Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
File:                     XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json)
Hash identifier:          NobioJLNxMT8c6xAlafalyR92vaErpvWYS/g/8aXbyg=
Subject key identifier:   17:4D:C2:BC:62:EE:43:B0:5C:45:5A:90:8E:10:4C:D3:C4:62:65:4E
Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F
Certificate issuer:       /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
Manifest number:          0194
Signing time:             Wed 23 Sep 2026 04:16:59 +0000
Manifest this update:     Wed 23 Sep 2026 04:16:58 +0000
Manifest next update:     Wed 30 Sep 2026 04:16:58 +0000
Files and hashes:         1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: 2maevVPK9ZAMoJWk5ZKSiHGdg1oaepknTu4WzQZeXdk=)
                          2: F0FCC9ECABF411F0B9E4F837C4F9AE02.roa (hash: yjLxdwzIuckVEpvjPtBFZMr56OhqZEN8C8fQw3Xhxos=)
                          3: D956F03AAB0211F083CD7E11C4F9AE02.roa (hash: rrKRhHeiohcyIqeCIJv+44R0SbRHPDcNTcaSyqFnNBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl
                          rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F
        Validity
            Not Before: Sep 23 04:16:58 2026 GMT
            Not After : Sep 30 04:16:58 2026 GMT
        Subject: CN=6ab352bb-090c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:8f:a9:41:e4:f1:b8:63:e3:d2:52:d6:3a:
                    74:be:f5:1d:97:69:68:67:d8:a8:e2:88:d3:57:2a:
                    b3:09:b0:cd:82:2d:e4:b0:2d:b3:ef:29:0d:62:32:
                    c1:db:2d:ad:74:6f:ee:76:b6:2b:7d:db:f7:08:bc:
                    33:0d:55:e4:4b:70:67:8d:c6:a7:42:c0:00:2d:ff:
                    87:33:cc:94:70:df:74:64:83:b4:2c:13:e7:c1:19:
                    1e:17:a5:92:1a:9b:29:2d:47:e3:07:95:b9:50:ba:
                    32:cf:91:7a:17:38:fc:45:f1:43:82:99:c9:ad:71:
                    b4:24:34:a4:93:cb:4e:11:e7:0f:b2:e2:0f:4f:01:
                    4d:32:c2:08:05:99:e9:0a:6b:5b:58:c6:8e:b2:96:
                    e4:4b:cf:3b:b0:dc:6a:4e:72:96:a2:00:09:bb:0a:
                    0c:d1:a0:19:91:7e:24:e5:64:80:fb:fc:08:75:28:
                    5e:9f:83:79:de:9f:bb:b5:96:9d:0f:b5:e2:4d:2a:
                    80:8f:d3:bd:98:0c:bc:e9:29:6b:19:dd:85:5d:06:
                    05:47:1d:6e:d1:0f:39:b0:ab:ff:13:6a:9a:ae:d7:
                    fa:fc:c1:8b:d0:64:e3:0b:33:ed:c6:e5:2a:bf:85:
                    1e:22:5f:e9:e7:95:a2:94:8e:9c:73:18:f7:7c:d2:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:C2:BC:62:EE:43:B0:5C:45:5A:90:8E:10:4C:D3:C4:62:65:4E
            X509v3 Authority Key Identifier:
                keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:76:3f:6a:04:60:3a:92:6c:c0:bf:fc:42:45:3f:27:52:
         6b:80:8c:61:a9:4d:45:89:b8:76:17:94:92:fe:ed:f2:c7:24:
         61:79:95:d3:2b:01:d2:9f:53:c9:61:63:0d:b1:be:2d:db:00:
         04:31:b7:f1:67:eb:87:f9:7b:0c:3c:bb:08:9c:96:fb:aa:81:
         5d:25:47:14:f7:ab:87:82:95:f7:d1:03:6d:48:eb:43:f0:2a:
         ff:55:ae:7f:c8:6c:6d:71:96:e5:e1:77:27:68:7c:8f:b2:3d:
         45:8f:d6:29:02:68:68:f2:4e:d2:a0:eb:d9:9b:2a:8a:27:15:
         a5:fe:7b:b1:96:b8:1c:65:63:0b:8f:27:6d:e4:1b:6f:11:2b:
         27:dc:b1:a1:c9:c3:d7:23:69:03:70:97:8b:4d:95:2a:41:f8:
         75:e6:7e:80:e4:da:98:d1:dc:2a:58:f6:c3:f6:14:96:41:a7:
         e4:5b:d0:11:e6:a4:ed:01:44:bc:5b:60:9b:90:08:83:1f:31:
         c2:7a:2b:65:dc:9a:fd:a1:1b:40:42:97:8e:6f:38:fc:34:0e:
         f8:45:84:94:f5:29:8b:1f:56:eb:7d:27:11:4b:dd:15:83:63:
         18:38:1e:5e:1b:27:93:08:e2:93:dd:65:e7:e4:5f:5a:6f:d7:
         59:83:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:55:51 2026 by rpki-client