Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
File:                     B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json)
Hash identifier:          ZsN28lfAaQmV1QL6KBv/Met4bS/WSgTXKGw1MbOcuak=
Subject key identifier:   B7:2D:D3:AC:C5:57:1A:21:23:F9:BE:27:58:E5:2A:E0:3B:26:DF:0D
Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
Certificate issuer:       /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Certificate serial:       02E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
Manifest number:          02E1
Signing time:             Sun 27 Sep 2026 01:19:23 +0000
Manifest this update:     Sun 27 Sep 2026 01:19:22 +0000
Manifest next update:     Sun 04 Oct 2026 01:19:22 +0000
Files and hashes:         1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: f2VkJdfqFrm8sSzXMp6BruQQMs5za3lBqRC/AwdMh30=)
                          2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: Px3OKRnbjIZ1iy6FbmsZnaMGY5apJ6himL6niD0r3kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
                          rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
        Validity
            Not Before: Sep 27 01:19:22 2026 GMT
            Not After : Oct  4 01:19:22 2026 GMT
        Subject: CN=6ab86f1a-fcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:45:cc:97:18:82:d3:70:e3:ae:e1:0d:22:
                    09:41:6e:48:94:21:d0:44:b4:32:06:9d:f8:de:c8:
                    77:7f:24:cb:ff:62:49:1a:a7:89:d2:2b:f6:05:39:
                    cc:43:4b:6c:14:4f:de:de:29:ca:10:78:c9:71:e1:
                    b2:b3:7c:33:10:8f:0f:89:3c:bd:79:4c:ee:5c:2f:
                    44:d9:b5:1e:7f:55:82:47:4c:5a:83:e7:1c:41:41:
                    2d:26:ec:28:29:d9:fa:fd:e8:80:c8:99:ca:82:93:
                    3d:3b:92:f5:e4:dd:f0:d2:d2:de:43:64:21:5e:af:
                    53:41:ee:3c:f1:04:25:e4:aa:52:44:d0:84:6b:b2:
                    bd:6b:56:16:d5:7e:48:da:87:ca:e5:84:3a:14:a1:
                    7b:c8:89:0c:93:66:63:66:6e:25:38:a8:bf:35:2d:
                    93:41:bf:97:28:ed:6e:cb:54:98:4e:5c:51:74:46:
                    7c:b7:77:01:59:57:c3:71:b0:d5:d4:da:79:42:88:
                    2d:27:f1:2b:53:b4:c5:f4:ac:14:87:9b:e6:f4:95:
                    74:c5:40:91:82:15:ae:b4:7b:a7:83:46:fd:70:67:
                    3e:f5:85:70:49:2b:bb:3c:d6:ed:45:d4:96:b6:0b:
                    26:e5:6b:21:2e:6e:e5:13:b2:fe:e6:1d:3a:ed:d9:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2D:D3:AC:C5:57:1A:21:23:F9:BE:27:58:E5:2A:E0:3B:26:DF:0D
            X509v3 Authority Key Identifier:
                keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:cb:d3:a5:4b:2d:66:41:90:33:fc:21:4c:1b:28:2e:6e:
         6f:65:7e:35:33:40:27:23:4a:aa:87:28:2f:c7:55:d1:5d:c3:
         7d:29:40:c4:b1:8d:56:06:9b:69:cc:f0:41:d2:60:21:74:de:
         61:81:a9:5f:a7:42:98:13:4a:5b:9c:90:ec:19:15:f4:97:ab:
         95:8c:5a:23:e9:00:9a:05:11:de:fa:f6:31:a6:d1:61:b0:98:
         7d:54:7c:c3:17:fd:ea:61:24:6a:67:8a:9e:7e:21:6c:79:ca:
         a0:e5:11:98:f3:2d:7f:f5:b1:82:11:ee:3f:4e:ea:12:70:4a:
         49:d1:33:e5:ad:09:e6:87:0e:3a:92:7f:35:63:98:72:c2:2a:
         56:ce:40:a0:9f:79:67:80:51:f9:3f:5f:2b:7f:cf:c0:4e:7a:
         e1:cb:29:31:a3:b0:47:63:d0:54:48:5c:71:69:4e:5f:52:67:
         4d:0b:12:d3:c0:c5:c1:bf:0e:44:41:20:f7:df:cb:41:09:16:
         a5:47:7a:52:f0:67:b7:c6:3f:0e:10:7c:47:bf:a0:e5:1c:da:
         7a:49:aa:da:12:d5:a8:73:ed:ac:59:ae:f9:74:ed:cf:70:be:
         41:1b:06:0b:47:98:85:04:0b:0f:17:91:93:50:c0:c6:b4:2f:
         a2:66:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:21:31 2026 by rpki-client