Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
File:                     5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json)
Hash identifier:          Qkof5wW4XjZPcAbOiWq7WOeeqYjZhw7M7n0qmY/16q4=
Subject key identifier:   E3:ED:25:C1:4C:42:28:1F:09:D0:DE:A0:8B:54:A3:C4:D4:50:53:47
Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA
Certificate issuer:       /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
Manifest number:          0198
Signing time:             Mon 21 Sep 2026 04:17:37 +0000
Manifest this update:     Mon 21 Sep 2026 04:17:37 +0000
Manifest next update:     Mon 28 Sep 2026 04:17:37 +0000
Files and hashes:         1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: QpN/39A2iXxsfk9mArHW9zpGZg5P468CXkTCmws2qMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
        Validity
            Not Before: Sep 21 04:17:37 2026 GMT
            Not After : Sep 28 04:17:37 2026 GMT
        Subject: CN=6ab0afe1-b082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:d1:64:ee:92:74:3b:8e:4a:d2:2a:35:a2:
                    1b:d4:51:fa:d5:a5:2f:5a:11:f2:ce:88:37:36:b7:
                    64:26:91:3f:9b:90:7f:8e:76:a8:01:23:50:07:fd:
                    f6:9e:bf:df:ba:3f:84:69:c6:33:4c:70:19:d7:2c:
                    55:4c:0b:bb:2d:9a:3e:08:69:29:f7:ce:1b:62:3b:
                    0f:c2:1f:2b:b8:2a:32:fd:b9:9f:53:ac:22:e0:72:
                    55:74:62:2b:cb:9b:41:90:7f:d2:48:e2:4f:02:81:
                    5c:08:fc:e3:a5:c2:90:30:67:6b:83:96:5a:61:53:
                    48:9c:c5:da:cd:57:79:a9:de:e0:76:4e:7e:71:94:
                    ae:4b:6c:d4:36:dd:15:25:36:7a:9a:97:54:14:f8:
                    48:df:58:1e:f3:14:ef:dc:22:f2:68:8d:26:02:ca:
                    23:02:ad:6e:e8:45:27:71:3a:18:ab:08:6c:90:ae:
                    3e:53:0a:8e:26:23:fa:a4:a4:2a:c1:f5:63:79:9f:
                    cc:2a:31:72:bc:ce:56:01:d2:9d:48:9f:c7:e5:1e:
                    f0:c7:bc:f9:aa:98:f9:06:a2:78:53:e6:d5:d8:cd:
                    9b:77:ff:d4:3f:a2:a8:4d:7b:4f:6a:07:f6:d3:77:
                    a6:fb:35:46:15:e3:9a:45:57:55:91:cd:d7:22:2f:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:25:C1:4C:42:28:1F:09:D0:DE:A0:8B:54:A3:C4:D4:50:53:47
            X509v3 Authority Key Identifier:
                keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:08:67:f5:cf:89:27:3b:a5:3f:70:97:df:6a:b0:18:99:8e:
         45:a6:4a:30:9d:7e:fc:ff:44:46:55:f2:e4:f9:0b:2a:1f:70:
         c8:c2:c2:ea:ea:54:2d:d0:f0:52:b0:c7:a6:1a:70:8b:ac:ac:
         3b:83:a9:6f:cb:55:26:80:46:52:b7:47:84:91:ba:3c:66:c8:
         09:1f:2f:45:e2:a9:89:76:81:57:82:41:20:9e:f6:82:d5:77:
         c6:24:94:ad:d5:00:3f:d3:c5:6b:77:e4:e8:32:b9:90:dc:59:
         9f:7b:ed:2e:8b:f4:87:cb:46:d3:6b:cc:ee:93:4d:36:80:34:
         de:64:2f:79:86:92:77:88:ed:b9:e0:c7:85:60:e5:95:5d:3c:
         61:3a:92:51:6d:1f:ac:76:5b:84:aa:dd:75:89:5e:2b:73:73:
         a6:bc:2a:70:18:af:a3:f2:2e:d7:8b:d3:34:00:b0:83:7b:a9:
         12:2d:76:ca:11:6a:79:dc:2a:69:49:2d:8b:31:d7:e8:39:7c:
         45:f1:e9:86:47:0e:6d:9d:4b:9c:d9:e7:37:3c:99:5a:84:17:
         bb:75:09:fa:b0:65:f8:7a:b9:f3:fb:a4:63:fd:8c:d5:49:e7:
         9f:83:61:18:4b:51:8e:8c:02:b1:cb:fe:56:bd:ba:8d:bc:10:
         99:ba:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:37:49 2026 by rpki-client