Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
File:                     _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json)
Hash identifier:          tAtnhyDmaMNAz1P4SStunW7oYW61Mhk92InaOYU1ugU=
Subject key identifier:   17:C5:25:61:C7:3A:BD:BC:44:5A:8E:43:29:83:47:5E:E5:2F:02:D7
Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6
Certificate issuer:       /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
Manifest number:          0762
Signing time:             Tue 22 Sep 2026 21:28:12 +0000
Manifest this update:     Tue 22 Sep 2026 21:28:11 +0000
Manifest next update:     Tue 29 Sep 2026 21:28:11 +0000
Files and hashes:         1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: rpal97SkFjPAPO3Pn3Twq7Mu9rYi2RPxK8J4ogX2L6s=)
                          2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: aA6Dw3R9kVAHSoiUlastCf/DMZ8hslWGyzDMB+ksQeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl
                          rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6
        Validity
            Not Before: Sep 22 21:28:11 2026 GMT
            Not After : Sep 29 21:28:11 2026 GMT
        Subject: CN=6ab2f2ec-ea65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:a0:71:29:4f:50:fb:8c:a6:9a:b6:b6:2c:
                    41:14:dd:bd:9f:5d:58:ad:6e:23:a7:a0:33:fe:38:
                    9c:cd:f7:40:45:af:f7:54:94:f5:4d:00:47:e3:b7:
                    54:2a:54:d4:49:6f:34:4b:6b:af:3d:2d:92:e6:97:
                    94:6b:67:27:2a:92:05:ac:26:d3:2e:b8:6f:3a:03:
                    97:d3:44:d3:21:c9:a0:49:1d:ef:65:7c:d1:ef:2a:
                    be:61:bb:d9:aa:bd:57:8c:c8:55:76:7d:04:40:2e:
                    fb:7e:67:47:20:53:ce:a8:8c:1e:59:a4:19:a0:4d:
                    bc:09:6f:a0:f9:51:b3:a6:38:11:ac:a6:22:5c:ed:
                    d8:36:c9:98:cf:a2:54:c5:cd:28:bb:5d:0c:d8:92:
                    e3:e8:e3:1d:80:7f:22:d8:59:e5:b8:e2:13:4c:64:
                    e2:a2:bb:d4:44:5a:95:38:5e:e5:5a:a2:b2:64:11:
                    9b:50:2c:1e:fb:65:78:5b:51:14:f9:4a:d5:31:5c:
                    57:62:5b:af:e1:23:c2:2b:80:40:b4:fe:8f:25:3f:
                    2b:8a:5d:2e:ae:02:39:0a:ee:97:48:4f:23:d8:3a:
                    16:13:d1:cf:15:4e:9c:f4:f9:30:e8:bd:79:3e:97:
                    51:03:79:b0:e9:48:86:80:05:ce:5f:61:8b:c7:1a:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C5:25:61:C7:3A:BD:BC:44:5A:8E:43:29:83:47:5E:E5:2F:02:D7
            X509v3 Authority Key Identifier:
                keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:05:b4:32:92:5d:62:61:8f:7f:1c:5e:df:6f:97:10:11:9e:
         f2:64:66:2a:3e:51:c9:8b:0f:c5:d7:c9:65:cb:2f:ad:30:79:
         58:1d:18:28:1f:9b:75:2b:73:97:b3:e1:71:85:f6:51:64:19:
         de:db:26:33:3e:0d:0e:b7:c8:03:e1:e1:3c:83:07:07:b4:50:
         df:6c:6b:eb:44:c5:68:32:51:ed:8c:b6:ac:7d:df:fd:9d:cf:
         9e:8b:35:3f:7a:b3:95:45:22:f4:3b:2d:9a:09:3c:9a:e2:72:
         d2:c7:b0:c9:f6:8c:c4:d0:c1:d2:02:9a:cc:9d:d9:85:63:33:
         1b:e2:e0:87:65:bd:09:dd:ce:3c:f2:04:e1:20:ab:5f:c7:5b:
         fc:7b:52:8d:cc:98:4d:69:45:37:8d:dc:5e:ac:bf:a5:86:d7:
         13:1c:b1:78:65:71:d7:77:1b:52:b0:d9:73:75:40:f6:42:b8:
         bc:9a:26:07:f4:ae:a3:a3:9d:26:2e:f0:b3:9d:6f:a2:63:27:
         52:09:df:a5:c5:35:03:07:f3:77:61:25:5f:34:99:78:30:1a:
         84:f9:cc:45:5a:e1:52:f8:75:39:41:34:16:d0:0d:e4:0f:1b:
         64:c0:38:8b:9e:45:74:e7:a2:99:6f:4e:e9:d1:dc:63:74:c9:
         2e:2c:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:53:19 2026 by rpki-client