Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File:                     j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier:          gx9VKYE7QmqKpnNKlJsAzUBriSehv4B+BbNkTExMNQU=
Subject key identifier:   8A:9D:9B:0E:8E:84:1E:2A:86:A8:7E:B1:55:31:7C:A8:69:6B:18:10
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer:       /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number:          039A
Signing time:             Wed 23 Sep 2026 00:16:41 +0000
Manifest this update:     Wed 23 Sep 2026 00:16:40 +0000
Manifest next update:     Wed 30 Sep 2026 00:16:40 +0000
Files and hashes:         1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: RUHqSHoLmBqI1NdjsayQM/PKsVN9HPXegL88PGYeKtc=)
                          2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
                          rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
        Validity
            Not Before: Sep 23 00:16:40 2026 GMT
            Not After : Sep 30 00:16:40 2026 GMT
        Subject: CN=6ab31a68-5a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:5b:a8:c7:9e:1f:fe:60:81:95:32:b2:0e:
                    ee:81:ba:72:84:83:30:35:f3:66:40:41:4b:f2:91:
                    25:ae:94:01:11:43:0e:b5:91:aa:d4:33:47:26:0a:
                    57:e8:6e:66:56:f1:ac:ce:e2:d5:71:f3:2b:ab:48:
                    e9:4d:e5:00:50:df:9b:f2:7a:80:84:f5:51:39:32:
                    51:e4:19:8c:c8:47:76:ad:e7:55:1a:c3:83:91:79:
                    d4:ea:cd:12:0e:9f:37:95:37:5a:23:5f:57:82:e9:
                    41:06:7c:dc:e0:a8:9a:8a:06:17:ba:84:58:3d:e8:
                    b4:a0:58:1e:0b:f2:f5:d9:2c:46:2f:a0:b7:4a:6b:
                    b2:90:89:91:f4:09:77:79:4a:e5:22:b3:ba:36:25:
                    3f:13:6c:bd:d8:0a:73:08:bf:fc:b5:b3:3c:84:d4:
                    18:88:d0:a7:09:30:b5:84:ca:10:ba:79:87:d3:ac:
                    5d:68:64:f5:13:a4:e3:2a:f8:8f:96:47:49:3a:fe:
                    8b:69:09:26:b5:d5:27:dd:4a:0e:a5:a3:71:9a:0e:
                    2d:e6:2f:39:a5:73:f4:ec:ee:5f:9b:7c:51:73:b9:
                    27:40:5c:90:7f:7e:2d:ae:a6:7c:3c:31:e9:5f:19:
                    93:bb:d5:e1:8a:fc:71:2c:61:1a:f9:34:44:25:30:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9D:9B:0E:8E:84:1E:2A:86:A8:7E:B1:55:31:7C:A8:69:6B:18:10
            X509v3 Authority Key Identifier:
                keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:40:07:9d:47:72:73:28:f9:e0:0d:96:2a:40:06:88:a3:
         39:49:02:9d:3d:29:e2:38:f7:22:7d:4c:6d:54:2d:d4:3a:ce:
         e2:d1:a6:5e:5f:7b:62:d0:e6:70:f8:99:5e:97:7b:e0:5f:c1:
         6c:f6:71:0a:84:07:ca:fb:25:71:35:d1:47:44:09:96:c5:8c:
         6a:9a:47:2c:b0:89:cd:73:f8:54:c8:91:d9:77:dc:d9:c5:a0:
         eb:2a:d9:57:6b:29:0c:a6:81:16:9a:6a:e7:b5:f8:9a:4b:93:
         9f:16:61:58:48:5b:9c:c4:a4:3d:80:5f:de:30:a4:44:58:3f:
         0a:f2:d8:f5:52:75:22:fd:f1:b6:1a:85:65:2a:5a:de:fb:03:
         de:66:37:70:d9:02:fb:82:f2:86:48:aa:c2:39:84:f1:c9:9c:
         5f:17:2f:ea:ab:57:37:e5:50:13:31:66:80:0a:29:94:3f:c2:
         57:16:97:b5:08:62:1b:8c:c7:8e:80:67:04:fd:a3:e3:f5:df:
         6e:f6:0e:b0:7c:5d:d2:e2:73:83:a5:43:f9:28:88:9c:c9:2f:
         b9:e9:09:c5:30:13:8d:56:c0:0a:e3:86:86:1a:0b:17:6e:68:
         b2:d8:05:6b:e7:fe:fb:23:4f:a5:80:11:77:10:b7:d5:16:52:
         7a:82:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:59:19 2026 by rpki-client