Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File:                     _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier:          kS5FMfqOddymiDDPi7gOHNgzhvAiQLJuWCZeMttO7Wc=
Subject key identifier:   CA:68:D1:23:10:C1:4C:44:81:85:27:55:BE:E9:BA:6F:F7:06:14:27
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer:       /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number:          093D
Signing time:             Thu 24 Sep 2026 20:23:13 +0000
Manifest this update:     Thu 24 Sep 2026 20:23:12 +0000
Manifest next update:     Thu 01 Oct 2026 20:23:12 +0000
Files and hashes:         1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: g5gIMBt7rcRyVMwEkvkR1CslGSHVlh2gJqegDTCzaPk=)
                          2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: +giwTMwqmDi92nyh2W//WCrh8pfdmutnmr2rqJ6v09s=)
                          3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
                          rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
        Validity
            Not Before: Sep 24 20:23:12 2026 GMT
            Not After : Oct  1 20:23:12 2026 GMT
        Subject: CN=6ab586b0-d462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:a0:d3:23:32:ea:b0:c2:00:27:8d:7d:a2:
                    ac:b8:f8:bd:94:6e:9c:a2:76:bf:70:12:d0:c1:76:
                    0a:3b:0a:e2:3a:5f:68:bd:96:02:4b:25:09:46:27:
                    6d:59:c2:c8:0f:f0:99:03:1b:0c:77:86:ba:50:21:
                    ad:85:8f:24:36:d3:73:52:52:4f:6c:7e:11:7a:28:
                    c6:fb:fd:27:2f:6e:77:b2:43:ba:b0:57:96:9f:6f:
                    c8:62:d3:68:39:21:ad:38:68:94:a9:27:90:ab:cb:
                    c6:28:1e:ab:9c:65:46:db:c8:7d:9a:48:73:ac:77:
                    a2:18:db:1a:3e:ee:7c:6c:8a:dc:01:ba:68:e9:d2:
                    e8:1a:07:be:c1:d4:c5:e7:54:cb:fe:10:6e:f4:9b:
                    05:2a:cc:08:08:69:9e:24:04:80:e3:15:6a:1e:02:
                    12:a1:3e:63:52:22:af:03:90:63:3d:74:05:9e:7e:
                    48:78:30:83:29:c6:f9:f5:a5:9a:9e:1d:be:54:44:
                    7d:7a:79:86:09:92:3f:f2:c1:73:79:33:c5:7a:26:
                    34:59:6c:6e:31:5e:54:f1:73:61:d6:fb:3c:fd:10:
                    c2:26:58:39:68:8c:4d:d9:4e:29:0d:df:f7:5c:10:
                    94:e8:a3:49:29:4d:b0:83:fd:46:a6:6f:1a:e4:bb:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:68:D1:23:10:C1:4C:44:81:85:27:55:BE:E9:BA:6F:F7:06:14:27
            X509v3 Authority Key Identifier:
                keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:15:50:6b:04:37:d3:db:2a:be:18:8a:91:e0:79:6f:f0:
         6f:ea:11:1c:4e:ce:53:a4:9c:93:b6:a6:30:b5:49:ff:51:85:
         97:14:71:6b:71:46:51:b0:d7:c5:e8:05:f4:0f:ab:a3:a9:6d:
         b7:a8:53:f2:c2:11:b2:87:31:10:40:b9:78:7d:30:37:3d:c6:
         f2:a9:3c:6a:3a:ce:f9:39:73:07:b3:39:bf:02:c3:8e:1f:be:
         0c:da:fe:7b:4b:fa:5c:cf:58:a9:ba:11:78:22:4b:3e:02:67:
         2a:3a:00:ad:73:54:6b:a4:ff:75:64:7a:d9:3c:7e:9d:df:7c:
         3f:e7:3d:3e:02:d2:5c:9c:6b:7b:07:71:74:4c:35:08:72:41:
         08:00:b0:5e:88:68:42:c4:e5:1d:e7:50:54:01:24:91:17:57:
         6e:b8:b8:d9:ec:20:ef:26:30:ae:f4:09:06:5f:49:5b:17:45:
         6e:b7:32:f9:c4:55:d7:2c:28:f5:ad:fe:84:f7:1a:d1:e3:92:
         27:47:36:fa:26:5b:31:07:c0:53:5e:e6:39:f1:a2:cb:0c:0a:
         e8:f0:ec:d4:00:78:a0:e7:fe:e7:9e:3d:4b:f9:84:84:cc:d6:
         da:1b:01:63:0a:45:cd:ed:49:61:54:d2:e9:1f:a5:37:69:d3:
         b4:aa:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:51 2026 by rpki-client