Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File:                     edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier:          D5JVELv3L2IOvuC1MHLJ2YvDJZu0fI4JiFCQhMgpNzs=
Subject key identifier:   7B:B0:E5:07:E3:D7:B9:C6:DD:64:F0:0F:8B:C0:1B:AB:CC:DF:A3:19
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number:          1498
Signing time:             Thu 24 Sep 2026 16:49:59 +0000
Manifest this update:     Thu 24 Sep 2026 16:49:58 +0000
Manifest next update:     Thu 01 Oct 2026 16:49:58 +0000
Files and hashes:         1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: PtbQ3Rd4puMzVsJCV+hmPzPtsTwX8g4lGB1eW0jO4NE=)
                          2: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
                          3: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
                          4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
                          5: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
                          6: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
                          7: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
                          8: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
                          9: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5385 (0x1509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Sep 24 16:49:58 2026 GMT
            Not After : Oct  1 16:49:58 2026 GMT
        Subject: CN=6ab554b7-4b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:7c:54:6c:15:72:37:85:80:3d:7b:4f:61:
                    7a:5a:48:10:ad:b6:02:10:97:37:c6:c3:a6:b7:aa:
                    e6:5f:90:69:4f:2d:3d:64:67:ac:14:f0:03:29:2e:
                    8e:78:09:9e:84:f0:e8:39:fa:7c:ce:f4:b4:b7:fb:
                    97:92:1e:19:97:e5:2e:56:e2:8a:71:bb:65:97:61:
                    e6:af:e4:46:87:1d:28:4e:9d:52:fb:24:d2:8b:f4:
                    00:d7:46:9a:7c:5b:3e:5e:f4:29:79:44:da:19:b9:
                    e9:f2:24:2a:a5:1c:9a:72:54:33:09:03:6a:17:b2:
                    69:56:20:e1:7a:f2:28:ed:b7:f3:21:a9:97:e4:10:
                    a1:9d:e0:81:b5:e4:b0:f8:3c:6d:11:27:06:c8:4e:
                    da:2f:ce:5f:e1:a3:62:56:16:37:df:7f:0d:41:3c:
                    21:f0:cf:75:97:c4:b4:69:a0:6a:d2:5a:72:41:ee:
                    59:dd:5b:c2:4a:42:35:84:cd:ad:47:b0:51:c1:81:
                    bc:95:af:f1:33:fc:0d:59:4d:a4:64:92:f0:76:0d:
                    00:8c:d3:2a:7c:58:03:54:57:7a:cb:fa:61:cf:a7:
                    61:92:a3:a9:51:c9:5d:ac:25:00:26:c7:0d:be:5d:
                    4a:91:e3:dd:7c:56:a8:fb:b9:5b:eb:41:a8:03:a9:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:E5:07:E3:D7:B9:C6:DD:64:F0:0F:8B:C0:1B:AB:CC:DF:A3:19
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:e5:9f:e9:f3:d9:f6:92:84:18:f4:2f:63:8c:34:18:d4:
         34:4d:e9:7a:18:dc:63:a7:12:c4:ee:b3:8d:54:fe:a3:52:c9:
         7b:66:6c:fb:f3:55:10:04:fb:15:f2:5f:6f:72:c2:2f:56:11:
         f7:c2:77:45:91:a9:1c:19:b1:d9:e7:e2:60:e9:33:81:d8:10:
         72:82:64:c2:9d:a0:70:0c:8c:12:e1:99:a6:73:c4:55:99:4b:
         1d:e6:58:40:6a:b6:28:7d:da:af:0b:ce:8d:c3:0e:7d:83:02:
         ea:64:08:f8:3a:47:3e:11:78:71:fe:cf:b2:25:17:a6:d0:97:
         2e:55:2c:60:66:8e:6a:b9:73:a4:48:33:2f:b0:d8:0f:08:3d:
         28:61:3e:4c:ef:a7:91:36:62:cc:11:ce:2b:34:40:60:1c:38:
         47:af:ac:40:5c:70:19:7f:21:5b:97:ff:42:02:32:08:ff:c2:
         b6:ed:ff:ec:75:3b:20:1a:95:6a:63:4c:dc:2c:7c:af:e0:e1:
         69:f3:2f:76:e5:71:b5:f4:e2:c5:da:20:f5:9d:b9:12:12:ca:
         43:93:ba:71:56:3b:a5:48:ff:85:0f:0d:c9:0b:57:94:24:4e:
         d0:d3:a1:07:af:8a:64:7d:a5:f9:5a:94:b3:1a:70:50:72:a6:
         8c:74:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:29:12 2026 by rpki-client