Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File:                     -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier:          z2aFB4b/47CvoYTdkUmlQIQ7Z4mpEre6fTFqovbq47g=
Subject key identifier:   5C:39:6B:42:F2:12:DE:47:2E:44:7E:08:E5:0E:20:60:F6:39:48:58
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer:       /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number:          0721
Signing time:             Fri 02 Oct 2026 22:19:56 +0000
Manifest this update:     Fri 02 Oct 2026 22:19:55 +0000
Manifest next update:     Fri 09 Oct 2026 22:19:55 +0000
Files and hashes:         1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: Sd4UPJrY4UGCiM6kNBLCoQaz/oZhylY5+4dvhoGGZ+g=)
                          2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: nL3vp/CU21MSnng2C+poLgofAZHvrlCtCeZrfBZOSyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
                          rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
        Validity
            Not Before: Oct  2 22:19:55 2026 GMT
            Not After : Oct  9 22:19:55 2026 GMT
        Subject: CN=6ac02e0c-dcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:3c:99:55:d5:46:30:15:f9:e4:60:de:af:
                    1b:94:0e:89:7c:49:3d:83:9c:eb:ee:5a:b1:1f:f2:
                    9b:4b:26:03:d6:18:c4:73:32:51:a3:ed:83:7c:6a:
                    d0:2c:4c:04:ae:75:5f:3e:69:28:4e:d4:9b:84:8a:
                    f3:58:c8:a1:cf:eb:75:f2:43:66:09:74:13:98:57:
                    ac:ed:6c:56:50:e2:d1:7b:95:a3:90:0b:05:23:16:
                    6a:25:88:12:69:a9:7f:30:b3:d3:e3:a1:48:5b:96:
                    c8:fb:37:8e:b4:2c:49:18:b4:dc:61:2a:da:c3:dc:
                    44:a6:69:fc:5e:84:c0:d0:84:60:bc:de:4d:82:11:
                    44:ce:72:44:c2:35:d0:35:0d:00:85:cd:af:08:38:
                    81:56:68:4a:a5:d7:07:b2:a9:d3:35:54:4b:96:51:
                    73:8a:71:58:08:10:d9:1f:6e:1c:a3:bc:0f:72:e4:
                    30:1c:8a:b3:eb:6d:5a:e9:fd:c1:3e:e3:f8:6e:5f:
                    6f:22:8c:37:5f:10:cf:ca:9d:b9:1a:85:66:b4:6a:
                    27:a5:fa:a4:df:6d:8d:f3:a3:da:2b:1b:cc:0e:34:
                    84:93:df:51:ca:51:90:0f:34:c9:2b:27:8a:23:3d:
                    aa:88:3a:40:37:db:59:da:f8:38:52:49:e8:61:53:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:6B:42:F2:12:DE:47:2E:44:7E:08:E5:0E:20:60:F6:39:48:58
            X509v3 Authority Key Identifier:
                keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:24:72:01:8f:78:ce:b7:50:1e:f4:87:28:cf:c0:09:13:d8:
         49:8f:b7:c8:c7:17:cd:17:94:ca:37:8b:57:9c:57:88:13:9b:
         a5:ba:f7:fe:31:95:6a:cb:ad:f2:66:53:40:bd:35:5a:7d:9b:
         81:b8:91:65:90:09:a2:de:fe:36:95:66:93:32:bf:0e:91:da:
         1a:da:ed:5c:92:3d:5c:17:2b:90:c8:2c:fa:a6:19:14:3c:06:
         42:b1:ad:7e:c1:21:99:c2:ce:d3:c9:1a:24:68:d8:d3:8e:be:
         6c:2e:65:26:bf:8a:46:94:be:78:3c:cf:0c:53:cf:d0:94:00:
         0a:09:34:75:a3:ab:15:13:a3:19:a4:d7:46:eb:c5:36:c1:76:
         0d:94:ef:f7:e2:b0:98:34:8b:11:39:a7:07:b0:28:bc:73:b9:
         38:a5:c0:04:7c:91:cf:1d:dc:11:f0:c1:9e:6f:4b:df:be:67:
         c9:2e:39:d0:52:7c:56:16:f6:b0:be:d9:d0:bd:17:bf:af:62:
         fd:47:59:79:1d:c3:86:18:98:98:ca:2c:e2:6c:9f:d5:92:07:
         ca:ca:7e:93:0e:3b:84:fb:fe:b9:9a:f7:3c:1b:ee:9c:2f:b5:
         a4:7e:e0:d8:05:87:a2:e7:69:c8:d6:1f:ba:f0:23:25:6e:03:
         6c:dc:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:29:06 2026 by rpki-client