Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File:                     tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier:          wkCghaBwFLqPNwK8QQIOggRl23YY4eyFWF9+D2a5sss=
Subject key identifier:   D1:DA:10:08:C0:1E:A2:EF:92:DB:AE:12:D6:4C:E1:18:C5:AF:D5:0B
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer:       /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number:          0267
Signing time:             Fri 25 Sep 2026 02:11:24 +0000
Manifest this update:     Fri 25 Sep 2026 02:11:23 +0000
Manifest next update:     Fri 02 Oct 2026 02:11:23 +0000
Files and hashes:         1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: ySZswgd1H/u9Tkd3gX4DUv58TvvjVUaODa9p3PIV/E0=)
                          2: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
                          3: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
                          rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
        Validity
            Not Before: Sep 25 02:11:23 2026 GMT
            Not After : Oct  2 02:11:23 2026 GMT
        Subject: CN=6ab5d84c-2445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:be:e6:f8:41:cb:35:f1:e8:b8:7f:cb:b4:
                    5f:4e:e6:a7:19:5c:f8:ca:54:d3:6a:c6:90:de:10:
                    dc:3f:c7:58:de:d8:19:8d:33:a3:33:78:ee:3a:2b:
                    2c:fe:98:70:0c:f3:a7:b6:90:c6:3c:b7:30:7c:fd:
                    7b:3f:4a:5f:9d:47:c8:75:1e:d6:08:50:61:43:ad:
                    7f:da:cb:8f:48:1d:90:b6:a4:8b:30:4a:f7:8f:dd:
                    bd:11:99:fa:73:c6:46:8e:d2:ad:1c:b1:ba:32:64:
                    b3:ef:cc:67:57:d3:9e:98:9b:fc:b4:f8:2f:85:18:
                    56:5a:e7:9f:bc:76:89:fd:3a:bc:48:d4:13:b3:e6:
                    4d:a7:d5:90:d9:b2:91:58:67:d7:14:49:53:1e:0b:
                    e3:73:83:b9:ec:63:ab:ca:52:22:a5:82:22:cc:99:
                    da:47:52:bb:e3:a5:c7:d0:30:18:b4:2f:73:6c:44:
                    3a:70:31:42:76:f3:63:eb:9c:d4:34:1e:1a:3a:59:
                    7b:10:a3:a2:1d:eb:b4:61:72:17:c5:fe:aa:5a:32:
                    7a:78:f7:e9:04:d3:db:b6:48:74:4c:11:a8:87:cc:
                    32:89:50:50:d8:45:98:1c:b4:76:bf:0d:67:32:1f:
                    5d:1b:54:b3:2f:02:72:b7:16:ed:e1:4a:f0:98:d2:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:10:08:C0:1E:A2:EF:92:DB:AE:12:D6:4C:E1:18:C5:AF:D5:0B
            X509v3 Authority Key Identifier:
                keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:1f:cb:e1:48:17:c0:a5:c9:19:9b:5c:ff:66:b9:11:01:ff:
         25:14:ad:0c:73:86:a7:f4:31:d4:d8:b2:49:9c:b6:e2:e2:de:
         dd:b1:ff:20:e8:04:ce:5c:be:82:3d:90:3a:ee:a6:3b:de:fb:
         64:ed:3c:af:53:1b:92:b7:b0:2e:99:47:da:a6:c0:38:e2:e6:
         7c:ac:1e:e1:96:42:79:30:66:dc:1e:12:36:5d:37:71:99:39:
         41:2c:8c:48:11:2c:ba:cf:b7:4e:e1:5c:b3:0b:ed:93:98:dd:
         b6:db:ff:9a:b4:04:89:0a:f4:74:13:4c:c3:7f:d9:ab:94:d9:
         cd:34:a2:4b:8d:40:83:22:e1:dc:a4:9b:b2:a7:8a:ce:aa:69:
         c0:62:08:11:26:41:1e:36:49:87:1e:8c:c9:93:44:05:58:65:
         51:2d:ad:a0:f8:5c:ac:b4:dd:b0:48:1c:8b:b1:bf:7b:6f:1c:
         25:33:e0:86:83:59:4b:02:97:62:80:70:42:21:c6:c9:60:a3:
         94:1f:08:f1:d9:7d:6d:a3:da:69:3f:4d:ac:2a:53:2c:62:1c:
         94:d4:7a:48:6b:f2:01:78:68:c8:9c:ae:73:2c:95:72:2a:74:
         79:f6:4d:22:32:61:0e:61:dd:d1:bd:6c:52:b9:30:6f:b6:1e:
         b1:bb:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:05:48 2026 by rpki-client