Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
File:                     tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json)
Hash identifier:          rWIFEXAEvxAyqDwcZAVt77zZV0z4/nvjj8UaUM2ZKU0=
Subject key identifier:   27:EB:B4:FF:ED:3D:66:DF:2A:55:82:C1:FF:8C:35:7B:4E:A7:4D:88
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Certificate issuer:       /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
Manifest number:          CE
Signing time:             Fri 25 Sep 2026 06:50:01 +0000
Manifest this update:     Fri 25 Sep 2026 06:50:01 +0000
Manifest next update:     Fri 02 Oct 2026 06:50:01 +0000
Files and hashes:         1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: kXcYpAONSutal9Fxtd0GOzoj25Whtl/qbUT2AWrmZAk=)
                          2: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=)
                          3: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
        Validity
            Not Before: Sep 25 06:50:01 2026 GMT
            Not After : Oct  2 06:50:01 2026 GMT
        Subject: CN=6ab61999-ce3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:e3:73:ca:39:c5:4f:15:e8:c5:8e:af:ac:
                    0f:a3:80:a2:5e:c2:cc:a4:14:c9:83:9f:57:e7:00:
                    c0:66:38:95:1e:ee:c9:f5:59:5b:b3:62:cd:e2:a0:
                    10:d3:60:98:83:75:40:de:e1:2f:91:bc:dc:39:1d:
                    5b:b2:cf:e8:11:fa:65:f8:47:0d:76:6e:8b:f4:cf:
                    4d:1f:bd:f3:f1:15:e5:fb:d9:ee:1c:30:80:0c:b3:
                    44:7a:31:50:74:34:fd:53:93:19:44:eb:83:12:b1:
                    ff:a8:12:5a:b8:3f:df:4c:88:17:25:d2:19:e3:06:
                    1e:c6:95:22:ea:ff:79:e7:8a:65:9e:97:df:95:1e:
                    8a:ac:24:93:c3:67:c1:d4:20:64:ba:d8:19:91:8a:
                    dc:cc:6a:c9:4a:da:16:8f:97:18:02:f6:cf:24:7c:
                    93:a8:8d:87:28:bf:11:67:d2:4c:4e:12:e3:09:77:
                    fc:14:1c:0f:ee:bc:87:d1:56:f3:15:bb:a8:c7:23:
                    8c:48:e6:cb:a0:64:3a:f3:da:8c:ff:67:1b:dc:df:
                    b3:7c:91:2a:a9:b1:73:2b:3d:91:8f:cf:cf:d0:e5:
                    54:58:eb:79:4d:7f:41:7d:e2:e1:2d:52:20:af:7a:
                    0c:a2:3a:22:c2:55:63:45:ef:d4:d1:d9:37:08:44:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:B4:FF:ED:3D:66:DF:2A:55:82:C1:FF:8C:35:7B:4E:A7:4D:88
            X509v3 Authority Key Identifier:
                keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:53:0f:3e:60:61:8f:7d:22:6a:38:8c:31:0d:de:1d:54:
         3c:09:d9:e4:30:d2:4e:f8:2e:e6:ee:ad:26:ef:c8:86:33:c7:
         61:6c:bc:72:f1:c2:dd:a1:91:79:6e:15:ad:87:c8:6a:24:bc:
         f3:ba:ad:38:a8:93:8b:4a:fe:d5:de:21:df:6d:26:ad:d6:6e:
         84:48:bc:9b:3c:ac:b0:eb:58:a5:34:ef:63:73:b5:d3:8d:08:
         19:89:02:33:bc:64:b9:d9:08:c0:2b:a5:27:07:bf:f7:60:30:
         61:d5:01:1c:a1:18:65:95:16:b9:ed:dd:49:a0:5b:52:d4:f0:
         a7:45:1d:94:5f:92:ab:60:15:d3:4c:0a:58:a4:f3:29:e3:63:
         db:72:a6:09:d5:9e:40:fd:ce:75:d0:6d:12:cd:5b:6d:14:2a:
         a3:3b:93:49:8c:f7:c6:c4:9a:d1:c9:82:72:b8:3d:c9:65:70:
         68:ec:3d:e5:60:c2:a7:92:b8:d3:27:aa:89:13:33:ba:d3:69:
         5a:cd:54:a4:3a:92:37:7c:45:e4:9d:d7:17:b3:d0:39:e5:64:
         f1:86:6e:c8:75:8f:b1:d9:77:b6:55:b8:04:37:0e:de:b3:8d:
         f0:57:d0:98:46:27:a3:41:56:29:9c:6e:45:24:1a:79:b5:a9:
         78:cb:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:50:31 2026 by rpki-client