Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
File:                     jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json)
Hash identifier:          HWa1XyeTujH5c56gF33fHaP+P5aQ57QywesmAAGA+N0=
Subject key identifier:   E6:77:9E:3C:28:94:BD:D6:5D:73:0F:7F:E3:59:68:11:38:28:06:6D
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Certificate issuer:       /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial:       1B84
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
Manifest number:          1B7A
Signing time:             Thu 24 Sep 2026 15:38:57 +0000
Manifest this update:     Thu 24 Sep 2026 15:38:57 +0000
Manifest next update:     Thu 01 Oct 2026 15:38:57 +0000
Files and hashes:         1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: w3p3dG54C5B+arxUVxArbtpZVSUjr8AODmV3jGhGFtA=)
                          2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: Y1iY5bDdtF14xe5+ecYddY6nYDDRlZBhph8kiu8Him8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7044 (0x1b84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
        Validity
            Not Before: Sep 24 15:38:57 2026 GMT
            Not After : Oct  1 15:38:57 2026 GMT
        Subject: CN=6ab54411-263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:19:90:d2:19:a6:77:ba:08:dc:53:46:36:
                    6d:9f:41:ed:da:e7:cf:43:f6:8d:00:d9:09:59:f8:
                    39:84:c0:27:40:de:03:2b:54:7a:52:76:02:3c:c3:
                    e0:38:18:2c:da:57:1f:6d:12:97:08:9b:b6:51:91:
                    ce:45:1f:86:ab:80:f4:62:9a:08:2d:53:af:9e:96:
                    25:c2:d0:dd:81:a1:cb:f2:29:91:dc:db:fb:42:ea:
                    6d:19:91:53:b0:2c:46:4b:f5:a8:aa:14:53:90:71:
                    30:71:55:fa:b5:92:8b:7f:84:ac:72:ec:23:0e:47:
                    8d:0c:c1:89:19:81:21:b1:6d:db:21:6e:37:f7:1e:
                    9e:fb:e8:d6:bb:56:4a:38:4d:98:b4:75:fb:a8:e9:
                    62:76:f7:f1:3d:34:c3:d2:99:76:2f:ce:db:f3:1f:
                    8e:2f:0b:d0:25:d1:6e:80:c4:cc:f4:c6:fd:57:51:
                    53:55:da:9b:72:e4:3d:f9:50:22:39:89:3b:a3:b2:
                    6c:a0:99:dd:07:0c:92:35:0f:2f:cd:43:29:8d:fa:
                    ad:33:c4:8b:24:17:6d:b8:7d:98:a2:6b:19:ef:04:
                    8a:68:81:fe:a1:57:5e:94:bb:b6:d9:ab:70:8a:ae:
                    f0:45:7d:52:d2:9f:63:a9:9c:d3:cf:d7:0e:c3:05:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:9E:3C:28:94:BD:D6:5D:73:0F:7F:E3:59:68:11:38:28:06:6D
            X509v3 Authority Key Identifier:
                keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:cd:b4:80:2f:c1:34:0b:b0:63:64:89:a2:49:28:7b:1c:
         5a:b9:65:7c:ac:f8:cd:b4:6f:a1:c6:53:33:ec:48:ed:63:fc:
         46:23:79:08:13:a0:e2:3e:1c:f9:df:c8:ec:22:26:fa:bc:f3:
         c8:f7:d1:25:9f:1b:ee:63:21:16:2f:20:1e:10:6f:f2:91:ee:
         a1:87:10:4b:6e:57:8c:84:3a:47:ee:d1:1e:f2:26:4d:26:f0:
         dd:35:f4:d8:ac:11:3c:39:17:54:58:70:46:66:98:05:f1:74:
         87:60:af:16:8c:c5:97:e3:ae:42:18:71:3f:8a:cd:42:fc:1c:
         0d:68:5e:d2:dc:24:df:46:2c:46:ba:0c:6c:7a:54:43:ab:72:
         6b:80:75:9c:03:2e:3d:fe:3d:6c:17:6e:07:bc:96:e0:30:79:
         43:cc:e9:4e:ae:9b:dc:ce:ee:ea:db:b8:f5:46:33:f0:8f:c1:
         64:f6:49:8f:78:46:2c:05:ec:64:71:87:fa:8b:7a:ba:f8:88:
         c7:20:a6:21:60:57:b4:02:3a:c3:1a:6a:80:98:87:87:54:4c:
         fe:f3:82:dd:a0:52:c0:03:8d:fd:41:dd:c0:b2:55:e3:9e:a8:
         c7:03:c5:1f:b5:f6:78:9b:c1:21:4a:61:a5:07:e3:1b:5b:4c:
         b8:e9:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:49:54 2026 by rpki-client