Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
File:                     2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json)
Hash identifier:          hGszuNXtkgnStP1A5T18fbtSxZzcWrFFTgFpCAh2mb8=
Subject key identifier:   8B:B6:7F:33:A5:65:AF:CA:15:43:91:69:C9:53:EA:63:C4:E4:10:32
Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8
Certificate issuer:       /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
Certificate serial:       0D2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
Manifest number:          0D14
Signing time:             Sat 26 Sep 2026 18:27:20 +0000
Manifest this update:     Sat 26 Sep 2026 18:27:20 +0000
Manifest next update:     Sat 03 Oct 2026 18:27:20 +0000
Files and hashes:         1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: e6zAtqBdRII4laQNCtNOTa194GvzX7b+mu1VICDVadg=)
                          2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: DDz9ughOCNkxK48b2+kTl6B6v6gBnr7afj8fRQjJsr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
        Validity
            Not Before: Sep 26 18:27:20 2026 GMT
            Not After : Oct  3 18:27:20 2026 GMT
        Subject: CN=6ab80e88-fd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:24:fc:bf:2a:07:a6:69:7b:d4:52:98:17:
                    e6:cc:df:e8:98:44:f3:15:06:d3:3c:3b:97:46:fd:
                    f0:75:ed:c2:77:36:d9:2e:95:25:b8:db:1e:9a:79:
                    79:14:38:66:b8:2f:ac:40:90:c6:35:43:92:d0:04:
                    4f:d1:57:e7:8f:7a:56:db:a5:e0:52:3e:9d:c4:bd:
                    90:9b:ed:40:72:be:42:3c:63:36:b7:cb:d9:64:49:
                    85:3e:71:9c:b1:f4:2e:b1:18:02:4e:79:0a:60:a5:
                    d5:df:a1:b3:b8:d3:05:da:bc:58:df:75:f2:a0:72:
                    9b:ff:fb:09:0c:81:80:a9:43:8e:9f:3e:58:af:8d:
                    6a:cb:1a:1c:40:20:a6:c6:57:e4:28:52:59:42:92:
                    c6:26:75:2f:55:2d:85:ea:71:bf:b5:a6:e7:53:fa:
                    5c:ef:3d:48:db:7b:a9:b5:97:47:f3:6f:2e:6e:5d:
                    70:35:22:df:af:2c:63:b3:4c:26:93:dc:bd:51:44:
                    77:84:4e:23:38:f3:13:84:d2:a0:9a:4d:71:57:64:
                    13:ea:d0:64:20:d2:15:b8:26:a1:d0:c1:f0:67:a8:
                    3e:34:74:64:36:b3:1e:58:a8:65:f6:f6:d0:c1:b9:
                    20:05:cd:fd:09:41:90:5a:81:3b:7b:01:f0:c2:fb:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B6:7F:33:A5:65:AF:CA:15:43:91:69:C9:53:EA:63:C4:E4:10:32
            X509v3 Authority Key Identifier:
                keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:c3:8b:6b:1f:23:e0:6a:7d:8b:25:4f:67:9f:62:4a:9c:
         a8:42:38:c4:69:e1:ce:55:bc:83:49:f4:cb:01:9a:d4:1a:72:
         b7:b9:8e:dc:b4:40:ac:5f:42:d3:b5:bd:be:f2:a2:8a:b0:bc:
         6a:dc:83:6a:45:8e:64:e1:e7:e3:8f:7a:c6:81:eb:bf:12:a2:
         de:f8:53:da:3f:23:e3:7f:35:01:7b:98:b0:aa:8b:a1:6b:6d:
         84:7a:c3:e5:79:b9:dc:99:21:e1:88:0d:b3:da:f8:76:8c:c5:
         c8:74:9b:3f:e9:36:31:27:86:07:14:92:cc:fb:4d:4a:5c:bf:
         97:17:38:91:86:a0:9b:97:0b:81:95:99:1c:e5:6b:ac:be:5b:
         8f:b0:27:dd:20:21:8a:63:16:32:de:5e:ac:30:b9:a2:71:93:
         58:85:3f:9f:bb:f6:4c:09:37:28:0e:e8:9d:1a:2f:c4:64:3b:
         7b:4f:67:e2:44:7c:73:a5:bc:9e:39:7c:7c:ab:b9:42:b5:29:
         6d:ae:e4:bd:a2:af:98:60:00:15:b9:71:be:22:a0:8c:3e:9d:
         36:92:53:39:13:26:f1:42:2b:bc:26:fc:e7:d9:9f:4d:1b:e4:
         86:55:91:83:72:75:dc:b9:1a:1c:ce:d4:2b:e7:c2:e5:63:16:
         52:5e:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:30:12 2026 by rpki-client