Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File:                     dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier:          Ixl/OeGFJGQuYypFrgDFSLWl4vcmR9+NNRUfOnBAzvE=
Subject key identifier:   D5:5E:13:E9:53:BD:A3:19:21:32:4F:AC:67:04:15:C4:07:7A:9C:B8
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       02B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number:          02AA
Signing time:             Fri 25 Sep 2026 01:33:16 +0000
Manifest this update:     Fri 25 Sep 2026 01:33:15 +0000
Manifest next update:     Fri 02 Oct 2026 01:33:15 +0000
Files and hashes:         1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: eNn8uX2kDPNFMQnnblHXWyJODyUSNTmiw+3h88ja1c4=)
                          2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 21k7xo1DVvGDuKsBBbSZADbL50JKJ6QopBZblEvUm/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Sep 25 01:33:15 2026 GMT
            Not After : Oct  2 01:33:15 2026 GMT
        Subject: CN=6ab5cf5b-28f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:2a:c0:f0:89:c5:04:6d:f7:b6:d5:bf:20:
                    79:e8:e6:3b:e0:24:48:ce:92:77:e6:e5:84:60:4b:
                    88:9a:70:c9:ed:1a:aa:15:9b:7d:72:9c:8f:11:e0:
                    29:7b:69:98:c3:50:33:12:7a:6d:d4:48:3d:b7:f8:
                    0d:0f:18:27:d4:a0:b3:f6:2e:37:0e:09:4c:7c:12:
                    71:76:25:3b:ff:79:94:12:38:ed:eb:06:5a:bc:6e:
                    04:e2:45:7d:7c:66:d9:f4:c0:05:42:38:f7:ef:07:
                    64:e9:c1:7b:65:13:7d:84:ad:84:40:d9:45:b2:d3:
                    bd:44:71:89:d6:88:fd:11:7e:c7:45:6c:87:09:8e:
                    cb:97:86:39:24:32:d3:19:35:d2:36:33:e8:0a:09:
                    d9:9e:54:bb:cc:d4:bf:c5:8b:40:b3:b1:cd:92:c0:
                    c0:36:26:b5:d5:a3:a9:c9:9f:7d:c0:4e:dc:48:33:
                    52:b4:85:43:e3:f2:a9:64:6a:be:bf:dc:de:fd:13:
                    1f:3f:ab:2a:b9:42:0e:55:45:e7:6d:db:70:20:00:
                    d7:cd:98:9a:3c:13:f0:79:57:48:b0:b1:00:4c:12:
                    bd:05:22:cc:0e:5d:3f:8d:2c:f1:b5:cf:3a:fd:ee:
                    c2:86:c8:6e:5c:59:19:83:f4:83:d0:e9:8f:5e:79:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:13:E9:53:BD:A3:19:21:32:4F:AC:67:04:15:C4:07:7A:9C:B8
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:97:3e:88:57:1e:1d:b2:79:1f:cc:7d:12:0b:f2:ae:de:c2:
         d6:c1:9e:b7:31:40:85:a6:f4:fa:9c:d9:97:93:82:51:10:93:
         0a:19:dc:8a:2e:c3:26:bc:63:0b:f4:40:13:a6:23:be:9e:ed:
         a7:3d:6a:7c:38:d0:91:3b:bd:16:88:c5:7b:93:b8:0b:49:17:
         4d:4c:26:6c:9e:7c:4f:c7:09:25:3d:2f:c9:cc:8a:dd:fe:12:
         0d:52:b7:2a:10:b0:21:71:35:b9:37:bf:e6:62:56:20:d7:78:
         20:57:5a:f0:4f:05:17:b4:48:7e:29:85:49:89:19:7e:54:89:
         3e:5c:72:85:7a:cb:37:27:e1:75:59:d5:53:c9:31:83:d7:30:
         99:20:ba:01:20:d0:06:8d:b7:28:fc:27:6a:66:76:4d:07:ef:
         51:a6:4c:88:4e:53:23:1f:c5:41:a3:35:66:f6:2a:ad:59:0a:
         6a:36:fb:eb:e4:d9:c7:b1:9f:42:f8:fa:27:30:cb:6b:38:e9:
         d1:65:3c:89:07:80:2a:a4:5a:e4:6a:b4:61:b1:52:44:10:51:
         9b:53:92:98:b7:04:6f:c7:a2:7e:0e:96:00:e9:da:5a:96:25:
         6d:25:b2:93:52:23:47:c3:44:be:ea:17:59:e9:09:73:e3:6c:
         3a:ea:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:22:25 2026 by rpki-client