Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
File:                     mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json)
Hash identifier:          Q/S6w7F1xUsMabfzcmb9f+eth7BQkyUa6jDU8xxv0W0=
Subject key identifier:   35:38:F0:FD:DC:51:1B:AC:70:4A:D4:E0:9E:01:14:7A:0C:11:E7:51
Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
Certificate issuer:       /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Certificate serial:       0D53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
Manifest number:          0D3F
Signing time:             Thu 24 Sep 2026 18:05:34 +0000
Manifest this update:     Thu 24 Sep 2026 18:05:33 +0000
Manifest next update:     Thu 01 Oct 2026 18:05:33 +0000
Files and hashes:         1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: n13od967Uh9fhCIDvJ19eSxE9NItrp0vKcHobHM7F9M=)
                          2: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: 5533DLwfb8lKEthKaYM52eXd8IKuWbZVPlYIPrgz1MM=)
                          3: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: k6FWo7z/z7knCCQwUtoLy7aSnCm50oMkNhNPz6TXses=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
                          rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
        Validity
            Not Before: Sep 24 18:05:33 2026 GMT
            Not After : Oct  1 18:05:33 2026 GMT
        Subject: CN=6ab5666e-3d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:d3:81:8e:47:75:cd:87:a4:1e:3a:f3:cc:
                    0f:2e:59:d6:78:40:e6:c9:2a:8c:b8:74:5e:8f:98:
                    22:94:98:c4:24:a1:d2:69:f4:de:e0:c4:7e:f3:72:
                    ca:ef:f4:76:ac:96:cf:c5:d7:c7:a2:d2:3d:85:ae:
                    55:8a:c0:47:9f:eb:12:59:8f:95:dc:df:f0:f9:d8:
                    64:12:63:96:4d:7c:56:4f:01:6e:f2:ea:68:6d:ad:
                    30:ef:03:29:bd:a6:e4:7f:5d:f2:e6:c1:d2:f1:db:
                    93:a6:ff:a6:7c:6d:49:d7:4b:7c:fe:85:cf:80:74:
                    91:6e:a5:92:6e:6d:88:e5:4c:f2:9e:77:05:06:7c:
                    05:9f:8e:8f:d0:0b:c9:44:ae:14:03:a2:e4:b7:47:
                    7e:6a:b6:85:6a:a4:f4:8f:fd:34:dc:b7:42:d7:c4:
                    72:de:23:a5:a9:ac:7b:70:0d:bf:37:35:13:d0:ed:
                    11:92:92:b9:75:85:c5:01:8f:0b:99:c5:2e:aa:6b:
                    97:10:9f:4b:9f:10:99:8d:8b:a9:25:35:b3:ef:c9:
                    0e:30:64:aa:11:eb:81:95:84:de:76:bf:fa:20:ac:
                    da:fe:a1:a4:fe:e8:3c:fe:ab:73:18:75:7f:51:6b:
                    b8:52:98:68:af:bd:f2:37:75:8d:d3:59:8f:cc:27:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:38:F0:FD:DC:51:1B:AC:70:4A:D4:E0:9E:01:14:7A:0C:11:E7:51
            X509v3 Authority Key Identifier:
                keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:78:db:a3:76:1d:43:a3:bc:b1:69:06:92:7c:07:b4:19:
         23:7c:5a:80:af:4a:13:bb:6a:b3:ec:6f:4d:d0:6d:8e:b0:d7:
         fe:0c:a0:53:c4:07:a0:46:66:2a:71:59:5f:20:44:32:7f:66:
         5f:64:f0:b6:ca:91:47:69:35:af:ad:71:82:93:51:77:fc:f0:
         4f:59:fc:bf:fa:13:cb:22:45:75:c4:fa:94:ff:24:af:0b:67:
         e8:bc:49:d7:c4:1c:28:0b:28:fb:2d:40:60:bc:96:71:fd:60:
         d1:bc:02:34:d2:b3:09:ab:75:05:eb:57:35:b6:c5:61:f5:f0:
         47:7e:f2:5a:b6:b2:ab:74:86:2f:42:85:c9:c0:32:bc:21:92:
         63:47:8b:bb:12:e9:08:93:11:62:41:26:cd:04:d3:22:ed:a1:
         97:25:f4:a4:4f:35:08:a3:c6:df:57:69:16:55:ac:c7:52:b1:
         31:7b:a2:f6:ca:b4:77:78:25:d5:c7:8f:9f:20:3e:e0:e9:91:
         a2:d2:51:44:7b:f4:95:ca:11:ff:ad:d8:5c:68:2f:e4:47:60:
         f8:fe:c6:8c:a1:d5:e6:fb:4b:65:f2:51:70:dd:a0:7c:f1:e1:
         4b:ae:8c:10:a1:af:39:e8:6f:34:e8:ec:8a:f0:3e:c9:a8:81:
         2e:bc:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:49:17 2026 by rpki-client