Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File:                     2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier:          6Xw1iex+m3ZumYq7o6WaYBwOu/IjLEV6X14Tp3xjzmY=
Subject key identifier:   D0:BB:F9:18:E0:AA:1D:F0:F2:AE:55:AA:27:78:06:DE:51:B3:EF:50
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer:       /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number:          033A
Signing time:             Fri 25 Sep 2026 00:49:26 +0000
Manifest this update:     Fri 25 Sep 2026 00:49:26 +0000
Manifest next update:     Fri 02 Oct 2026 00:49:26 +0000
Files and hashes:         1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: lhzq251A1uK91ODj7aXlv0y6T7yP1yjzNxqNFcBzil4=)
                          2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: tluEXRfv1yfj6g2yuqwe5cSshlgt2BkkJs3C6pzFBNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
                          rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
        Validity
            Not Before: Sep 25 00:49:26 2026 GMT
            Not After : Oct  2 00:49:26 2026 GMT
        Subject: CN=6ab5c516-25be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:7f:62:dd:cb:95:e5:3b:e0:94:0a:7e:84:
                    bd:8d:c6:ed:05:66:5f:6c:ec:39:7e:1a:50:1b:b2:
                    6f:57:e8:a8:8e:cc:c2:99:51:ce:a5:27:3f:e1:db:
                    e7:d3:97:bb:28:5c:7c:e4:5f:9f:bb:f8:91:a8:ab:
                    58:2b:a0:a1:49:9d:b9:08:d1:00:5c:9a:9f:c1:a0:
                    e3:d3:9d:c4:19:73:8a:e1:01:5e:50:e5:23:01:03:
                    89:6f:71:6e:bf:7c:fc:99:99:11:8c:0e:46:8e:d9:
                    d0:fc:48:1a:ab:10:be:28:ac:42:f0:6a:ba:7e:4b:
                    eb:2b:c7:1d:b0:7a:06:b2:87:f0:7f:7d:a8:ba:6d:
                    28:51:19:97:ed:7c:34:a4:ea:f1:c8:8e:07:6b:3d:
                    24:57:2c:e6:db:2f:28:96:65:79:ac:a1:22:b7:89:
                    be:d0:00:7c:aa:5f:a6:b2:17:fa:bf:54:66:8f:76:
                    97:8a:8d:f2:84:ab:a0:3f:cb:f6:97:e6:10:3e:b2:
                    f8:d9:56:8b:70:d9:f7:4f:cd:df:ea:41:a5:dc:3d:
                    2b:d5:a4:35:37:ba:34:2b:59:6f:b3:2c:0d:7b:98:
                    6f:b9:2b:f8:78:14:ba:72:b6:b4:b7:03:68:49:c4:
                    42:71:f3:e0:ee:6c:54:eb:01:58:e0:e7:2e:71:aa:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:F9:18:E0:AA:1D:F0:F2:AE:55:AA:27:78:06:DE:51:B3:EF:50
            X509v3 Authority Key Identifier:
                keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:cc:c8:ed:99:d0:a3:16:1b:03:bc:16:7f:75:9e:b1:55:
         ba:80:ba:05:4d:44:27:0d:e6:86:b5:f8:69:9c:3e:30:50:c4:
         c4:b8:9f:96:fb:24:51:f9:1c:fc:8a:ff:8c:76:e9:6c:9c:20:
         46:41:a2:06:89:b8:48:97:d4:35:e2:8f:1f:cd:71:0a:93:0b:
         8a:11:67:8b:6f:5e:84:0e:89:db:97:e7:ae:25:e7:cc:8d:d4:
         37:4a:c7:a1:2c:a0:e9:90:58:88:0b:95:50:9d:ad:88:01:b5:
         05:c2:d1:50:58:c5:29:e5:17:b0:c8:69:f2:19:05:da:9f:51:
         00:04:68:32:e0:ba:2b:34:05:97:eb:ec:e7:c5:bc:40:4f:2f:
         c0:f4:b3:f3:af:7f:02:da:bf:41:7e:d4:a9:5e:ba:1c:7b:40:
         22:4b:cc:4a:11:cd:e4:8e:be:c4:ed:7b:d0:e3:04:2d:de:ef:
         56:60:15:1e:96:78:82:17:25:aa:a5:81:92:c9:d5:7f:3f:42:
         6c:c6:51:83:b6:6d:68:47:32:4b:ad:c5:86:be:09:c0:13:8f:
         70:92:cb:bc:8e:a4:9e:53:e9:0e:7c:ee:69:61:fd:2b:6c:60:
         df:67:cc:37:b1:49:45:a7:6c:53:a1:25:9f:82:e8:d4:26:4b:
         f7:f4:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:12:25 2026 by rpki-client