Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
File:                     SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json)
Hash identifier:          9BrTbL/5SZMjz04hmWT49VJE7qIXOjt8DT/rnAkC8do=
Subject key identifier:   15:35:CF:BC:38:C7:DC:9A:C8:C2:D6:8A:7B:ED:CA:88:F4:7D:F3:00
Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
Certificate issuer:       /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
Manifest number:          89
Signing time:             Sun 27 Sep 2026 08:10:56 +0000
Manifest this update:     Sun 27 Sep 2026 08:10:55 +0000
Manifest next update:     Sun 04 Oct 2026 08:10:55 +0000
Files and hashes:         1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: SVa/OkXvYyKQIj2ZdCkwstvZ+mWElpwPpIcgVg20eGY=)
                          2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
        Validity
            Not Before: Sep 27 08:10:55 2026 GMT
            Not After : Oct  4 08:10:55 2026 GMT
        Subject: CN=6ab8cf8f-42a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:3d:1e:ed:9a:f1:a2:ac:9f:07:c6:cc:2a:
                    9e:aa:16:e5:5e:13:e0:1e:51:48:29:5f:86:db:ae:
                    88:8e:ab:ca:4d:4b:36:b1:5c:25:6b:94:e8:db:a8:
                    d0:a9:55:46:e5:16:e1:4b:b0:e4:53:d5:b8:6d:58:
                    99:54:70:d3:bf:14:b7:b6:57:59:66:6d:9b:e0:5e:
                    8a:e2:4a:5f:e1:3c:80:cf:1d:8f:11:f1:4f:05:46:
                    49:94:e0:59:0b:5f:07:1d:f7:68:44:d2:0c:23:a6:
                    fe:6a:a9:4c:ca:e0:88:72:9f:97:d9:60:d4:fa:84:
                    d6:37:16:42:9d:34:e9:e5:1e:59:0f:58:fd:43:10:
                    95:e3:e4:e9:4e:a6:43:f1:04:0b:eb:c3:63:0b:a2:
                    70:29:87:60:70:ec:79:ed:24:ed:84:84:91:63:d3:
                    d5:e7:78:59:9f:3c:4f:fc:a9:d1:9a:8b:fa:a6:1e:
                    46:76:0d:3b:1b:14:0c:f5:3a:04:66:72:28:16:98:
                    ef:76:dc:05:d8:e2:35:ef:76:aa:01:12:d2:d6:fa:
                    68:15:60:98:08:c8:84:01:a7:af:b8:60:ff:af:c9:
                    7b:97:6b:85:9c:25:7c:73:f8:f6:45:79:15:fd:d6:
                    4f:62:8e:0f:ef:79:fb:b1:84:7e:36:51:8e:68:b1:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:CF:BC:38:C7:DC:9A:C8:C2:D6:8A:7B:ED:CA:88:F4:7D:F3:00
            X509v3 Authority Key Identifier:
                keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:02:8a:23:e8:e5:ae:6d:25:3d:6f:1e:37:70:40:86:84:e5:
         f0:2f:0e:b1:83:2a:91:c9:2b:e8:38:c7:3f:8f:be:3a:34:ea:
         0b:08:f0:7b:f2:50:4a:96:ec:77:28:79:9e:9f:ef:e1:25:c0:
         2b:06:93:2f:4d:2f:8f:7b:f6:6c:17:c1:bc:c7:e9:84:96:8b:
         7b:82:28:3f:7e:30:45:83:7d:4a:3d:18:f8:25:8d:6f:0f:78:
         31:da:87:47:f4:cf:59:2b:fb:a1:bd:13:cf:52:bd:a6:43:73:
         54:4d:5b:9f:b8:21:40:05:5c:67:4c:95:91:c4:ca:12:67:f8:
         14:f9:b5:aa:4d:77:3c:8d:22:d0:d6:91:ee:1b:7d:0c:b0:2a:
         18:bc:4a:d1:51:ad:38:45:79:ae:ff:04:5b:ea:ba:b7:c2:ac:
         16:5d:73:20:1d:bf:c1:ef:57:c6:57:68:7d:b9:6e:7d:a8:d7:
         83:c4:54:d8:f4:e0:8b:f1:d1:83:a1:e6:6d:d2:cd:62:29:ed:
         da:25:6f:2f:83:95:24:76:c0:81:3a:20:36:33:6b:c1:26:9f:
         f6:83:26:c1:f9:0a:40:ac:61:46:f0:68:97:f6:70:91:0a:eb:
         8b:ba:57:04:e4:88:b0:70:ce:0f:37:26:63:7b:c0:d3:49:f6:
         c3:55:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:08:13 2026 by rpki-client