Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File:                     pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier:          Lk5GGNrPKGfQ+d0cOi9b8/c+yXYPO66OJNSQtl4R3p8=
Subject key identifier:   69:23:31:39:8C:A9:2D:9F:98:C8:33:6C:70:D8:88:54:CD:7C:DE:3B
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer:       /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number:          98
Signing time:             Fri 25 Sep 2026 07:29:54 +0000
Manifest this update:     Fri 25 Sep 2026 07:29:54 +0000
Manifest next update:     Fri 02 Oct 2026 07:29:54 +0000
Files and hashes:         1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: sKrA9i/2mb2IStJ0JVSTGMZfO8JdxI4tEsdKYFJKPdQ=)
                          2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
        Validity
            Not Before: Sep 25 07:29:54 2026 GMT
            Not After : Oct  2 07:29:54 2026 GMT
        Subject: CN=6ab622f2-0a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:17:c2:69:ed:81:37:2c:f3:85:dd:36:f5:
                    99:f4:5b:56:35:4e:4f:fd:34:82:de:d6:7a:61:80:
                    42:4b:31:6b:0e:5b:9e:93:20:2a:35:e0:e4:c1:f8:
                    af:12:bb:b6:ab:fe:ea:d8:da:f5:d1:b0:e2:3c:ef:
                    9a:8a:1d:66:b4:13:45:6a:b5:93:11:de:ac:1a:ea:
                    da:ae:cf:eb:24:2d:c1:ae:e0:d1:d0:ae:fb:11:da:
                    09:24:b4:db:38:34:f6:39:76:7e:33:e0:af:94:c9:
                    3e:84:8f:d1:6d:e2:ec:89:18:c0:f5:ec:3a:e8:2c:
                    d1:41:87:d6:04:2c:4a:e8:5f:bf:d5:b7:5c:80:58:
                    f4:8f:e7:0d:62:ed:92:76:4e:ee:ba:92:83:05:1f:
                    f8:90:cb:59:91:ee:a1:e3:39:3f:6e:05:3d:36:4f:
                    78:bd:38:2b:ee:77:e4:d3:0c:08:db:0c:2e:ee:4c:
                    53:a5:51:05:42:ba:c0:82:1c:b7:20:6f:6b:89:f4:
                    91:14:dd:b4:9e:80:99:a0:75:ff:e6:71:bc:52:0b:
                    cf:f1:3f:6f:4f:1b:42:09:07:40:95:2f:0a:ff:44:
                    b0:7e:c1:f6:23:7b:70:26:08:6d:4e:d5:1c:79:8e:
                    d8:c1:d4:ce:bb:65:d5:88:ae:01:c0:b5:29:de:df:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:23:31:39:8C:A9:2D:9F:98:C8:33:6C:70:D8:88:54:CD:7C:DE:3B
            X509v3 Authority Key Identifier:
                keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:e1:30:1e:44:2d:39:2d:64:75:c3:78:eb:1e:df:c6:9b:
         1f:53:4a:97:ac:21:1b:84:b3:dc:9c:6a:96:c4:56:a6:c4:a7:
         2d:86:4b:9a:d7:63:15:8b:83:37:fe:f4:f9:5e:87:69:60:49:
         34:34:41:ae:94:52:ee:1d:1d:2d:ee:2a:c2:69:fa:55:27:b8:
         84:6b:66:56:2e:20:6a:bd:19:fa:eb:99:db:dd:3d:a2:db:96:
         63:ed:cc:ad:3a:f7:f0:b3:3c:48:e1:f5:2d:8b:cc:50:c7:aa:
         cb:e2:c7:be:a8:1f:38:70:7e:92:b5:87:7a:e0:10:b1:ff:c2:
         00:3f:08:10:e0:95:79:ad:9d:41:bd:55:c6:8d:f1:66:c6:5b:
         76:48:27:d4:18:e2:71:09:42:b8:b2:e6:b4:79:c8:96:12:f4:
         d7:c7:f2:64:d7:ee:5f:8b:1c:88:64:6d:42:3b:6d:82:31:b9:
         80:20:d2:0b:a8:f0:fb:81:6b:43:a8:15:78:71:b1:20:5f:3e:
         06:a3:85:c2:89:9f:e6:e8:58:a5:78:ce:cf:81:1c:79:dc:3d:
         d5:9f:17:4f:14:53:0f:ba:f7:e1:e0:ce:46:ff:f6:0a:2d:b3:
         38:ac:6f:2b:8e:9e:7b:89:8e:b4:3e:de:6e:5e:b9:93:6e:78:
         9a:59:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:42:02 2026 by rpki-client