Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File:                     A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier:          dXN8W5Rq2m5eu9d8u2QFG9F9STfaWJl+jpX3sPkKYZ0=
Subject key identifier:   55:06:EA:5D:7B:66:6F:21:29:33:3E:85:BC:ED:67:6B:C7:28:00:07
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number:          D4
Signing time:             Fri 25 Sep 2026 06:47:14 +0000
Manifest this update:     Fri 25 Sep 2026 06:47:13 +0000
Manifest next update:     Fri 02 Oct 2026 06:47:13 +0000
Files and hashes:         1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: DiGZ9JzaRzWrP/CQmXXybOhv+/jXoXO5XVBgJ7h0Mck=)
                          2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: d5dQQKV6mBbhcnZfLSqq6nPzbtvHpYbUsS3qHsfGmHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: Sep 25 06:47:13 2026 GMT
            Not After : Oct  2 06:47:13 2026 GMT
        Subject: CN=6ab618f2-88ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:c1:38:c0:bd:f3:98:72:55:f1:30:67:ad:
                    8d:4c:df:f0:12:4e:c7:6f:b2:e2:ff:bf:f1:71:74:
                    ab:70:01:d0:51:4a:dc:47:f4:4b:7d:3d:58:30:de:
                    11:29:8a:d6:c9:2a:84:35:00:fb:71:c1:f6:1f:c7:
                    eb:c8:c3:92:0e:25:5a:3f:62:66:1b:40:3c:62:3d:
                    61:4c:5b:ed:5f:e6:4e:96:e7:92:a4:fb:0f:6d:25:
                    63:31:cd:9f:f8:b2:aa:7f:07:0e:61:27:ed:49:a0:
                    fe:24:91:10:0e:e0:e9:61:8c:d3:d2:95:07:71:38:
                    c3:b9:5a:02:50:97:a5:0a:bb:f0:d3:27:7f:cc:d4:
                    6d:d2:db:1c:59:dd:06:fa:a2:7d:70:14:fc:52:48:
                    de:85:2c:ef:4e:92:57:83:88:cc:d0:c7:6e:d4:9c:
                    d2:8f:d5:d1:85:7e:2b:1d:d3:ee:7e:38:e9:ce:dd:
                    2f:fa:19:a2:11:87:53:fd:0f:65:6e:2d:25:1c:5d:
                    27:cf:f4:06:f2:20:67:ec:0a:7a:6e:1f:22:43:ad:
                    47:9f:36:4a:4a:4c:a3:7c:57:af:5c:c3:0d:42:22:
                    2a:5e:3c:d6:02:a8:fc:2d:67:4d:bb:f2:2c:c1:76:
                    5a:59:2f:7b:2c:f8:97:83:1f:2e:44:f8:18:ce:b8:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:EA:5D:7B:66:6F:21:29:33:3E:85:BC:ED:67:6B:C7:28:00:07
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:21:37:ed:6a:c8:1c:08:3a:c6:d2:69:f1:69:b3:af:e7:
         c2:1e:d0:d3:91:f7:6b:ab:4f:f1:07:8d:8a:00:a5:75:ce:97:
         12:c6:27:ee:42:51:cf:8e:7b:b7:4f:84:b2:5e:57:54:5f:b4:
         3a:d9:1f:93:33:9b:88:a5:e3:ff:72:30:18:99:ef:b2:1b:a5:
         ae:a9:e5:9f:9b:ab:17:62:ec:a9:50:0e:96:c3:3b:aa:c8:6c:
         eb:8f:4f:55:e8:8a:a8:39:51:97:28:4e:b1:f3:48:5a:d2:07:
         84:37:4d:ca:76:ed:12:27:9b:b2:48:f8:a4:d0:b5:2d:de:d3:
         b5:02:75:b4:cd:e5:b6:f1:6b:55:c6:98:ef:87:22:9e:67:7f:
         cf:99:ad:b5:86:17:7b:c5:ad:dd:37:c9:1b:f4:e0:8c:95:28:
         bf:50:0c:2d:0d:39:8c:68:11:92:75:fe:cd:d3:7a:c8:49:eb:
         47:0e:9f:66:4a:f3:4e:e7:9e:40:ad:37:96:b1:18:ea:57:fb:
         28:a4:1b:30:6a:7e:76:8b:94:c6:f2:7c:c9:ca:b2:f4:ea:cd:
         20:9c:2c:2b:dd:41:6a:4d:9d:3d:3f:5a:36:7a:8a:72:0e:e5:
         6b:ec:a9:18:43:82:fb:ca:ae:0a:8b:bf:ba:fc:f0:3d:94:e7:
         5c:de:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:19:54 2026 by rpki-client