Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File:                     97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier:          1JlxavRx7xANHH4akuOu+idRjWg2ZmUv3zZ21CZDToM=
Subject key identifier:   69:6C:F4:EE:2D:2C:55:CA:72:3E:8F:70:4A:41:FD:8F:37:44:52:46
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer:       /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number:          02D1
Signing time:             Fri 25 Sep 2026 01:15:44 +0000
Manifest this update:     Fri 25 Sep 2026 01:15:44 +0000
Manifest next update:     Fri 02 Oct 2026 01:15:44 +0000
Files and hashes:         1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: oIpDIZI28JYUnMNPgayx75Hql0nBgEXds8KTzKQNbME=)
                          2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: PQz0xbKbyiBo1K+6lX1c97d5j/JyzQaM1t6G0/g1HBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
                          rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
        Validity
            Not Before: Sep 25 01:15:44 2026 GMT
            Not After : Oct  2 01:15:44 2026 GMT
        Subject: CN=6ab5cb40-a947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1c:58:7c:9a:f1:5f:3e:c1:d4:e4:df:07:ee:
                    40:b0:41:8c:e9:fa:65:49:72:bd:d4:6c:38:4e:80:
                    a5:be:67:1e:aa:36:46:46:58:85:5f:c9:fb:71:92:
                    bb:e8:34:93:cc:df:9d:63:70:16:8d:6e:c1:8e:22:
                    02:73:9b:4a:c7:39:a9:57:ee:03:a1:8f:fc:e5:23:
                    19:b8:8f:77:4f:88:e4:73:f2:ca:c3:f5:81:0e:78:
                    ef:0c:cb:fd:1f:5d:f8:0c:ab:a7:06:24:e1:b3:18:
                    92:9d:ba:3f:41:0f:7f:d7:84:12:90:f7:dc:89:b1:
                    74:ee:11:12:38:5a:fe:dd:de:73:bf:65:f3:9b:ff:
                    83:75:13:bb:a7:e7:17:e8:fa:3b:1a:9f:77:37:ef:
                    0e:ff:9e:ec:6e:09:25:3e:9a:78:62:e0:80:33:d1:
                    b7:ac:c4:08:44:de:84:7c:d5:5a:8e:1c:7a:ad:da:
                    41:fd:e3:ec:7c:f5:c3:e3:6b:8a:a1:61:b6:a6:bb:
                    56:b2:87:05:01:68:7f:c0:ee:69:ec:ca:64:3d:34:
                    c6:56:22:26:7a:35:ee:f6:88:68:16:9f:1c:a5:a8:
                    29:eb:15:f7:3e:f9:94:32:f5:db:3e:dd:29:23:1d:
                    b3:f6:74:6e:cd:f7:d4:7f:6f:87:3d:b5:45:0c:07:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:F4:EE:2D:2C:55:CA:72:3E:8F:70:4A:41:FD:8F:37:44:52:46
            X509v3 Authority Key Identifier:
                keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:c2:8f:f3:7b:e0:97:c3:a1:e8:cc:25:7d:3e:59:e3:32:
         b7:20:f3:a2:54:d4:34:43:36:41:06:8f:fe:20:e1:68:1c:85:
         89:d8:80:ee:b6:62:05:70:24:03:ad:e6:da:ac:bb:67:89:6d:
         1a:d2:6c:7b:83:3f:19:30:19:3d:c1:46:43:37:1c:40:95:7d:
         1e:75:ba:a6:5e:c4:c1:6a:e1:9a:63:47:1a:a0:b3:55:53:46:
         4a:a5:63:bc:49:53:16:96:e9:b4:9c:52:61:d3:3b:fc:5f:92:
         85:e3:04:14:91:d6:be:a1:3b:f4:18:d3:1d:a0:a2:3e:53:ec:
         02:df:7b:a5:a0:1f:68:09:e9:04:5f:da:1c:40:d4:87:ed:86:
         c0:f9:c9:95:ef:bc:02:e9:46:cd:3c:fb:45:bb:8e:68:aa:f0:
         eb:f0:7b:68:19:d1:2b:c7:73:47:ed:77:00:b9:5a:6a:70:5c:
         89:9c:12:4a:b4:b2:c1:61:07:ed:89:b3:ed:06:00:4b:80:3f:
         81:04:dd:ed:00:7c:cd:e0:5d:09:94:da:f9:bd:bb:4e:00:13:
         23:4b:95:b2:b5:7f:ff:a1:d1:af:e7:58:47:b0:f5:4e:1f:6a:
         2a:78:9a:71:0e:72:14:95:d5:f2:c6:48:6a:c0:1b:9e:45:4a:
         39:4f:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:56:15 2026 by rpki-client