Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
File:                     ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json)
Hash identifier:          7YOYbQDGKtaSMA5dsO+aakHgG3HOFoMQgohUgXfasRo=
Subject key identifier:   C5:0C:6A:43:5E:21:45:6F:A3:3A:71:F1:42:72:3D:AB:04:79:F1:11
Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
Certificate issuer:       /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Certificate serial:       02E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
Manifest number:          02DB
Signing time:             Sun 27 Sep 2026 01:25:46 +0000
Manifest this update:     Sun 27 Sep 2026 01:25:45 +0000
Manifest next update:     Sun 04 Oct 2026 01:25:45 +0000
Files and hashes:         1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: fEzsU5aLVy+v674XM2I+s8vzfz+N6G3AhYBKR6EvP/0=)
                          2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: CGlw2ssNfHPHMotdeBql7u15Li0tz079YSiw0LPLu/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
                          rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
        Validity
            Not Before: Sep 27 01:25:45 2026 GMT
            Not After : Oct  4 01:25:45 2026 GMT
        Subject: CN=6ab8709a-bcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:ce:25:13:2e:10:b6:e9:9d:da:39:a8:47:
                    11:ce:8a:7b:9c:6d:65:2f:57:18:98:06:1b:74:8a:
                    0b:0a:66:11:82:ca:52:dc:da:eb:5b:5b:8e:d1:a2:
                    55:96:49:16:ee:32:47:35:8f:08:35:bc:9f:6b:a5:
                    5f:8c:15:77:31:18:30:fc:66:f4:f4:74:49:9b:fc:
                    7d:68:bb:77:9a:05:4a:1b:97:5e:54:15:3b:19:87:
                    0f:10:9f:41:aa:8c:1f:99:39:e8:7f:c5:92:ac:b7:
                    99:d6:5d:73:e7:82:8b:1b:ed:b1:50:52:da:18:1f:
                    25:31:25:aa:86:28:11:b1:52:ff:2b:ad:b6:96:85:
                    62:f5:63:b2:3d:18:d7:56:a9:3b:00:6e:f1:fe:42:
                    af:43:0d:1e:06:ae:cb:e3:c8:a0:08:43:16:e9:26:
                    be:a6:e3:45:18:de:4b:b6:1d:85:61:84:32:67:0b:
                    b0:00:7e:22:a8:f5:d9:d2:0b:40:18:0f:0a:2f:91:
                    b6:c6:78:43:a0:9c:02:c5:fd:85:0f:d9:62:0a:48:
                    b2:c6:c5:84:0f:b8:48:69:8a:0f:3b:f3:7e:f2:54:
                    7f:29:d0:6d:da:67:4a:99:4c:69:47:bd:ef:02:3e:
                    4c:30:ea:9b:b0:d9:e0:44:3f:cf:18:72:e1:c6:0a:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:6A:43:5E:21:45:6F:A3:3A:71:F1:42:72:3D:AB:04:79:F1:11
            X509v3 Authority Key Identifier:
                keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:8a:5e:a5:7c:5f:bc:1d:a9:d8:5e:75:1c:d9:23:39:9a:
         a1:82:11:bf:51:e6:8c:59:7a:77:df:47:e1:c3:00:ae:b4:b5:
         e0:95:49:6a:3e:71:c0:19:7c:9e:57:ed:2e:2c:7f:66:47:9b:
         25:1a:5e:14:30:78:bf:d2:17:67:54:bb:ca:05:f7:e1:47:d2:
         04:3c:ef:f6:89:12:9a:ba:48:7e:0c:04:f7:19:41:ae:7b:20:
         43:b2:46:f9:4a:36:23:9b:9c:03:13:43:82:7e:43:af:7a:35:
         f8:0e:1c:f5:68:85:c1:aa:af:10:18:09:a8:ac:7e:88:6c:e9:
         44:d4:82:12:69:41:ea:e3:d0:bd:12:2b:84:34:8f:30:81:63:
         33:9e:42:f5:6a:25:f4:5a:d6:95:56:a5:cf:12:3e:4b:9d:9b:
         bc:af:5d:80:fe:a3:b4:66:2c:5c:94:d9:ec:10:fa:29:ff:2e:
         f7:1c:f2:0a:6b:5f:66:b8:8f:0a:ea:5e:87:47:2e:5b:66:91:
         95:97:a4:1d:17:18:25:1f:55:e1:22:30:99:0e:2f:f6:a4:34:
         31:0f:94:21:bd:e9:30:83:22:55:1d:9b:8c:b0:a4:01:9f:e1:
         c5:1f:cf:27:2b:fb:a2:4e:bd:07:1d:02:64:82:ca:07:be:cb:
         4e:83:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:01:12 2026 by rpki-client