Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File:                     Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier:          lU6jEl6LxmTqNYEUDjS47PAwwrqpi/+ycMcojlSZQ2c=
Subject key identifier:   E1:28:8D:8E:7D:F8:DE:8A:1A:8F:07:B9:A3:5D:CF:FC:AC:B5:A4:27
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer:       /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial:       0BFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number:          0BED
Signing time:             Tue 22 Sep 2026 18:49:38 +0000
Manifest this update:     Tue 22 Sep 2026 18:49:37 +0000
Manifest next update:     Tue 29 Sep 2026 18:49:37 +0000
Files and hashes:         1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: GckIo5iZSE2mysEV2ktqDNg+Tmi2M8ipYit5Gz98/YI=)
                          2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3069 (0xbfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
        Validity
            Not Before: Sep 22 18:49:37 2026 GMT
            Not After : Sep 29 18:49:37 2026 GMT
        Subject: CN=6ab2cdc2-2948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:9e:f6:5b:d8:15:b3:90:9a:8d:57:30:c2:
                    17:a9:48:da:e0:4c:28:ce:7e:14:6f:32:af:44:a6:
                    be:c2:40:2a:cb:d2:05:4e:ec:f5:b0:50:1f:af:0c:
                    c5:47:6a:f6:60:34:f2:2d:97:c4:e9:4f:79:47:88:
                    4a:23:58:ca:63:30:f8:0f:c4:47:c3:33:8b:7e:64:
                    b0:eb:db:57:bb:97:f8:e1:0d:b8:f2:12:99:a7:16:
                    8b:90:b6:ea:1f:69:66:ef:09:59:d2:c1:5f:48:a5:
                    03:c9:a5:90:94:cc:8c:ca:d2:07:2e:2f:8a:bf:3a:
                    b7:62:a8:f3:e5:f2:c5:6b:32:28:51:5a:2f:8f:ae:
                    d6:d3:e9:0b:ef:42:7d:7a:f3:5e:08:b9:29:9a:f9:
                    0c:db:31:a3:a7:0b:8f:65:f7:84:a2:32:3b:eb:ab:
                    13:42:ee:93:e4:f7:fc:b9:ce:54:bc:6e:4d:bf:26:
                    2d:b1:e4:47:95:20:f1:bc:7a:fd:2a:0e:ac:a0:8e:
                    15:a6:ca:10:20:4d:aa:68:f7:e6:3f:8f:f8:a6:3b:
                    a4:09:a4:16:b3:05:ec:44:40:1e:82:e1:28:50:6c:
                    3f:7c:d1:e9:14:53:b3:44:a0:80:8d:30:fc:07:6a:
                    83:05:57:42:b2:a1:ab:c8:70:a6:b4:90:e4:c1:4d:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:8D:8E:7D:F8:DE:8A:1A:8F:07:B9:A3:5D:CF:FC:AC:B5:A4:27
            X509v3 Authority Key Identifier:
                keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:ad:f9:27:5c:2f:87:5c:6f:f9:b6:24:05:31:00:40:bf:
         cd:9a:ac:02:0a:84:d7:8d:9f:f7:c9:17:a6:41:44:d2:a0:97:
         27:0f:1f:72:66:51:b5:14:ab:5a:7c:09:d5:5d:9c:ae:a7:11:
         c7:44:a5:62:e9:79:b7:96:32:86:30:5e:32:db:12:44:4f:4b:
         18:bb:37:74:95:53:ed:f1:a6:2f:70:32:5c:09:a1:6b:44:9a:
         59:b5:39:a4:af:b2:e8:86:10:b6:36:7b:8d:20:45:7c:56:95:
         cd:aa:d6:6f:3e:bd:38:8a:d2:59:b1:f5:ef:5a:08:4e:b2:a1:
         c6:f1:82:2d:69:fb:66:eb:2f:c6:a9:4e:d8:88:ce:55:3b:51:
         94:e1:3a:31:ab:95:c8:9d:bd:b1:b8:ea:42:e0:0b:a4:2b:71:
         35:e3:2f:cf:32:ca:01:67:7c:48:69:85:3a:35:c9:fe:6d:7b:
         6d:d2:b6:7d:da:f4:da:3c:20:45:91:27:3e:32:63:41:f7:cb:
         f7:fe:9d:95:11:1f:2a:68:66:d7:ad:51:ce:1e:ed:3c:84:bd:
         7e:30:42:a2:56:16:79:44:89:f0:b0:71:cc:34:da:8e:b7:cf:
         0d:0f:13:83:b3:58:c4:74:d6:c2:fd:a4:f6:10:7b:74:1c:58:
         22:43:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:23:02 2026 by rpki-client