Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
File:                     MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json)
Hash identifier:          SGs1KLQCZ2J7M7BAB6x6uJFIysITWY29Bkg0UQf4dZc=
Subject key identifier:   F8:58:1A:A4:9A:7D:E7:12:90:6E:2C:9B:7D:11:E0:30:E5:39:30:97
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Certificate issuer:       /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
Manifest number:          A1
Signing time:             Wed 23 Sep 2026 07:01:16 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:16 +0000
Manifest next update:     Wed 30 Sep 2026 07:01:16 +0000
Files and hashes:         1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: PgLNOHr+KBvz0jpjcZsmGslVWvxuO7cG+iUyLtgO9+M=)
                          2: E9CCD3D8304711F1AA0B4944BF833773.roa (hash: Cfezb8mq7b+Due2G0DCxNN36YmA2ZvpK0RbPIVqNz38=)
                          3: C2E6D1F63C0911F19D18A1CEB2833773.roa (hash: PLPriTbZpga1d0Ygy1kWk5OtBKo4jT5HT/wMgziotHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
        Validity
            Not Before: Sep 23 07:01:16 2026 GMT
            Not After : Sep 30 07:01:16 2026 GMT
        Subject: CN=6ab3793c-98aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:e8:f9:61:45:5f:b3:17:c7:6c:be:eb:8b:
                    fc:3e:92:11:93:56:3f:3b:71:a0:54:00:ac:fc:82:
                    c7:77:60:5d:ac:d5:4d:4a:27:2b:86:79:7c:91:89:
                    29:90:26:d1:4a:ba:59:2e:5f:c7:c7:82:59:99:f0:
                    e8:02:ac:0d:f3:c0:d3:83:f7:7c:76:81:9e:c8:85:
                    2f:43:84:0e:b4:3a:5b:bd:73:b1:ac:c7:bf:71:8b:
                    25:6c:90:77:72:bb:12:0a:9b:b7:f9:b4:16:df:16:
                    c1:74:f8:c7:62:78:f7:0e:59:4e:ef:ca:06:f0:9f:
                    fc:27:fc:b3:c2:df:d6:29:b4:5f:f5:1a:a0:5b:86:
                    5e:b6:49:6d:0e:ff:24:a8:ea:c9:69:ab:8e:28:38:
                    55:46:5a:65:23:af:7d:2f:85:14:48:c2:73:e7:29:
                    d4:cb:53:ba:18:42:fb:ca:b9:5b:4d:d2:a6:bd:42:
                    7f:30:4e:11:5e:a4:1c:b3:c2:45:e6:4d:b5:91:35:
                    45:0a:54:35:70:f9:16:42:e5:24:3b:1d:13:cb:42:
                    11:a8:7a:b8:b3:2e:87:f3:72:b0:17:03:4b:87:f4:
                    47:2f:63:18:0c:99:1c:19:77:2f:3d:1a:b2:b0:f7:
                    38:06:fb:11:7e:08:c8:10:67:2e:af:e8:72:27:d5:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:58:1A:A4:9A:7D:E7:12:90:6E:2C:9B:7D:11:E0:30:E5:39:30:97
            X509v3 Authority Key Identifier:
                keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:07:78:6c:4b:71:8c:33:8e:51:2e:29:66:26:f0:b9:5c:
         36:ca:ed:c2:ac:1a:d9:17:aa:86:5c:47:5d:29:b7:5e:e3:74:
         8e:cb:14:e4:63:b2:39:8e:85:f1:5e:25:79:9e:79:90:45:e8:
         84:f6:10:3d:f1:96:49:5a:38:df:80:95:18:65:e0:4e:aa:83:
         ad:66:b7:69:2d:e1:fd:08:84:2b:9c:58:6b:92:90:90:a7:df:
         55:36:e0:5f:5e:de:c0:ff:f3:b7:34:e2:49:0e:76:cd:27:51:
         df:b7:3e:25:99:a7:b9:e3:a1:34:52:ba:ce:03:f3:49:19:50:
         7a:bb:e4:06:f2:0d:d9:d7:b1:06:74:48:ee:57:9d:05:60:2b:
         20:d2:7f:aa:c7:57:9e:d8:3a:7f:56:0e:47:c2:76:4f:59:05:
         27:d1:53:7b:b5:bd:86:3a:43:ae:df:80:26:06:b4:57:18:4c:
         93:b0:50:5f:12:1f:31:5b:d2:de:8e:07:44:40:71:34:ed:fd:
         61:00:8c:b7:ff:01:78:34:63:f6:07:9a:32:d4:08:13:23:0e:
         3c:75:64:31:c9:c4:ed:fb:f7:48:18:14:bd:df:e4:c2:b4:66:
         81:c6:32:43:12:aa:15:8c:cd:1f:91:d7:54:e5:ad:48:ed:83:
         bb:7e:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:53:45 2026 by rpki-client