Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File:                     E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier:          Dvln5ApO45scNrYtx+UttPkgJrdQh2TugLsN+EFQeyg=
Subject key identifier:   99:CA:00:C8:BE:F4:17:DB:28:CB:22:38:41:30:17:9D:C0:90:58:A6
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer:       /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial:       0B18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number:          0AF6
Signing time:             Fri 02 Oct 2026 19:38:04 +0000
Manifest this update:     Fri 02 Oct 2026 19:38:03 +0000
Manifest next update:     Fri 09 Oct 2026 19:38:03 +0000
Files and hashes:         1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: y9IQWXTZcLuGe17GVX86+r8bsh0IVEhJGS9WTcXVkLY=)
                          2: 02BA60CCDADF11F08398647877D3641D.roa (hash: VTqipcXUO8c22f+xXYM6JyBDiLleZ9VVpmvmijuhsTw=)
                          3: ECEABB7CB0BA11F19005EE656611F970.roa (hash: nYtTx86y8i/3+MIxsW3FIE2hyx0lwhToi48Tf/0i8Vc=)
                          4: EBCAEC9EB0BA11F19005EE656611F970.roa (hash: H2pxRDwAOayS+k2blVsQkPbyhFdrjDFPdWPptTUTpyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2840 (0xb18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
        Validity
            Not Before: Oct  2 19:38:03 2026 GMT
            Not After : Oct  9 19:38:03 2026 GMT
        Subject: CN=6ac0081b-4351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:0f:33:bf:57:2b:69:90:ad:6b:34:37:3f:
                    e7:a4:7b:8c:e6:37:a0:c1:56:b7:40:80:81:17:6f:
                    9d:46:fc:48:3f:33:4f:a9:43:51:37:8c:5d:89:5b:
                    eb:0c:d5:4c:3e:47:ee:4a:24:c6:bd:41:31:2c:3a:
                    46:57:9a:fe:9d:d5:67:6f:ca:f8:eb:0e:fa:90:0b:
                    cc:d1:57:e3:bd:80:b3:e3:c9:44:2c:a6:d7:b3:b6:
                    71:ae:73:a0:f8:17:18:52:88:a9:49:b8:4a:fa:a9:
                    5d:09:7e:49:fc:1b:7f:6d:23:bd:3b:7f:c1:08:9c:
                    9f:3f:99:6b:08:e5:af:90:0f:ce:b9:12:a4:98:82:
                    ae:a9:94:cf:e5:01:4c:fe:2c:be:89:d0:ae:02:1f:
                    2c:c2:f8:7e:24:0c:13:4c:d6:d1:2d:a2:da:84:95:
                    a9:88:f1:78:f2:0f:41:df:67:d3:62:cf:ac:ae:2d:
                    ac:22:ed:c2:fe:16:29:72:a3:90:6b:45:39:59:f6:
                    ae:b7:8e:2f:e8:5e:e4:0f:11:cb:01:d4:c3:36:1f:
                    07:37:32:b0:0b:90:31:d2:a5:a7:5f:6d:2e:cf:91:
                    e8:ec:c0:c4:63:5c:c4:60:0b:6c:da:e0:38:fa:a9:
                    ad:82:d1:d9:07:0f:c0:b8:88:bf:7b:d4:2f:25:c2:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CA:00:C8:BE:F4:17:DB:28:CB:22:38:41:30:17:9D:C0:90:58:A6
            X509v3 Authority Key Identifier:
                keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:ef:78:40:3c:ad:64:30:09:d7:db:ea:ff:70:05:34:4e:
         e2:6d:5e:ec:bf:67:4f:a1:53:29:d6:f2:a2:60:b7:6c:cb:f4:
         2c:39:a0:4c:13:95:b8:e7:69:c8:86:65:a8:93:40:7b:7f:d3:
         4d:84:d6:67:c5:e4:dc:c5:ac:f1:23:2a:bf:38:dd:ec:cf:b4:
         fc:11:f9:99:07:61:bf:ef:63:70:f3:7a:9e:9c:8e:4b:45:8f:
         36:ae:6f:d2:bc:91:af:a0:85:ce:f1:79:dc:d4:50:3f:70:d0:
         b6:3f:d2:fd:0c:77:a6:c9:91:23:31:6d:ce:4a:c0:83:d0:ee:
         9a:a0:01:f1:04:fd:5b:86:1f:69:83:14:a3:02:53:87:3a:b2:
         93:fd:f4:ec:e9:07:dc:d8:a1:05:4c:a1:af:d3:ff:63:83:e9:
         aa:6e:97:33:92:df:0d:bf:ed:db:13:f2:43:54:6c:d9:70:f4:
         9e:9a:0d:45:2d:73:11:9a:fe:86:ec:51:24:15:fa:15:cf:86:
         ee:1f:3a:18:6e:08:41:9a:93:63:0c:06:3b:8b:15:bb:b3:b4:
         ed:df:08:e1:76:7e:6e:af:d1:76:d2:73:46:9f:b9:09:ed:ef:
         18:e7:a6:07:31:5d:2b:e0:b8:1a:5a:18:4f:25:18:d1:46:b3:
         d2:70:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:45:32 2026 by rpki-client