Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
File:                     5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json)
Hash identifier:          gWn7FzC6CmThQoI8r+OEa83cLpuELAcZZdJF1V4ctno=
Subject key identifier:   C1:B9:F7:D3:43:DA:5F:65:AD:E0:64:FA:60:1F:CC:82:7B:1B:9C:9F
Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
Certificate issuer:       /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
Manifest number:          BC
Signing time:             Sun 27 Sep 2026 07:27:53 +0000
Manifest this update:     Sun 27 Sep 2026 07:27:53 +0000
Manifest next update:     Sun 04 Oct 2026 07:27:53 +0000
Files and hashes:         1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: GVXZOixd+k9IGdj6uxdfiwsTREtnrubWeOQlK61Koks=)
                          2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: ifQONvULGYpYHvM+bvP3PgrTKc94bp+crLb4/d1Vd4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
                          rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
        Validity
            Not Before: Sep 27 07:27:53 2026 GMT
            Not After : Oct  4 07:27:53 2026 GMT
        Subject: CN=6ab8c579-fbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:62:2c:c1:df:07:13:c9:21:4b:0e:25:3c:
                    87:38:f8:a7:2f:a5:33:e8:cb:61:e2:06:75:68:c5:
                    8b:29:90:81:1f:70:d6:fa:e7:86:44:46:2f:5f:ef:
                    af:d0:25:f8:60:8c:48:6a:e5:27:8e:a3:79:a1:3f:
                    9d:e5:2c:4b:83:49:48:b8:68:e0:3a:44:ee:57:aa:
                    b9:df:58:a7:0d:a4:00:18:36:00:fd:93:03:52:d2:
                    e9:2e:b4:63:30:49:98:c5:01:df:28:1a:c1:19:1b:
                    4a:7e:be:20:49:d8:4f:da:c1:00:b6:65:1c:fd:26:
                    dd:d5:06:5b:51:7b:bb:dc:b9:a2:be:e4:8d:66:ef:
                    39:e6:68:b3:d0:cd:c1:70:a9:36:21:24:f6:34:db:
                    7e:30:4e:dd:e0:37:d4:ef:ae:fc:ab:96:f1:07:3a:
                    6f:23:f3:34:ae:38:fb:9f:55:95:2e:c9:1b:ff:f4:
                    7b:10:1d:78:bf:22:eb:96:15:6a:d8:ec:c0:e4:95:
                    5b:9a:26:ca:e3:75:6c:e2:6c:cd:41:c4:a5:e2:7f:
                    da:5c:45:03:fa:b0:d4:44:01:00:b7:b6:ce:02:55:
                    3b:b6:f3:24:10:9e:bd:55:d7:8a:fc:43:ca:c2:9f:
                    53:78:aa:89:00:80:63:a2:77:7d:20:ed:26:2b:35:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:F7:D3:43:DA:5F:65:AD:E0:64:FA:60:1F:CC:82:7B:1B:9C:9F
            X509v3 Authority Key Identifier:
                keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:54:40:78:b5:a6:c5:af:ea:61:9d:37:a6:57:26:0a:06:
         d8:97:4b:ea:c5:7f:08:0a:be:1b:87:33:a8:a6:9e:a5:76:3a:
         35:5d:ca:c8:11:5d:1f:71:97:a3:af:df:79:24:da:f0:bb:9c:
         87:45:bc:03:58:3e:74:7a:4a:4d:f1:61:5b:0a:42:e5:96:4c:
         61:57:09:eb:b5:af:a2:fa:8b:5e:08:15:c6:93:09:58:88:0b:
         55:62:17:9f:2f:1e:71:b6:4d:4c:23:1f:4a:ce:75:50:b1:da:
         45:f5:bb:a2:08:94:64:69:c4:b6:3f:0e:90:fa:0d:c2:6d:5a:
         e0:28:bc:05:1e:77:9d:ae:97:d1:0c:b6:3c:7e:42:ba:97:47:
         f8:83:52:6a:ab:bc:56:c8:b3:16:d0:49:67:02:6c:43:69:bd:
         db:b9:a2:9f:43:90:0e:ea:2d:8a:5c:31:04:12:f2:27:b1:95:
         7b:11:85:d7:f2:a9:a3:fb:ea:da:2f:b2:24:d6:53:68:3c:5c:
         87:63:bb:f7:5c:4f:54:0c:e6:69:d6:a5:df:6a:cf:13:81:11:
         77:b6:44:33:0c:38:7b:c7:ec:38:9d:e8:c3:4d:28:88:b6:98:
         25:2a:a4:d2:0b:c9:01:07:28:fe:0c:0b:37:87:d4:c3:40:ae:
         df:14:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:43:36 2026 by rpki-client