Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
File:                     elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json)
Hash identifier:          GCLgC2XWkhvO5TD//WkHVDjJ0l+4VwinhJ0ZfPswyG0=
Subject key identifier:   C7:B9:60:CF:A3:A8:E3:67:DF:33:EC:CC:F4:82:32:7A:F2:63:81:DF
Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
Certificate issuer:       /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Certificate serial:       087D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
Manifest number:          0866
Signing time:             Tue 22 Sep 2026 20:47:38 +0000
Manifest this update:     Tue 22 Sep 2026 20:47:38 +0000
Manifest next update:     Tue 29 Sep 2026 20:47:38 +0000
Files and hashes:         1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: Njbsu5Ia/8Piovwztw8oAr0yO/kpuWKx2tSz7uCGK2A=)
                          2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: JhX0nZ0CCIVHodHlqLs92wmDOp8x0s4aAu3q2TCcgqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
        Validity
            Not Before: Sep 22 20:47:38 2026 GMT
            Not After : Sep 29 20:47:38 2026 GMT
        Subject: CN=6ab2e96a-1073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:31:f1:94:bf:53:f0:6d:5f:dd:fa:0b:88:
                    7a:f2:af:27:8a:fb:56:c7:2f:fb:fe:41:8b:db:c1:
                    24:0a:61:13:40:88:cb:34:f9:30:09:75:81:b0:8c:
                    0a:fb:a6:f6:65:65:fb:cd:4d:af:b0:04:00:45:f1:
                    2b:9c:bf:b4:55:25:63:a0:c2:99:c0:e3:39:16:01:
                    30:bd:a5:e8:36:8a:15:88:b2:3b:47:f6:d7:4a:8f:
                    9e:25:f0:b8:32:54:3c:5f:14:e8:95:36:0d:37:16:
                    80:2f:96:30:ea:c7:da:a5:82:db:1c:03:67:a8:68:
                    4a:bc:16:d1:fe:2d:82:b6:e4:d2:17:6c:dc:c6:2d:
                    f8:a6:d0:ad:65:8f:6a:ba:af:72:69:66:a8:f5:4a:
                    7c:b9:a2:df:33:3e:9f:67:90:72:c5:4c:be:d7:83:
                    49:06:12:39:1a:72:8b:e9:54:90:65:cd:f2:99:ea:
                    8a:eb:a4:30:86:06:39:08:b4:82:f4:7e:9f:1d:da:
                    66:00:b4:a9:cc:1e:76:da:70:23:72:bc:6d:00:da:
                    e0:d6:3d:6c:73:26:2f:1e:b9:34:49:1d:a4:64:a3:
                    3f:07:7a:91:66:11:38:3b:4d:97:41:28:f8:36:30:
                    75:0b:17:7d:04:af:14:b3:18:80:5d:e0:ac:91:60:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:60:CF:A3:A8:E3:67:DF:33:EC:CC:F4:82:32:7A:F2:63:81:DF
            X509v3 Authority Key Identifier:
                keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:8e:0b:75:c9:54:6e:1a:21:15:95:9f:cd:46:2c:6b:20:
         1b:ce:41:2d:00:21:31:20:84:93:fe:08:58:83:4d:1e:7b:1b:
         0d:44:66:b5:e8:e2:84:1a:21:5f:dc:dc:91:4f:76:c5:ef:ba:
         6b:21:f1:ff:e8:e8:86:04:08:4d:32:f3:9c:e8:44:06:3a:7e:
         71:10:3f:d9:6d:a2:86:5e:96:df:69:75:6b:6a:72:9f:53:34:
         25:f5:b7:82:bd:02:12:0d:59:7e:7c:87:f5:a7:81:65:02:24:
         ec:24:7c:da:44:ff:d8:31:c9:c8:a2:ae:f5:b8:68:2f:72:c8:
         e0:f8:3e:1b:86:c9:ad:10:ac:2b:40:5e:81:97:42:a4:df:4b:
         14:14:ac:09:5c:94:eb:d2:25:ab:fc:e1:7d:87:b7:d4:0f:5f:
         e6:f6:3a:1f:a9:08:2d:65:ce:06:30:1a:49:22:cb:43:6a:6d:
         5f:ab:2e:20:37:b6:b9:60:38:48:0e:7f:d7:26:e5:70:5d:18:
         a5:61:bc:70:cf:0b:2b:0c:1d:6d:0f:03:c6:c0:de:02:1d:c2:
         f8:7d:99:6b:d1:84:1f:5c:2b:17:d3:af:72:e9:9e:91:f4:dd:
         9a:f8:53:2c:4a:f7:75:97:29:e1:9a:0b:ee:53:10:37:64:ad:
         7d:d2:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:44:21 2026 by rpki-client