Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
File:                     9ouGJos33oELlo2481f3c-mDv20.mft (raw, json)
Hash identifier:          42aU2s7X0SPvnjhDDuGffa5JH6+sztZ2Ov4PYiyajzY=
Subject key identifier:   7C:99:E9:14:89:09:64:95:1D:9B:86:7E:EE:6A:F5:A5:8E:62:DE:82
Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D
Certificate issuer:       /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
Certificate serial:       0B86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
Manifest number:          0B72
Signing time:             Thu 24 Sep 2026 19:07:06 +0000
Manifest this update:     Thu 24 Sep 2026 19:07:05 +0000
Manifest next update:     Thu 01 Oct 2026 19:07:05 +0000
Files and hashes:         1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: NgutZ5ppelSt27yJknaRck+Ah8ukOcLefKElmSvXxsA=)
                          2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: 42wD4o8ukZc0bRw+aOjIGYt3IYx9FA2BvlwiwXhrn6s=)
                          3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: 08g4OPklUHVULEUELGzxteax8eXWgqhM63vO17HquiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl
                          rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2950 (0xb86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
        Validity
            Not Before: Sep 24 19:07:05 2026 GMT
            Not After : Oct  1 19:07:05 2026 GMT
        Subject: CN=6ab574da-23c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:57:ec:14:ab:72:81:eb:88:07:4d:c2:b3:
                    68:03:9a:55:92:20:0e:a3:f2:f2:c3:1f:1e:72:9f:
                    b6:e2:0a:7c:3d:6d:5a:56:86:b6:20:4e:5d:11:01:
                    95:ad:01:83:86:f9:10:a4:6f:e6:d1:5d:fa:31:de:
                    b3:62:75:8f:d6:42:7a:52:ba:7e:a3:6d:80:34:54:
                    4e:dc:60:ef:56:20:b3:cb:86:9d:77:2f:2e:cb:02:
                    86:3b:c1:32:64:67:ef:90:de:b3:1d:32:ba:a3:e3:
                    52:60:57:e7:39:36:e8:37:eb:c7:95:fd:b3:ae:b2:
                    f8:b8:87:d1:64:55:f2:93:06:4a:2d:1c:f4:80:4f:
                    ca:e7:a2:ce:80:3b:7b:a6:31:f0:f7:d3:bc:9e:43:
                    5d:31:88:d2:b2:75:af:5c:00:2f:20:10:0d:5a:7f:
                    d1:98:a3:28:87:99:d1:e8:dc:12:c8:8c:9d:e2:dc:
                    c4:bd:7d:78:5b:19:e6:d1:6a:8e:13:27:e1:f3:63:
                    6b:e0:5a:4b:51:a5:3a:f1:8b:d3:36:93:c2:13:86:
                    85:50:c5:28:a0:66:8d:54:a5:6e:7a:8c:3d:89:03:
                    6c:de:6c:ef:4d:a3:6b:cf:18:57:d0:cd:02:e1:e5:
                    79:94:84:e9:b1:22:81:51:7d:98:97:cf:9d:b0:02:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:E9:14:89:09:64:95:1D:9B:86:7E:EE:6A:F5:A5:8E:62:DE:82
            X509v3 Authority Key Identifier:
                keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:6a:89:38:d9:85:52:69:2d:a8:ae:5c:44:e3:0d:d5:c6:
         5b:4a:1e:26:0c:2f:0a:84:5f:32:aa:2e:a2:b8:c7:fe:dc:0f:
         a6:c0:6c:8d:0b:22:df:df:dd:0f:f1:c9:d3:6e:8b:24:c7:bd:
         13:53:df:74:a5:e9:f5:7c:1d:08:01:f6:73:d5:a7:18:9c:47:
         b7:b2:91:a0:f3:e4:af:98:80:af:09:51:2f:c6:17:78:bd:4f:
         74:86:76:44:ec:ed:a1:ad:45:ba:92:53:ac:13:8a:be:ff:9a:
         28:3b:f4:eb:d9:91:e1:08:fd:75:60:2a:bb:ef:50:7d:fd:c3:
         79:84:61:62:4e:75:07:a9:1b:38:b6:b4:ea:6c:f1:26:f8:08:
         a9:db:a8:69:ee:0a:e2:d6:5e:a1:53:95:a8:9d:f5:4e:75:a4:
         44:97:16:b1:76:90:b6:4e:50:c6:39:65:fd:1e:e5:94:60:a3:
         94:4e:32:16:82:9c:00:62:09:59:27:61:4a:38:06:f9:f9:ac:
         dc:84:ac:1c:b4:2c:41:e5:f0:38:0c:e2:c3:ec:cf:56:87:7d:
         b3:d2:12:46:31:8f:ea:16:90:05:3d:41:88:d5:49:40:7a:fd:
         2a:28:52:1e:fa:d6:ab:e7:6b:29:fe:eb:e6:75:30:9b:36:bc:
         5e:0b:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:55 2026 by rpki-client