Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File:                     szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier:          pid8bueocu1HLdLRsqOCDX2V33qujEAZUvwVRgTNwDM=
Subject key identifier:   CB:A4:83:87:DA:0A:92:87:0D:0A:F9:8C:B1:D7:86:D9:F7:77:ED:56
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer:       /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number:          8A
Signing time:             Wed 23 Sep 2026 07:19:53 +0000
Manifest this update:     Wed 23 Sep 2026 07:19:53 +0000
Manifest next update:     Wed 30 Sep 2026 07:19:53 +0000
Files and hashes:         1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: a+yRMzj63ev/gGGGOUX4gPx8f9L+lVPzrkYUY49uCLY=)
                          2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
        Validity
            Not Before: Sep 23 07:19:53 2026 GMT
            Not After : Sep 30 07:19:53 2026 GMT
        Subject: CN=6ab37d99-0c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:4f:ba:f3:cc:cf:3e:9a:ae:39:e0:52:47:
                    00:ee:7c:50:85:e5:ec:e3:12:2a:05:3a:1b:32:f4:
                    1d:18:d6:57:cd:3f:ed:7c:9c:7d:8f:d8:b1:53:9d:
                    b8:3d:8b:66:57:96:99:ed:39:6b:f4:24:78:ee:fe:
                    2e:43:a2:56:58:11:80:fd:8c:e3:b3:26:b7:87:bb:
                    cf:38:82:42:33:84:71:b8:a5:94:cd:d5:0d:7b:28:
                    4d:8d:76:6f:b5:a9:8e:ff:18:07:20:c5:db:36:14:
                    2c:f1:92:bb:a7:ff:d6:c7:47:ea:90:2b:d4:be:75:
                    06:b6:e9:7f:eb:ea:d6:5c:61:39:3b:65:fa:d1:99:
                    61:d3:89:75:1c:7a:09:a1:5f:90:5a:62:21:be:6e:
                    e8:63:8e:30:a4:e4:be:85:84:b0:68:95:cd:1d:54:
                    b7:e3:6e:dd:4e:21:c5:b4:e5:75:97:76:6e:40:c8:
                    1c:8d:ae:53:03:5d:3b:9d:bb:fc:d4:2c:ce:f8:d9:
                    c0:57:cf:2c:a9:bd:30:e1:db:74:57:b3:c9:36:10:
                    25:f2:29:3e:91:6c:db:75:cc:2a:1e:79:18:35:31:
                    76:d5:77:31:a6:00:9d:0c:46:1c:94:ce:cd:5a:34:
                    b0:3f:62:9b:59:7b:87:01:1a:9b:2b:f0:05:38:4e:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:83:87:DA:0A:92:87:0D:0A:F9:8C:B1:D7:86:D9:F7:77:ED:56
            X509v3 Authority Key Identifier:
                keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:86:3a:7c:64:86:cf:16:6a:fa:13:14:00:07:73:52:c6:e2:
         e7:09:a6:13:09:0f:4c:83:9a:27:f3:fe:c9:30:6e:ae:b4:de:
         7c:e6:3c:50:da:32:fe:9e:94:32:b4:98:40:c6:85:8d:70:56:
         fb:32:b9:57:aa:81:47:c6:08:dd:c1:22:bd:e7:c7:f0:51:2d:
         f0:8b:1d:3c:96:20:eb:88:f1:d1:01:4b:d2:9c:e2:7e:8f:75:
         52:49:ee:a3:73:87:2e:d2:29:b8:ef:12:3c:cf:03:f7:75:4e:
         be:11:ed:05:5a:4f:a9:c5:f1:a1:37:62:14:d3:b3:10:b2:73:
         60:7a:1d:6c:58:71:cc:b3:3e:02:24:5d:75:a1:a8:f3:aa:c8:
         52:52:c0:a8:29:f9:1b:d3:31:57:ba:0f:a3:09:25:85:bc:da:
         c8:00:00:dc:04:5b:41:f1:81:74:01:d0:6e:af:96:94:49:34:
         94:79:c4:53:dc:bb:6f:87:97:c0:28:2e:74:e4:d6:f0:57:09:
         22:c0:f7:5a:0a:f0:01:0f:02:37:b7:2b:3e:4e:ae:ab:f8:46:
         76:22:19:27:14:31:1b:f9:82:04:2d:a0:4d:58:44:20:42:87:
         c5:d7:4a:74:8b:20:2f:e8:87:35:34:13:73:9a:e5:c2:63:31:
         40:a0:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:44:33 2026 by rpki-client