Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File:                     aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier:          LbY+ROWjk/i0yWpc3IiOZ/NgtxAS9CLN8MD3F1frB0E=
Subject key identifier:   AF:A0:5D:E6:A6:72:8C:C4:87:F7:25:F6:29:4A:91:64:74:2F:58:23
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer:       /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial:       091F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number:          090D
Signing time:             Thu 24 Sep 2026 20:11:31 +0000
Manifest this update:     Thu 24 Sep 2026 20:11:30 +0000
Manifest next update:     Thu 01 Oct 2026 20:11:30 +0000
Files and hashes:         1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: Qc9SH/QD1dYyn6seoXzJ3hS+CCnOb5eLK2eIGq8LF4Q=)
                          2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
                          rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
        Validity
            Not Before: Sep 24 20:11:30 2026 GMT
            Not After : Oct  1 20:11:30 2026 GMT
        Subject: CN=6ab583f3-1503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:d2:f8:df:de:74:6e:95:12:2b:dc:82:ed:
                    86:e5:5c:f4:52:0e:9a:7b:c5:d9:26:7a:77:80:83:
                    a8:18:e4:9b:08:a1:20:a0:64:bb:be:16:d3:aa:a0:
                    fd:7e:8e:d1:5c:71:b3:f4:40:14:db:0c:22:e5:ce:
                    f6:c7:6d:d3:ff:8c:95:01:6b:9f:fb:a3:7d:93:06:
                    14:2f:8b:5b:2b:33:ec:14:7c:a1:28:b6:f1:45:c4:
                    e8:ea:c4:de:84:64:ef:5c:fb:a4:22:38:9c:dd:7b:
                    49:bf:86:a7:db:89:d2:c8:67:58:87:40:5d:47:e1:
                    03:dd:a5:3d:2f:e8:7b:33:ef:0e:f6:7f:f1:80:ad:
                    68:68:c8:ee:62:36:71:a2:b7:29:36:51:99:66:8f:
                    e6:9c:36:b0:98:7d:00:e2:e0:42:e7:9b:1d:fb:a6:
                    a5:0f:47:59:50:91:71:c7:28:2c:1a:cd:75:93:5e:
                    b2:f6:86:56:f6:d1:4c:30:27:2f:dd:08:29:12:d5:
                    30:65:a8:ce:9d:47:19:49:81:59:16:c8:45:0d:db:
                    82:e8:9e:9f:82:87:01:3a:67:43:57:4b:2e:f1:39:
                    45:3a:86:59:1a:a3:63:22:c4:cd:10:24:02:10:13:
                    c8:10:2b:89:ae:4a:bb:a0:92:04:ab:f5:91:cd:f0:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A0:5D:E6:A6:72:8C:C4:87:F7:25:F6:29:4A:91:64:74:2F:58:23
            X509v3 Authority Key Identifier:
                keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:75:5a:77:7f:f9:a7:6d:de:42:9c:96:79:e6:7d:3f:ec:
         3c:9c:7b:46:ca:98:7e:18:df:bb:62:fb:0a:40:5b:83:16:84:
         8a:69:9b:66:a5:48:df:05:8e:37:7c:e0:2d:30:12:77:6a:ae:
         ad:8d:0c:85:81:4f:b0:09:d4:16:f0:f8:ca:73:ea:3d:93:c3:
         4e:12:30:63:07:e4:b4:fd:4b:dc:fc:7d:0e:ae:6e:41:97:4e:
         97:da:19:b1:61:4e:02:d2:49:ff:6e:6b:29:bc:4a:31:4b:8a:
         96:2e:b1:03:cf:ac:fd:7f:11:36:38:44:f7:fa:be:48:b9:3e:
         04:0d:0a:a6:cf:bd:a9:e4:16:14:b6:e0:1e:e9:da:eb:ef:a2:
         1b:26:7f:a2:52:00:8d:18:84:41:47:6f:71:56:2b:bc:29:15:
         65:17:95:a9:34:18:ba:da:dd:99:e2:84:4f:cb:fb:f3:8a:11:
         8e:2c:25:65:24:ba:b9:df:88:2a:99:ff:24:c8:d9:73:20:17:
         4c:e1:09:f7:98:7d:87:54:48:32:d4:52:66:05:07:3b:96:04:
         3a:e0:0f:3e:2e:6a:c9:2d:90:6d:35:e6:a8:43:9d:c4:a3:14:
         98:3b:d7:fd:3e:bc:13:3a:18:3c:97:bd:5d:f4:1d:87:3f:f3:
         7c:d9:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:44:17 2026 by rpki-client