Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File:                     dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier:          NXXEo320woP3rDbHcSlvJNhB0o2zCFRT8sX3VZvnepo=
Subject key identifier:   8B:3F:CF:5A:C1:13:2D:F0:0D:18:64:BB:BE:20:C6:70:3D:60:F8:4B
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer:       /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial:       02FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number:          02F5
Signing time:             Fri 25 Sep 2026 00:58:07 +0000
Manifest this update:     Fri 25 Sep 2026 00:58:06 +0000
Manifest next update:     Fri 02 Oct 2026 00:58:06 +0000
Files and hashes:         1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: 0cDggbh8TfLHkY9A7tl2mhTzdv/QaCeBjLvypB3yVkA=)
                          2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
        Validity
            Not Before: Sep 25 00:58:06 2026 GMT
            Not After : Oct  2 00:58:06 2026 GMT
        Subject: CN=6ab5c71e-6f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:5a:4a:35:16:2f:b2:5b:50:1b:aa:09:1f:
                    bc:6d:6e:10:14:56:e8:7c:51:df:78:04:d8:87:80:
                    92:e5:e0:f5:d1:55:cf:ec:40:21:18:21:ce:25:d3:
                    93:3f:6b:a8:df:fe:57:79:d2:38:e0:96:07:fb:91:
                    b2:2c:69:f2:24:74:bd:c1:99:20:75:ac:36:fb:0f:
                    15:9e:27:85:a3:f0:2e:6e:35:7c:98:87:2e:4f:09:
                    0d:a6:68:33:12:28:8e:33:ca:9f:49:20:db:e7:14:
                    c5:7f:26:c2:3b:2b:c9:e6:05:1d:ff:05:89:0d:e9:
                    0c:28:3d:e5:69:05:d9:58:97:ba:ee:08:80:55:44:
                    35:03:f4:54:4b:8b:6e:58:83:55:32:31:cc:d6:f8:
                    f3:71:3e:e4:c3:64:d6:c1:14:ed:a5:88:df:9d:fa:
                    53:a1:5c:b1:16:00:a5:72:e6:9a:15:b1:51:04:8c:
                    77:2a:b1:c5:5b:ad:03:9b:c0:e1:e0:38:77:36:dc:
                    42:d4:30:74:ab:63:b5:46:bb:0c:ee:b3:0b:37:c6:
                    94:91:d4:59:3a:91:3f:fc:0d:4b:fe:af:27:74:f1:
                    ed:60:ae:5c:5a:c1:70:9e:6e:e0:16:9b:39:82:18:
                    a2:2f:fe:a7:2b:f2:ee:3b:7b:69:df:78:19:d2:68:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:CF:5A:C1:13:2D:F0:0D:18:64:BB:BE:20:C6:70:3D:60:F8:4B
            X509v3 Authority Key Identifier:
                keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:54:a8:2c:cd:49:8f:f3:ec:77:0b:b4:92:33:3a:9e:cc:
         a5:30:25:80:b6:a9:bd:55:0a:1c:42:75:41:3c:5b:4f:ef:88:
         2a:b2:54:9e:d1:1b:b8:c5:eb:59:e9:60:fe:83:37:1e:90:48:
         b2:c9:43:6a:ad:13:93:9b:ec:30:f7:d4:fd:be:c3:a3:44:63:
         80:a2:0a:2c:d3:4d:91:19:f4:a8:4d:86:ec:c8:9d:2d:53:59:
         be:37:31:35:96:f3:50:74:97:82:7b:80:6c:d1:45:c4:28:e5:
         04:5f:8f:cb:bf:cb:ab:88:f1:5e:15:ba:31:ed:4c:c9:83:05:
         02:a1:c9:af:8f:01:70:8f:4d:5b:08:20:8f:90:22:12:63:ff:
         37:45:7d:3c:49:39:26:79:e0:f8:ed:d5:c6:5d:af:4c:12:c7:
         c4:f1:7d:83:ae:10:f6:d2:68:0c:10:d5:96:57:dc:67:71:2a:
         df:11:c6:5a:aa:bc:f9:fc:e5:29:7d:df:e1:70:cc:ac:c6:13:
         96:2f:0f:6f:4a:d1:48:39:fd:74:18:f6:ba:f5:41:dc:8e:42:
         cb:95:24:ee:8e:4f:60:bf:96:f1:b6:e7:f5:1e:79:a1:1e:7f:
         f7:da:11:aa:ae:bb:0e:76:33:16:a5:34:87:a7:a3:e5:85:ad:
         97:6f:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:35:09 2026 by rpki-client