Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
File:                     2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json)
Hash identifier:          NMYmqc80t6JilFz5IIwckHtEUWEcmkAqyrri0APLgKA=
Subject key identifier:   F0:D4:24:4D:9A:81:F7:38:48:A4:EE:87:23:99:82:C5:6A:97:18:F9
Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E
Certificate issuer:       /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
Certificate serial:       0F09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
Manifest number:          0EEC
Signing time:             Thu 24 Sep 2026 17:38:06 +0000
Manifest this update:     Thu 24 Sep 2026 17:38:06 +0000
Manifest next update:     Thu 01 Oct 2026 17:38:06 +0000
Files and hashes:         1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: QHdQfBrP5yAa/CU19WvX6+9Jn+jfCF7mRUd4nyMosto=)
                          2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=)
                          3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl
                          rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3849 (0xf09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
        Validity
            Not Before: Sep 24 17:38:06 2026 GMT
            Not After : Oct  1 17:38:06 2026 GMT
        Subject: CN=6ab55ffe-a5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:5e:f6:95:d4:b6:2b:b7:e4:98:ef:21:6e:
                    3a:01:f4:ab:89:33:be:c5:51:f0:b5:62:a5:72:de:
                    d0:a9:24:bc:e9:0d:54:1b:a1:d1:3e:29:f6:7c:2b:
                    06:09:30:a1:28:26:78:28:94:2a:20:12:f9:42:4a:
                    bf:55:f8:4c:a9:bb:b9:59:5f:db:52:e2:c4:5b:01:
                    36:f1:06:bd:c0:22:bd:8b:c5:93:bf:e3:75:92:40:
                    93:d4:e4:4d:04:31:54:7b:e3:ef:9f:c5:4a:e3:42:
                    36:4c:2c:f6:b0:d4:86:ec:de:ac:2e:8a:49:d5:e8:
                    79:61:6b:29:d2:7e:83:c1:56:62:ee:0c:7b:52:27:
                    e4:ae:80:67:53:c3:29:09:a8:07:d8:9f:69:21:f0:
                    7e:7a:93:f7:9e:57:f8:1c:d9:6a:83:36:d5:38:ce:
                    6d:08:0e:79:52:a3:18:f6:9b:c7:ab:14:b8:67:2e:
                    af:39:bd:40:da:27:06:9a:7f:eb:74:ea:ce:41:5a:
                    a3:3d:e6:61:80:db:9b:f0:e9:4b:b2:81:49:ee:c7:
                    20:20:60:be:a3:29:c8:15:d5:c5:90:f3:6f:a2:c2:
                    a6:0a:c0:7b:a2:2e:06:51:e6:c4:2a:c2:67:83:b8:
                    a5:4f:cd:fe:e6:db:9f:85:26:34:4e:9f:83:a9:ba:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:24:4D:9A:81:F7:38:48:A4:EE:87:23:99:82:C5:6A:97:18:F9
            X509v3 Authority Key Identifier:
                keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e7:fd:bc:c6:01:5d:cb:3d:59:11:cd:d5:ff:01:54:58:88:
         02:27:88:f2:db:3b:1e:f2:0c:07:de:f9:47:ca:29:b1:8d:41:
         43:9b:65:5f:a3:86:03:d7:7f:91:29:22:cb:9f:73:78:e1:75:
         5d:ee:2b:5d:13:aa:8a:f6:46:96:59:7a:7d:ce:1b:63:35:bb:
         76:63:7d:d8:d4:1b:1d:70:d6:14:8a:23:31:ee:21:be:7a:1d:
         3c:5d:70:b4:84:4b:d1:a3:76:ab:91:fb:c2:91:12:a2:65:94:
         27:6d:8e:fb:c4:31:20:73:f7:0f:cb:8f:dd:a0:12:2a:0a:e7:
         ec:01:dc:4a:8e:df:18:2b:95:b9:e2:eb:3f:33:8f:72:a8:08:
         97:0c:60:0e:b1:9c:fa:32:d1:d9:b1:c0:39:4f:17:9a:0a:d6:
         7f:cb:23:f4:2c:2c:b9:de:66:2a:e2:9c:34:6d:96:30:c9:63:
         f7:4b:b8:0f:da:68:fe:f7:1e:62:23:74:bf:55:ac:b4:95:8e:
         f6:7a:9b:42:8f:76:bf:29:26:a6:84:be:9f:c2:01:80:33:16:
         cf:79:fe:1b:52:b7:ee:f1:86:c0:91:c9:13:df:a0:cd:e5:6d:
         e3:07:08:3d:22:58:55:7a:4b:6e:f5:eb:e8:3c:1b:39:df:1e:
         69:ca:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:40:19 2026 by rpki-client