Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
File:                     67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json)
Hash identifier:          ZPiDocklBQ+LkCf6G07JHGH/yfApHAaIR4Swg1gtkEM=
Subject key identifier:   51:28:85:0B:10:A5:F3:E8:2E:9E:F7:64:81:B6:6F:D2:C2:E1:D2:94
Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
Certificate issuer:       /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Certificate serial:       088D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
Manifest number:          095D
Signing time:             Tue 22 Sep 2026 20:35:04 +0000
Manifest this update:     Tue 22 Sep 2026 20:35:03 +0000
Manifest next update:     Tue 29 Sep 2026 20:35:03 +0000
Files and hashes:         1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: 2VwvkjzTIfmI8ElfZ/eB1ZEN+4H7acTvoBPQs85aRzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
        Validity
            Not Before: Sep 22 20:35:03 2026 GMT
            Not After : Sep 29 20:35:03 2026 GMT
        Subject: CN=6ab2e678-5830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:b0:87:3d:7d:a9:3e:15:a9:c7:c4:59:b6:
                    07:fb:d2:e7:15:b2:ec:e6:1e:88:a3:b4:d4:4d:94:
                    50:07:21:9f:d0:a9:4d:33:be:88:90:dc:50:54:41:
                    d1:db:77:c8:10:45:60:dd:78:3e:1b:12:39:e3:c4:
                    2f:f1:2d:55:68:c9:cb:6a:24:db:45:d8:bc:33:c8:
                    f4:03:84:ab:e9:a8:02:27:09:b4:0f:6e:26:dd:f1:
                    f8:5e:43:2f:d3:fa:a2:7c:5f:0f:ec:d2:39:2f:1a:
                    8e:95:b7:87:8d:b5:1a:85:ed:ae:45:1b:14:01:76:
                    8e:1f:84:05:d4:16:54:2c:f7:9a:28:6e:61:c6:6a:
                    8a:de:23:db:05:fd:ff:d7:7f:ea:cb:38:f6:bc:27:
                    18:90:78:ed:9b:3f:ff:96:2b:5f:ec:ad:c5:3e:93:
                    e1:81:e3:97:22:dd:32:8c:71:ce:98:9f:87:b0:b0:
                    66:c3:ef:dc:fe:af:a8:38:68:58:7d:aa:90:ee:a2:
                    7e:42:b8:98:e0:3c:80:c7:38:ab:a3:a3:c0:d4:fb:
                    75:4c:8f:84:20:9b:15:11:41:06:66:29:73:73:74:
                    d3:f1:ff:04:b1:3b:30:35:79:18:ff:92:3c:53:5f:
                    c4:9f:82:f3:bf:8f:ec:29:1e:c5:44:78:79:c8:d7:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:28:85:0B:10:A5:F3:E8:2E:9E:F7:64:81:B6:6F:D2:C2:E1:D2:94
            X509v3 Authority Key Identifier:
                keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:43:81:82:db:59:28:6f:a8:42:3a:d2:a4:5a:72:58:a7:96:
         2c:e8:e1:b8:77:f0:65:43:a2:bf:46:fe:99:ec:f9:b2:aa:ad:
         e6:ee:b9:7f:b8:19:dc:ab:94:d8:ec:b6:d6:e8:59:d6:1a:36:
         17:1d:2d:b6:17:e0:81:a1:07:e1:fd:bf:e1:2d:81:bf:7b:a4:
         de:cd:03:37:44:73:46:ee:f5:97:80:45:8a:d3:d6:37:3e:73:
         2c:6d:bc:d1:fc:6f:ca:10:76:65:e5:26:cf:da:2d:ce:a2:2d:
         bf:5d:68:16:7c:63:b3:0a:ce:88:9c:86:a7:c3:42:e0:35:a6:
         84:cf:a9:0c:3f:e5:f1:dc:30:e1:d0:1c:ec:ae:aa:1d:1e:1b:
         5f:11:41:88:06:5f:3f:2a:e5:2a:47:1c:24:dd:17:cb:df:77:
         d6:48:56:0c:97:0a:ab:7b:7d:e5:9d:c9:ca:d5:b8:d3:80:17:
         8f:16:89:19:f6:82:0a:40:e7:87:4a:df:3e:28:4b:a6:b6:25:
         23:7a:86:ae:c6:4d:98:33:30:2e:d9:45:56:83:b8:d2:08:b0:
         a1:06:d9:d1:a6:0e:73:48:b9:ee:66:e9:a5:2f:6f:17:24:ed:
         e1:f2:5b:0a:97:29:78:08:db:63:31:57:5f:94:bf:c2:0b:d2:
         e8:f2:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:07:50 2026 by rpki-client