Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File:                     2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier:          DM3BoFqh+113i+QpeHtuUBsbxVMzUljqPDrpHpARSo4=
Subject key identifier:   1C:DC:C3:9F:14:06:5A:34:98:5E:60:8F:C7:90:22:F8:D4:DA:A8:3E
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer:       /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial:       1B57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number:          1B35
Signing time:             Fri 02 Oct 2026 16:24:19 +0000
Manifest this update:     Fri 02 Oct 2026 16:24:19 +0000
Manifest next update:     Fri 09 Oct 2026 16:24:19 +0000
Files and hashes:         1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: 89HDzdwdfpyqmX84WY0YHJ+nVhwuPmNN5BFkVMR9OBA=)
                          2: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=)
                          3: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
                          rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6999 (0x1b57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
        Validity
            Not Before: Oct  2 16:24:19 2026 GMT
            Not After : Oct  9 16:24:19 2026 GMT
        Subject: CN=6abfdab3-a7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:8c:2e:73:59:9b:4e:89:5c:4f:e1:4e:4b:
                    b8:66:94:dc:5d:63:39:f5:ee:78:cb:58:f6:4a:d5:
                    26:e3:a3:6e:de:78:ec:21:db:c8:2d:31:91:64:9a:
                    35:eb:7c:86:12:00:24:82:1a:ec:2c:29:90:50:3d:
                    4c:5e:38:38:8f:da:f8:21:85:02:fe:c7:b6:f5:6b:
                    9b:ae:3f:74:35:b3:2e:d2:2b:a4:4b:5c:d6:9d:52:
                    a1:7c:f5:41:a6:8f:9b:74:f7:47:87:ae:cc:fc:26:
                    17:26:ff:8b:84:c2:fd:4a:bd:ec:f7:d8:33:1e:47:
                    ea:d5:37:3f:aa:e3:c6:48:90:9c:3d:8d:d0:34:b1:
                    78:62:be:ef:8e:10:57:ec:43:c7:c1:27:6a:58:ed:
                    ab:ab:6d:15:5d:1d:8a:76:71:8b:db:cc:ef:ea:5d:
                    50:a3:08:14:aa:9c:16:8c:0a:13:42:8c:8c:df:95:
                    b9:5c:16:a6:d0:bf:79:17:75:8e:51:70:87:18:5d:
                    92:3e:ca:f3:20:58:d6:52:51:02:23:53:5f:a3:9c:
                    82:d5:4e:a5:e6:98:97:9c:4a:8e:ab:a2:7e:76:1a:
                    54:49:17:1b:bc:73:1e:95:83:99:81:5f:9d:49:0a:
                    92:b6:65:4a:7f:b4:23:95:18:bc:7c:5b:03:91:fd:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DC:C3:9F:14:06:5A:34:98:5E:60:8F:C7:90:22:F8:D4:DA:A8:3E
            X509v3 Authority Key Identifier:
                keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:04:2e:33:4a:ea:05:1b:a8:80:bf:34:a1:05:5c:41:74:38:
         fa:f1:c3:bc:39:32:c0:2e:f3:25:d1:3f:e8:e4:c3:1c:4c:25:
         79:7c:1e:68:d7:f6:db:ba:bd:f2:ca:39:5f:18:04:3f:98:1b:
         76:30:00:93:79:df:74:df:e3:c9:97:5d:3c:4c:1c:df:24:8f:
         a8:22:95:3b:65:16:4a:79:fd:34:84:70:4b:b6:ee:bc:d5:d3:
         0e:00:a3:d4:e4:3d:ba:ca:22:21:7e:4f:a3:c2:5b:02:21:a6:
         cc:6e:e1:3a:ad:0d:97:0d:8c:ba:d2:2f:f8:8b:44:79:49:de:
         73:d2:2d:f7:e8:33:5d:a0:cf:f5:b9:99:2e:95:35:e6:62:37:
         ea:8f:c6:c2:f7:34:d4:fb:1c:9e:a9:d9:7f:5d:e2:be:6e:65:
         24:29:f9:ef:f3:1f:ee:9c:41:e7:31:4b:05:a7:e7:28:ae:90:
         33:42:43:53:9b:13:91:37:ce:2c:fe:bc:2a:08:5c:a4:e4:94:
         df:3d:0e:d0:a7:74:6a:c6:28:b7:7f:4c:c2:f7:c8:ac:e7:b5:
         8b:54:45:06:5e:2f:eb:b7:aa:10:c7:39:ac:29:3c:58:ec:b2:
         ff:c9:3a:6b:e5:34:9e:0f:a8:68:e2:43:29:10:a1:7a:96:46:
         4c:d6:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:13:41 2026 by rpki-client