Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File:                     Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier:          HKL6Ijt4vh9I03vs/hZea/HuI6wrMt1wrEzbbicJ4Xk=
Subject key identifier:   ED:F9:B3:E0:D9:5A:05:7B:69:3B:FC:1C:C3:10:59:E2:88:FB:E1:EE
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       3288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number:          325D
Signing time:             Thu 24 Sep 2026 15:23:25 +0000
Manifest this update:     Thu 24 Sep 2026 15:23:25 +0000
Manifest next update:     Thu 01 Oct 2026 15:23:25 +0000
Files and hashes:         1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: WhRcdvPahVw+0GVUQOqmOLMChIljC7AJ0AEBWddS1V0=)
                          2: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=)
                          3: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=)
                          4: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: MdDzMLI4SVTxhDtydILyjc8VZa9vktRLqWXwp+LVEtE=)
                          5: 8952805A8D7811F1A80E34DA3311F970.roa (hash: jjgBEIUdIis7R6NqXuQTMTwt421DRMenCtuYpNqdCJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12936 (0x3288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Sep 24 15:23:25 2026 GMT
            Not After : Oct  1 15:23:25 2026 GMT
        Subject: CN=6ab5406d-d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:25:6d:d5:36:63:b9:39:dd:db:c2:10:a8:
                    77:14:06:6a:62:6a:53:8d:24:01:de:a4:de:f4:0a:
                    dd:eb:d6:52:fb:89:5f:28:38:15:82:d4:40:ee:f5:
                    73:74:46:1f:0c:57:65:f2:f8:02:fb:38:36:eb:0b:
                    8f:29:89:a8:54:a2:88:9f:21:d8:82:c0:c7:2b:68:
                    61:d7:ec:00:20:b6:80:47:a9:5c:7c:00:49:25:b5:
                    06:64:23:7c:10:75:fb:b6:3e:80:a9:43:a1:15:bc:
                    49:01:07:c9:0c:b1:69:d4:26:4b:a3:2d:20:fa:a7:
                    b2:a7:e9:9f:7a:c0:0b:a1:1a:25:5f:1c:5d:80:07:
                    35:65:1f:d2:e4:b2:9f:ff:2a:4a:d2:40:0b:55:f2:
                    ef:92:83:0d:d4:ec:64:fa:bf:01:2b:15:bb:75:54:
                    1f:33:97:e6:57:00:62:69:39:fc:c0:81:bb:00:ab:
                    37:29:61:c5:08:32:05:3a:3e:df:31:d4:37:9e:6e:
                    4b:39:97:be:b0:de:fe:90:9e:bd:8c:3f:fd:55:31:
                    a1:a4:88:6b:92:4b:8a:3c:cf:32:5f:28:5f:05:48:
                    12:bc:73:6f:31:ec:8e:ab:a6:99:72:c2:0d:85:58:
                    f3:4d:5f:20:bc:9a:d3:65:39:b1:9e:e4:24:dc:e9:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:B3:E0:D9:5A:05:7B:69:3B:FC:1C:C3:10:59:E2:88:FB:E1:EE
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:07:e9:00:f3:6f:7b:ce:5d:75:da:da:1b:cd:8a:96:58:27:
         f3:09:3a:bc:1e:61:7c:8f:ec:f8:b8:77:b1:67:a3:8a:6a:ec:
         22:b5:f2:3b:0c:d1:9a:01:8f:7a:bd:64:fd:18:20:dd:6a:b1:
         8e:84:0b:fe:8d:57:57:5e:d4:cf:09:b2:65:0e:ee:2a:1c:56:
         61:42:f8:5a:e5:b5:d2:9f:da:c0:77:da:b4:ba:d4:10:ab:87:
         b2:20:47:0e:f7:3d:fe:e8:3f:9a:be:21:f0:e8:eb:f3:50:e2:
         45:30:6c:b0:58:12:ff:0d:a4:ba:6b:b3:af:72:e1:c4:52:f7:
         bc:55:2e:c0:3e:cd:b0:10:a5:45:12:9b:e0:28:14:9e:95:8c:
         55:6d:68:8a:57:f8:ff:55:b6:21:3a:b7:35:28:3a:7b:a9:93:
         d2:56:ec:45:f2:73:4d:a2:bf:1d:fa:31:55:01:fc:5c:a4:d4:
         6d:72:88:11:0a:9e:7c:d2:41:9a:a0:76:ce:94:6e:a3:b8:1c:
         c1:03:03:59:fe:ba:fb:df:9e:2a:a1:e2:92:48:b4:61:bb:2d:
         2e:0e:b7:05:43:8d:79:30:7c:51:06:a1:86:34:78:58:5f:b3:
         d9:88:87:21:ec:51:1d:85:d8:23:9a:fd:e2:81:d8:95:f6:3e:
         f8:61:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:46:35 2026 by rpki-client