Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File:                     mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier:          UkKqwWe7tU2T2gvUWY8K1w9lz7KmW1mmJfW4Fbw6inY=
Subject key identifier:   F5:33:9F:FF:A5:40:05:62:8A:3A:3D:D6:08:A3:7A:38:6C:74:BB:1E
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer:       /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number:          02BA
Signing time:             Fri 25 Sep 2026 01:33:54 +0000
Manifest this update:     Fri 25 Sep 2026 01:33:54 +0000
Manifest next update:     Fri 02 Oct 2026 01:33:54 +0000
Files and hashes:         1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: dw+iiN63hX2f1VkzzXPre56iCzUQMhX9CmS/VBC9mrM=)
                          2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
                          rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
        Validity
            Not Before: Sep 25 01:33:54 2026 GMT
            Not After : Oct  2 01:33:54 2026 GMT
        Subject: CN=6ab5cf82-ffdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:d2:b4:61:e7:2f:71:d1:cb:f9:04:dd:db:
                    47:82:db:c8:12:96:12:25:6e:f2:2f:b8:6d:dc:62:
                    80:ce:ab:d7:f1:e6:fd:ae:62:03:7b:94:72:09:e7:
                    aa:25:9a:3d:0c:3c:f7:11:c5:db:98:2d:d0:6e:6d:
                    1d:5c:ec:06:1d:07:88:97:52:18:bd:92:0c:34:c4:
                    5f:f1:46:5e:2b:f8:b5:a7:d3:61:7e:e3:23:da:7c:
                    8d:61:ac:69:92:31:e6:76:e8:91:13:1e:02:fc:ef:
                    36:8e:2b:c2:49:de:a5:82:ec:59:dc:49:17:ba:82:
                    8c:2f:5e:a2:66:2d:cd:16:5a:ec:4a:ca:43:1b:ce:
                    b2:da:b0:cf:1c:77:53:eb:2b:93:9d:99:ff:bf:87:
                    8c:d0:e8:82:e8:79:72:ab:67:79:39:56:47:a7:c5:
                    f9:7e:eb:35:8b:3b:58:48:4f:83:a9:89:e8:61:49:
                    b6:8a:08:92:4b:ee:6a:37:17:25:98:48:8a:0f:a5:
                    5d:16:66:5c:71:33:9a:9b:31:9e:04:ec:11:88:bd:
                    30:17:ff:0e:64:f4:a8:2c:d5:e6:69:c9:bc:13:f0:
                    64:a4:0d:b8:04:00:c7:49:de:3d:33:dd:d3:ae:44:
                    df:fa:44:1c:c7:cb:fd:89:82:d8:58:a0:90:2a:92:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:9F:FF:A5:40:05:62:8A:3A:3D:D6:08:A3:7A:38:6C:74:BB:1E
            X509v3 Authority Key Identifier:
                keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:19:38:cc:47:c2:57:b8:46:84:37:22:b6:7a:a1:aa:99:fa:
         27:50:31:5b:1c:06:73:dc:46:72:fe:85:6a:be:67:a3:b6:5b:
         47:43:f3:7a:96:a2:ab:d4:7e:62:1c:1f:2c:4b:4d:af:dc:26:
         1a:a1:49:d8:e0:fd:19:7b:cf:42:27:81:da:06:a6:7b:fe:35:
         1e:8c:de:83:3d:b2:39:b2:41:ce:82:8a:6d:1b:ea:4d:90:9e:
         47:4b:02:92:2b:4e:6f:40:f5:bc:49:62:ea:92:56:83:7c:e7:
         7e:d2:55:38:8f:f4:65:6d:c0:20:cf:fa:7c:a4:c4:49:ec:86:
         ad:83:51:aa:6c:68:69:55:5f:3a:ad:70:30:6b:6d:3d:0d:e6:
         98:41:07:3e:f7:80:08:ba:f2:2d:2b:62:3c:fb:bf:5e:1a:bc:
         ad:9b:73:38:95:16:d2:2f:1c:36:68:e8:42:f1:6c:87:8f:0d:
         4a:7f:1b:94:a8:09:5f:6b:12:8e:76:8b:e3:d9:90:21:c3:e2:
         b8:37:41:52:11:96:d1:21:6b:eb:90:2a:54:f7:84:1f:22:3d:
         5e:98:ef:cb:80:a2:68:5a:f1:77:77:62:57:48:a9:3a:7c:e6:
         32:de:b3:ae:45:88:2a:ac:ca:01:fb:31:a7:25:99:10:c5:27:
         67:6d:16:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:18:26 2026 by rpki-client