Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
File:                     t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json)
Hash identifier:          uDS6lFapcLTim13RNv/Kz4cmYtE8oD2/lBfSr/VnX5E=
Subject key identifier:   73:DF:34:6A:83:7B:8A:6C:69:04:CF:25:C0:F3:7A:4B:FE:B7:B8:51
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Certificate issuer:       /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
Manifest number:          01B7
Signing time:             Fri 25 Sep 2026 04:00:25 +0000
Manifest this update:     Fri 25 Sep 2026 04:00:25 +0000
Manifest next update:     Fri 02 Oct 2026 04:00:25 +0000
Files and hashes:         1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: clox1q9ATQipMGX8QWJtOzxLKK1V//prx9JLjYNp8xs=)
                          2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: KZIVQqjuq9teRuwe4DCZkRKCxKny4lGWVsTaGuYgtBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
        Validity
            Not Before: Sep 25 04:00:25 2026 GMT
            Not After : Oct  2 04:00:25 2026 GMT
        Subject: CN=6ab5f1d9-f4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:cb:a5:41:e1:0d:50:b3:3a:44:40:a0:af:
                    e3:6e:7e:80:82:0a:74:ed:9e:b4:2c:af:ec:e0:b3:
                    c1:dc:be:60:86:4a:5d:f8:d1:c8:7b:76:93:f0:44:
                    b5:8f:c8:fc:c8:29:ae:3c:cf:2a:15:cf:80:9f:75:
                    a5:ab:52:61:8f:4b:7e:e5:16:5a:51:31:15:da:f8:
                    af:d8:c7:a3:c9:58:9d:91:06:65:a9:66:35:ee:0c:
                    c4:37:62:b7:0f:41:db:e7:b7:18:50:1e:ac:31:f4:
                    fa:54:fd:14:9f:04:78:9a:80:0a:02:18:72:da:1c:
                    81:34:ad:a1:9d:dc:fe:eb:8a:84:52:c6:b4:cd:24:
                    e4:ad:10:e1:48:7b:e0:c1:e2:1f:ea:f7:04:bc:42:
                    45:8a:49:2d:a0:e4:08:24:ea:3b:42:b9:e0:ed:31:
                    07:de:29:c0:48:f5:9d:1b:0b:86:c6:2d:19:14:7c:
                    fb:22:de:0a:12:0b:5f:59:24:84:4c:3e:62:ad:13:
                    b5:c7:16:d2:e9:a9:d6:bf:9b:59:02:64:25:84:45:
                    ca:8e:a7:dd:c8:d3:5b:0f:df:db:99:b1:10:ab:0e:
                    3d:53:26:a5:f5:52:a5:b8:df:ac:a3:83:93:14:b5:
                    e9:00:72:ec:35:02:0f:56:3b:88:48:e5:67:71:b2:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:34:6A:83:7B:8A:6C:69:04:CF:25:C0:F3:7A:4B:FE:B7:B8:51
            X509v3 Authority Key Identifier:
                keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f5:bf:75:db:b0:f8:a5:f7:d4:d6:6c:8a:23:61:03:6e:a3:
         22:d6:be:1d:40:06:0f:d4:be:18:38:be:cd:19:f1:67:85:b6:
         7f:9c:70:99:c1:2a:48:ca:a7:98:17:f9:32:14:36:5a:08:5a:
         83:db:9f:bb:f2:43:6f:4f:53:6b:62:75:a3:26:c9:8b:0a:26:
         10:75:2a:41:de:1a:c8:d5:38:07:26:f6:a2:e6:55:51:c4:23:
         ae:b7:ff:56:52:ea:ca:9f:a7:a6:e6:e3:f7:8c:23:d2:d5:19:
         30:d7:e2:44:db:36:06:50:02:96:9c:97:35:78:fc:a3:f2:3b:
         76:ba:b4:f3:53:a6:3c:86:ed:12:23:5c:19:ab:f6:cd:85:e9:
         0f:fe:c5:91:02:85:74:1c:c8:a9:06:b1:16:61:9a:a1:b7:d0:
         67:eb:56:92:34:76:ed:c6:34:92:54:20:64:35:64:b7:01:95:
         ce:df:d9:f6:43:12:6e:30:00:7c:b6:e5:b6:f8:1f:10:13:07:
         8e:8f:99:4a:7e:cc:b2:b1:de:ff:42:e2:5e:d5:2d:2f:94:47:
         5f:29:ac:5b:06:12:6f:ec:ae:c0:2e:a0:d3:e6:7a:f9:d5:e7:
         62:1f:ed:55:86:12:e7:05:57:83:40:32:1b:00:a7:8c:8e:f5:
         89:d6:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:04:10 2026 by rpki-client