Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
File:                     mT30slnW8G6m6DO22jLrJ_SWtOk.mft (raw, json)
Hash identifier:          saUUXHf/Jl1EbQaPTGtBa8Z4STII8ti4+kohEpGh6Fs=
Subject key identifier:   62:F6:FD:AC:0C:27:AF:31:71:AF:11:02:5E:C6:35:80:13:DA:F7:0E
Authority key identifier: 99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
Certificate issuer:       /CN=A91D08D8/serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
Manifest number:          63
Signing time:             Fri 25 Sep 2026 08:10:36 +0000
Manifest this update:     Fri 25 Sep 2026 08:10:35 +0000
Manifest next update:     Fri 02 Oct 2026 08:10:35 +0000
Files and hashes:         1: mT30slnW8G6m6DO22jLrJ_SWtOk.crl (hash: qbVq88QL6ZXoT5Rhv6lQOvVIKx7iB9GAAmq/DS3kHdU=)
                          2: 60258848232F11F1A5D005B1A3833773.roa (hash: RnspjpOf4FOvmzbAPxGIAiYoTDnXaBDPWP3acJ7GE0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl
                          rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D08D8, serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
        Validity
            Not Before: Sep 25 08:10:35 2026 GMT
            Not After : Oct  2 08:10:35 2026 GMT
        Subject: CN=6ab62c7c-2fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:aa:a6:07:74:84:95:bd:71:e7:fc:86:90:
                    d5:0f:ba:ae:08:95:73:87:e3:5e:73:04:b4:d6:6c:
                    ea:69:62:ea:99:a6:ad:07:1a:21:c5:70:3e:e1:d8:
                    56:10:bc:7b:b9:c9:88:46:59:d1:04:aa:c3:d8:5c:
                    5e:1c:1a:70:67:9c:37:59:f4:56:7f:3a:5d:ed:24:
                    e2:a9:54:5e:49:df:d1:d8:c2:bb:c1:f9:a1:29:90:
                    c1:bf:fb:d4:be:d6:29:87:ca:cd:0e:51:5d:66:5a:
                    ee:40:0a:08:e3:94:d9:83:f0:10:a5:2b:f1:73:8a:
                    de:68:13:a1:46:fc:e3:ed:ec:84:8e:01:cb:89:c8:
                    cf:c1:43:d9:e2:80:e5:c5:7c:f0:55:2a:5b:2d:50:
                    2d:07:30:6a:92:d9:c0:56:cf:90:c6:a2:33:4a:11:
                    ec:0e:0a:79:93:c1:cb:c3:63:2b:62:bd:11:f1:82:
                    3e:68:96:be:98:3b:53:9a:9d:09:b3:61:f5:b8:0b:
                    d7:b6:ee:9d:a9:9c:70:7b:ed:d1:a1:89:19:c1:52:
                    f6:04:bb:45:6d:19:e2:c3:7b:83:2f:86:7f:e5:3f:
                    43:19:6b:b6:7e:cf:7c:d3:7a:b6:18:bf:88:73:21:
                    f0:e9:04:1f:42:9b:7e:36:e8:fb:c4:cb:cc:a8:21:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F6:FD:AC:0C:27:AF:31:71:AF:11:02:5E:C6:35:80:13:DA:F7:0E
            X509v3 Authority Key Identifier:
                keyid:99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:c7:3b:f5:df:26:3e:ff:53:3d:63:6d:49:26:fe:39:e8:
         1b:8f:65:91:98:9b:eb:36:da:20:2a:70:23:aa:e1:2e:07:6b:
         71:39:ed:34:80:eb:77:e1:76:34:52:d5:77:0d:84:08:14:5b:
         ff:76:32:7d:32:6c:32:61:f6:3e:57:a7:b9:71:e7:b4:ef:e1:
         e6:0d:75:4b:0a:47:80:c3:05:bb:d3:4e:20:cc:3f:0b:3d:75:
         3c:4f:71:a2:e7:cd:c0:09:72:52:75:4d:72:34:8c:92:66:f6:
         67:cc:3e:66:5e:8c:a6:f8:d3:ff:98:0f:49:d9:0b:97:4c:31:
         18:9d:30:7b:a5:91:a9:42:a3:03:53:c6:2e:38:39:80:d0:5b:
         d1:e1:f1:2a:4d:76:7f:67:c2:88:e4:a3:a2:45:61:76:0e:cf:
         26:e0:58:9a:37:d6:97:f3:7f:99:38:f1:7c:38:79:b5:63:df:
         41:cb:72:5d:8b:a5:20:06:ba:4a:ef:44:c4:cf:22:be:c8:b5:
         1b:f0:70:48:c9:33:5a:a8:cd:07:27:62:39:e8:a6:6f:3c:d3:
         5b:3a:64:b7:87:b8:b6:25:15:82:b0:42:1a:1b:d0:8f:ea:98:
         06:98:b1:a3:c7:54:14:1e:e2:71:35:a1:ee:87:3c:ee:95:f3:
         4c:5c:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:47:29 2026 by rpki-client