Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File:                     S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier:          rwiHLuvhdgtSWosS6uSXJqDBQXvBc0b51ZDvkLPV0QQ=
Subject key identifier:   5F:B9:3D:67:76:7B:FB:77:84:B7:40:FE:BB:5A:74:D9:A8:5C:E9:E8
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer:       /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial:       0785
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number:          077A
Signing time:             Tue 22 Sep 2026 21:24:41 +0000
Manifest this update:     Tue 22 Sep 2026 21:24:40 +0000
Manifest next update:     Tue 29 Sep 2026 21:24:40 +0000
Files and hashes:         1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: qdwXNHuA19zNaZntFc2NFUWsKAB3gp2Rl8FNUYsjGT0=)
                          2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
        Validity
            Not Before: Sep 22 21:24:40 2026 GMT
            Not After : Sep 29 21:24:40 2026 GMT
        Subject: CN=6ab2f219-1841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:0d:c6:cf:8a:bb:c4:60:58:ef:12:62:a9:
                    2a:c9:1d:10:4d:50:5d:d5:29:57:69:f0:40:09:53:
                    b8:99:50:54:0b:b7:c5:b2:61:e1:20:ca:ac:94:cb:
                    e3:c3:4c:cd:2a:63:17:8d:ab:87:2e:a8:2e:f0:1f:
                    f8:c9:81:9e:4f:04:a6:a5:c3:80:f8:02:16:ea:32:
                    f8:7f:95:43:a9:1e:16:da:f0:15:88:02:0d:0c:d8:
                    bd:c2:ac:cf:1d:d9:06:3b:a7:02:7c:27:dd:de:02:
                    86:45:55:e0:0f:c9:b5:e9:40:93:68:a8:29:5f:21:
                    1a:a0:6a:2a:ad:32:88:d2:e9:cf:24:e5:c2:1c:2f:
                    a7:98:2f:b3:88:95:c5:ff:79:f7:f2:3d:ff:24:72:
                    42:ee:19:35:2e:57:94:bd:7e:ea:00:ab:5f:dc:86:
                    87:41:27:45:a9:35:06:63:49:36:0b:b1:50:50:f2:
                    42:bf:dd:0b:8c:02:c2:26:3f:5b:50:a8:9b:05:ef:
                    44:11:36:ba:3d:67:a5:d0:ec:c1:1f:0a:b2:b9:f9:
                    08:a2:45:06:16:5e:71:a2:7b:f1:bb:35:be:94:bf:
                    3c:3b:9e:61:b0:3a:af:16:59:dd:c6:07:1b:58:4b:
                    40:df:01:61:37:91:0c:d7:8e:13:94:2d:a0:b5:7c:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B9:3D:67:76:7B:FB:77:84:B7:40:FE:BB:5A:74:D9:A8:5C:E9:E8
            X509v3 Authority Key Identifier:
                keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:45:42:a7:7e:5f:95:a8:e7:22:e7:a0:ff:ac:ea:69:51:
         97:5b:79:e4:1d:c8:19:bd:2a:9a:8e:9f:1d:cb:95:42:20:3e:
         c6:83:5d:0d:ff:5a:1f:c0:b7:78:81:e5:50:00:de:88:0e:50:
         aa:fc:62:35:d0:ea:b8:37:b1:d4:e9:be:84:05:a4:44:ab:d9:
         9d:71:92:c9:ac:dc:6e:60:cd:be:58:9b:c9:32:aa:e2:9a:8c:
         56:e5:1b:90:f0:9e:66:77:1c:11:67:a5:82:0b:93:e6:4d:d7:
         f7:5f:5e:40:93:44:c5:32:4b:26:03:93:86:b8:1a:d7:64:62:
         72:d1:c5:13:34:ba:8a:eb:9b:7b:b2:56:1b:fc:56:3f:cf:45:
         c0:2c:8f:51:1c:60:d0:ba:bd:e8:7a:fb:4a:df:a2:dc:6f:22:
         f5:4e:0b:71:98:e0:98:3a:2f:8e:6d:59:32:dd:f4:30:d8:10:
         db:f3:e8:37:01:4d:0a:62:86:95:c5:fc:24:38:69:22:e2:57:
         7f:e6:11:fd:25:01:58:20:c1:29:5e:d5:28:87:4c:9a:64:12:
         84:0b:62:01:4d:ba:a1:01:9e:90:29:fa:35:b3:00:28:16:51:
         55:80:3b:a3:33:07:ca:8b:a3:0b:41:50:5f:9a:ce:cd:05:a7:
         f5:df:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:43:32 2026 by rpki-client