Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File:                     PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier:          Kym77CwYdkMmeXEWPhMbfNXs8Lnifhel2MF2UAzs73A=
Subject key identifier:   C0:18:EE:50:C7:48:4C:EE:4F:B1:22:12:3D:03:8F:93:8E:26:66:EB
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer:       /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number:          0381
Signing time:             Fri 25 Sep 2026 00:37:08 +0000
Manifest this update:     Fri 25 Sep 2026 00:37:08 +0000
Manifest next update:     Fri 02 Oct 2026 00:37:08 +0000
Files and hashes:         1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: zzmubfOplAuhg9sv5aQFAMdwhA23on2NrlG4o1vaS8Q=)
                          2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: u53J9g3LWBwbE+O/MQz1kfSyecBSZsgL9Pb+QNj8MgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
                          rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
        Validity
            Not Before: Sep 25 00:37:08 2026 GMT
            Not After : Oct  2 00:37:08 2026 GMT
        Subject: CN=6ab5c234-ab72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:19:e3:ab:d4:49:c0:7d:ec:37:8a:ad:4e:
                    ea:c3:e8:8c:75:b9:f3:e3:53:db:8f:f2:fb:44:dc:
                    0e:c5:0c:3e:5b:e4:48:8f:73:b1:5f:93:e6:c7:c0:
                    ff:4b:28:f7:57:ab:67:a2:3d:0e:1c:24:0e:49:39:
                    fd:24:e3:8b:21:ea:cc:60:68:cf:47:19:5d:08:d5:
                    47:1b:85:05:d6:27:48:b3:32:a3:d0:05:ec:a8:91:
                    d3:1b:88:76:3e:c3:79:c5:20:62:7a:b8:7c:e8:41:
                    d2:98:f5:37:33:7a:f8:6e:ce:4e:76:a8:05:65:24:
                    34:ea:15:33:e4:71:c5:fa:d1:04:6d:94:31:6f:9d:
                    ca:76:c2:dd:db:27:22:17:a5:66:d0:b4:cc:9c:54:
                    c6:42:f6:9e:5f:77:c7:44:a2:d5:1c:43:87:ea:f0:
                    30:b7:08:c5:a1:ca:af:52:d1:6a:ee:75:d3:0e:b5:
                    e5:a1:b4:d2:0b:ff:51:80:65:52:d4:33:c3:d7:39:
                    00:57:4d:77:53:a7:83:c6:f2:ff:20:8a:63:6a:e0:
                    76:76:da:8e:50:4a:f3:fe:7e:72:db:66:f2:5f:05:
                    32:50:2c:53:dc:eb:90:9b:91:c4:6f:d2:d9:16:68:
                    8e:2d:31:26:22:6a:b3:c3:68:01:d1:97:f7:86:18:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:18:EE:50:C7:48:4C:EE:4F:B1:22:12:3D:03:8F:93:8E:26:66:EB
            X509v3 Authority Key Identifier:
                keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:92:7e:9b:4e:1f:39:c9:ef:3c:2e:a1:c8:d1:55:da:40:67:
         3c:ba:b6:f4:6d:0c:1e:5b:d4:6b:6a:20:ca:fb:db:ee:75:80:
         94:0b:e8:e3:d8:d3:cd:03:a7:b2:32:4a:9d:7b:d7:1f:6a:f3:
         16:4a:76:92:1a:3e:15:89:0f:49:89:44:8b:4c:f4:c9:ad:53:
         c3:8f:d4:29:e8:18:21:e4:e6:a3:b7:13:63:3a:bd:2a:38:ed:
         0f:76:47:90:88:1a:df:da:61:39:89:54:b1:e4:4d:2e:93:d8:
         e5:33:27:d4:73:df:60:02:35:29:ad:94:ad:92:1a:62:fb:ad:
         04:75:dc:2e:fb:8f:2c:78:06:85:92:d9:b8:58:8b:8f:f8:0d:
         ee:e2:12:7c:b4:9c:4a:17:84:9a:0c:4d:29:58:49:9c:ab:81:
         cd:bd:8f:14:34:0f:7e:57:34:d2:6b:9d:be:24:2f:b2:84:32:
         90:b5:4e:37:6f:19:3b:65:7e:36:7a:aa:8b:f9:25:f4:84:06:
         79:88:45:24:b5:6c:ff:51:73:c4:83:f2:d1:72:69:d0:3b:35:
         47:5f:7c:36:2d:c6:84:47:50:38:24:36:1a:f5:9a:1a:58:e4:
         2d:be:ae:f6:f0:96:23:fb:1f:6e:87:07:aa:ff:b9:bd:91:2e:
         88:73:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:29:50 2026 by rpki-client