by rpki-client