Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
File:                     CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json)
Hash identifier:          bXpcXjP9MqJ0dpyrc8GntBxdti6RI6fM0RM/yUk7q4E=
Subject key identifier:   03:BB:8E:B9:0A:6F:20:C1:B4:16:62:B6:2D:5A:D2:13:87:4B:B7:FF
Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
Certificate issuer:       /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Certificate serial:       0377
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
Manifest number:          036F
Signing time:             Wed 23 Sep 2026 00:27:52 +0000
Manifest this update:     Wed 23 Sep 2026 00:27:51 +0000
Manifest next update:     Wed 30 Sep 2026 00:27:51 +0000
Files and hashes:         1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: uw2hHNWVN8N1EsG+nzRwuCS8nYGXBbIb848aCCFSYlI=)
                          2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
                          rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
        Validity
            Not Before: Sep 23 00:27:51 2026 GMT
            Not After : Sep 30 00:27:51 2026 GMT
        Subject: CN=6ab31d07-92e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:7c:8e:4b:36:d3:ed:71:51:0c:a4:3f:a0:
                    03:7a:c5:cd:a0:d6:63:70:37:34:fb:79:01:5c:6f:
                    dd:55:bb:2a:28:ac:69:51:22:7b:77:ba:20:df:58:
                    cf:f2:72:85:7b:d0:0d:0e:50:52:de:b0:9b:99:42:
                    47:67:0b:05:e5:1e:a9:d4:15:22:ee:4b:68:7c:1b:
                    0d:19:ce:20:c7:f7:b2:98:df:aa:ec:35:28:5f:a2:
                    79:2f:fd:0c:54:87:c7:69:31:31:69:00:89:a1:4f:
                    c4:a0:32:50:ff:f8:04:4a:ed:2f:75:f9:23:8f:4c:
                    97:be:93:0a:74:81:4d:8f:94:70:a6:05:05:27:dc:
                    24:60:3a:74:f2:c4:39:98:be:db:30:9e:f7:b4:94:
                    96:a2:23:3b:47:b7:50:25:90:63:56:23:60:59:24:
                    e5:16:5d:92:61:fd:d1:a7:d4:60:cd:d8:af:06:76:
                    d7:d5:20:65:68:58:20:5d:51:d4:17:5a:78:d6:b2:
                    d4:d3:3f:33:0e:11:2a:a6:82:2d:dd:0d:c9:98:4d:
                    5c:47:e3:59:0e:3f:55:82:21:35:0b:3d:f4:ff:95:
                    93:f0:65:e2:64:b9:fd:d8:d6:59:31:55:97:7f:f3:
                    a0:f1:18:68:ea:7d:61:cc:9d:eb:eb:d1:ef:f9:53:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BB:8E:B9:0A:6F:20:C1:B4:16:62:B6:2D:5A:D2:13:87:4B:B7:FF
            X509v3 Authority Key Identifier:
                keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:08:99:29:17:b7:8b:11:c6:70:1e:0c:02:18:18:83:b6:84:
         e5:f2:a0:34:5d:40:5f:05:e8:a4:2f:cb:be:1e:df:c9:7f:37:
         69:1b:c0:d2:08:cd:ab:b9:69:0a:c0:8c:7a:11:41:49:0b:8f:
         c5:43:2d:29:32:4e:6e:2a:79:70:e3:e8:68:96:07:e5:31:18:
         9d:41:f2:29:58:dd:70:05:f1:17:45:40:ca:49:80:33:0d:54:
         56:dc:c6:a8:4e:7f:62:2e:66:5f:41:fe:9b:6f:9e:0c:23:77:
         2d:ae:9b:a2:60:4d:22:e0:b6:b4:f6:63:d0:30:ba:f5:30:1a:
         3a:70:64:95:c2:96:a2:8d:c7:49:04:5f:8a:6d:15:2e:3c:f4:
         b7:6a:b6:d8:bb:67:47:30:8c:93:23:c9:1b:43:af:8f:e7:06:
         ed:50:2d:29:d6:48:0e:91:65:ea:05:ae:9c:d1:ef:00:33:bb:
         1d:46:4b:94:6a:ce:c7:ac:e2:32:ba:04:92:fa:a9:40:f9:5b:
         a1:9d:7b:67:97:92:5e:7a:6c:f9:39:63:1f:ee:ab:ea:44:e6:
         4d:3a:f8:2e:e0:3f:6e:72:ab:89:91:c5:d2:55:26:65:15:e7:
         b4:d0:b0:fd:1a:dc:7a:94:6c:f6:e0:76:ff:4b:0c:6b:83:5a:
         57:b7:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:40 2026 by rpki-client