Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File:                     mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier:          Q5OwRmqyKAxYrdPKf/jxQ+LVbWS0f2sfIEWOFuwwIo0=
Subject key identifier:   3F:F7:39:CC:46:EB:3E:01:98:C9:22:3E:33:2F:31:6A:98:72:52:DE
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer:       /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial:       0933
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number:          0925
Signing time:             Thu 24 Sep 2026 20:09:53 +0000
Manifest this update:     Thu 24 Sep 2026 20:09:52 +0000
Manifest next update:     Thu 01 Oct 2026 20:09:52 +0000
Files and hashes:         1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: R8dohRoBNp1o5Zt2/jO3RYKHwoyn2IJX7Vqtmqi5hAw=)
                          2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: y0ZDNF6cJnenBSxzNT9Zg+guSF3PdEPjBHywfaHzzjo=)
                          3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
        Validity
            Not Before: Sep 24 20:09:52 2026 GMT
            Not After : Oct  1 20:09:52 2026 GMT
        Subject: CN=6ab58391-19f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:76:e7:ac:f6:01:c7:4a:f0:c0:c0:0e:6d:
                    9f:6e:d7:81:1b:d4:aa:f9:2d:ff:a3:c2:e5:a6:c5:
                    56:6a:13:e6:57:17:4a:93:82:58:0a:e1:b6:89:e8:
                    c1:f7:e7:be:8c:4f:cf:e2:15:26:2d:ea:62:65:0c:
                    20:b5:d5:6d:5a:59:3d:04:07:4f:de:aa:5a:7c:bd:
                    93:1a:1b:8e:84:6a:7d:55:f8:06:3a:34:2f:4a:56:
                    19:b2:aa:ba:60:19:11:8b:09:07:ca:55:89:6a:a6:
                    ae:62:96:a5:41:31:7b:f7:37:fa:dd:51:99:e2:82:
                    7e:0b:23:f4:2e:f4:07:08:d0:83:4f:a7:59:50:d9:
                    0d:bd:9a:bd:16:35:d4:8c:91:8a:cc:42:71:f8:45:
                    63:49:8b:bc:30:6c:3e:3d:f9:e8:26:4c:23:fc:ed:
                    7c:fd:77:a1:fd:b8:da:45:ac:ff:c9:8b:7d:bf:0f:
                    23:ce:65:f7:63:37:6e:95:e7:d2:8f:af:d5:34:05:
                    c8:a3:28:81:f7:b1:ed:0f:ae:d4:bc:43:1e:ef:ef:
                    54:f6:a1:90:2d:6b:d7:dd:1c:47:17:b2:de:0b:08:
                    e2:a3:ca:33:1e:f0:67:ff:ee:10:d3:76:26:0e:58:
                    6a:06:44:c3:88:9d:2a:6f:15:23:71:88:58:33:9d:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:39:CC:46:EB:3E:01:98:C9:22:3E:33:2F:31:6A:98:72:52:DE
            X509v3 Authority Key Identifier:
                keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4a:1e:3b:0c:81:de:47:fa:4e:e4:30:a1:fd:92:64:b1:38:
         37:e0:bd:a8:ce:45:64:a0:1a:a7:8c:03:bd:bd:47:b5:98:a3:
         65:df:c3:29:b1:ea:03:60:87:89:76:d8:86:14:e0:53:24:50:
         f9:ab:72:ae:ce:60:62:c5:32:4d:76:9d:60:ec:de:02:c3:c2:
         a7:84:ef:d8:1c:fa:5f:9a:23:f6:15:f7:dd:c1:a0:aa:12:e0:
         83:a4:00:32:13:e8:3f:00:fd:ce:a2:28:e6:42:31:97:1c:ee:
         83:ef:7f:86:c1:90:69:f2:55:8e:f6:67:2a:80:da:23:21:9e:
         de:16:db:92:f7:b2:a3:61:c6:93:d0:ab:bc:2f:95:d0:a0:07:
         c5:cc:c7:45:31:ee:93:c5:65:73:7f:07:27:09:0d:23:89:4b:
         94:19:ec:34:e4:11:d8:f2:43:16:18:d4:68:26:ac:51:29:eb:
         d0:8f:51:9c:90:c3:01:05:2d:5f:65:de:cf:b9:15:2b:f0:57:
         b9:2d:96:43:35:9c:4a:2e:0d:c5:97:e2:b0:86:bb:4e:ce:ab:
         0c:c2:3b:ce:3a:b8:70:26:be:79:6a:7a:f5:1b:fe:85:58:9a:
         96:ab:e1:95:3a:f3:78:62:35:6b:a9:b0:b8:ba:0d:cc:de:7e:
         78:e2:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:30 2026 by rpki-client