Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
File:                     sRoiVto9XbOPPn6bWct0YsnnsqY.mft (raw, json)
Hash identifier:          IeUgbYNTGm7TD6sqfri3+HfKvPLaIGrKiZghYltS+iQ=
Subject key identifier:   74:B1:27:26:C6:3F:9A:1B:89:75:8F:D9:FD:BF:31:6C:32:6E:AE:BF
Authority key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
Certificate issuer:       /CN=A91CCCF4/serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
Manifest number:          86
Signing time:             Mon 21 Sep 2026 07:40:01 +0000
Manifest this update:     Mon 21 Sep 2026 07:40:00 +0000
Manifest next update:     Mon 28 Sep 2026 07:40:00 +0000
Files and hashes:         1: sRoiVto9XbOPPn6bWct0YsnnsqY.crl (hash: qJQ/D00JgaYDVQ6xX2/YSFO9BCwjKD6bPQLHonGlhAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
        Validity
            Not Before: Sep 21 07:40:00 2026 GMT
            Not After : Sep 28 07:40:00 2026 GMT
        Subject: CN=6ab0df51-5a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:88:cf:98:6d:4d:cd:c7:9f:b2:c4:c5:44:
                    92:a2:1f:54:03:76:43:86:12:85:c3:ea:61:42:f5:
                    c3:23:eb:91:39:1a:a8:b4:22:7b:21:12:5c:f0:8a:
                    00:44:76:f4:58:6b:0a:b5:d3:e7:cb:4a:b7:f3:5f:
                    ac:a1:2f:0e:89:f3:a9:17:95:fd:97:cc:06:df:48:
                    54:63:b7:39:03:00:57:13:32:c8:93:09:2e:4a:40:
                    40:0f:05:35:c2:0c:d9:6d:88:a7:d5:5a:26:10:cc:
                    da:6e:7e:81:01:29:9a:e1:94:00:35:63:16:4a:6e:
                    78:ab:fc:91:4d:df:f7:16:7c:cc:71:cd:e9:4b:5b:
                    5a:63:c7:a2:9e:c9:a9:97:2e:82:3e:97:cb:22:2e:
                    5c:1a:23:9e:32:e0:95:a3:f2:b7:1c:fc:98:0b:34:
                    3e:55:b0:e2:07:b6:1a:55:3f:cb:a0:76:19:93:98:
                    27:36:8d:7f:b2:bf:6e:61:de:43:87:29:23:85:0d:
                    44:ba:fd:4d:d8:99:6b:26:cf:ec:c2:eb:b7:d9:d5:
                    9a:d0:61:11:e5:4e:8b:25:67:4a:f5:03:7c:e8:71:
                    f9:6b:f4:59:bd:f3:13:f3:1d:bc:ba:50:10:bb:cc:
                    d9:28:ea:7b:ac:45:29:e9:ad:71:18:8c:2c:47:01:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B1:27:26:C6:3F:9A:1B:89:75:8F:D9:FD:BF:31:6C:32:6E:AE:BF
            X509v3 Authority Key Identifier:
                keyid:B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:7e:2e:72:d0:de:05:f9:f4:e3:97:3a:47:24:94:4a:cb:
         57:ab:76:d1:8f:46:ff:c5:57:e4:67:d6:31:80:75:2c:5c:d9:
         2b:3e:cb:d4:42:3c:e2:06:bf:1a:36:e6:c5:21:42:03:b3:7d:
         7c:60:1a:2c:88:28:9c:06:6e:40:04:9a:f7:91:1c:cf:dc:58:
         b5:51:94:fa:ff:7b:8e:0c:f0:e6:a6:a2:11:61:e9:d6:b0:76:
         42:43:ae:f3:34:99:75:ea:2d:d0:b2:e0:ef:42:2d:c1:c5:1e:
         75:52:3d:01:f8:8c:16:a1:e2:92:61:cb:14:e4:5b:05:2d:48:
         5d:56:37:b6:7b:b2:1e:2d:33:97:89:be:a7:57:7b:96:c6:a7:
         bc:27:3a:b2:79:ee:c3:96:47:5e:79:ba:15:c9:26:5d:9e:21:
         26:84:d9:89:4f:48:d3:47:26:37:67:98:6c:af:b9:85:95:d3:
         86:42:cf:46:ac:05:bc:42:b4:09:e4:83:41:0f:ba:df:c9:62:
         bc:83:99:87:f7:f6:a8:69:cc:d0:73:89:50:a1:11:fa:99:7e:
         05:91:a0:f7:a7:88:ab:6d:18:f9:62:06:cf:a9:72:06:b5:d5:
         ca:08:c6:61:49:23:c4:14:c8:66:df:02:b0:63:ac:5a:9b:e3:
         1f:12:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:43:39 2026 by rpki-client