Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File:                     kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier:          NOWriq/KUtguRNHZE+f0FxYA8etLwVV0LXFDs0GVyjE=
Subject key identifier:   75:98:E9:E3:FF:93:AC:BF:5C:7F:5B:ED:35:41:E9:12:9F:AA:57:D7
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number:          053B
Signing time:             Thu 24 Sep 2026 23:23:11 +0000
Manifest this update:     Thu 24 Sep 2026 23:23:10 +0000
Manifest next update:     Thu 01 Oct 2026 23:23:10 +0000
Files and hashes:         1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: o0n02qGJF7ZLQ8rnTddg7n1IT0mN4mEqP/0GbfniSFI=)
                          2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
                          3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Sep 24 23:23:10 2026 GMT
            Not After : Oct  1 23:23:10 2026 GMT
        Subject: CN=6ab5b0df-7c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:af:d5:9a:12:0e:8a:61:0f:57:87:ec:03:
                    af:ae:ac:4b:02:a2:9c:e7:17:d6:4c:32:09:89:c5:
                    da:ca:79:50:3d:46:97:33:31:f2:5d:0c:2d:00:f7:
                    c9:bc:df:1f:e7:15:67:a2:03:d7:f5:36:5d:58:fa:
                    a4:fa:6d:bd:5e:0d:1c:97:34:94:46:89:d1:3d:23:
                    35:8c:b8:7e:ee:ff:e7:99:e3:a7:d9:40:6c:a2:dc:
                    e3:58:99:1a:de:34:4a:e3:94:bc:71:80:b2:72:e1:
                    9b:a1:24:12:80:43:18:40:8b:c4:84:ca:ae:50:77:
                    e3:c7:ef:83:bb:48:76:64:3f:93:9f:42:99:86:9d:
                    a0:5b:c4:70:03:cc:eb:99:14:89:a4:6c:9b:c9:7c:
                    e8:db:af:11:81:f4:47:94:64:67:c4:26:ed:e7:cd:
                    07:f2:f3:6a:a5:01:66:27:fd:01:d8:69:1b:a5:fd:
                    2b:44:2e:e3:75:d2:10:27:b1:9b:79:77:65:17:da:
                    f4:3c:f7:6b:2a:5c:2e:09:d4:d1:43:60:92:75:79:
                    8b:e5:31:77:b7:96:d2:53:95:74:81:55:ec:8a:d4:
                    de:da:80:21:71:41:74:a8:39:9d:75:c6:1e:2b:6c:
                    51:84:3f:3f:bf:d2:d7:a4:b8:23:52:94:96:7d:94:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:E9:E3:FF:93:AC:BF:5C:7F:5B:ED:35:41:E9:12:9F:AA:57:D7
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:b6:1a:6a:ac:27:d1:4c:3e:9c:86:3d:91:6d:90:39:82:
         1d:b3:cf:a6:dd:61:1d:dd:35:38:a3:7c:41:4c:69:dc:0d:03:
         02:e2:d4:2c:08:df:ca:89:2e:0c:49:2e:22:3a:2b:ed:42:60:
         57:15:3f:7b:43:53:33:52:19:f5:46:65:9e:e5:2e:de:5a:b7:
         5e:3d:02:d4:01:9d:19:06:e2:8d:f1:05:80:6d:fc:7f:e0:ef:
         56:3b:b4:6b:fb:2d:72:a7:0a:d9:ec:b4:2d:55:06:d1:6d:cd:
         19:ed:2e:5a:e8:ca:50:54:c1:3b:1b:ed:86:65:22:86:e4:eb:
         8b:8e:14:76:40:fb:f5:fb:16:ab:ec:9b:10:69:50:9a:8a:f0:
         09:5d:56:63:80:44:03:e0:26:ee:a3:e1:30:b7:0c:e4:47:70:
         f2:23:96:23:8d:dd:2d:bd:85:fa:04:68:a5:78:7e:5e:7f:e1:
         49:9d:09:61:19:b3:a6:7c:42:86:a4:86:a1:35:f9:e4:a6:ca:
         85:eb:d1:cf:45:18:e4:57:af:fa:ef:f4:1d:11:32:87:62:5a:
         a3:e8:1a:d3:cb:17:31:5c:0e:d4:fa:aa:d6:17:e4:36:71:4c:
         59:24:f4:46:15:c1:d9:bc:76:29:bb:a1:72:5f:00:21:bc:83:
         fb:9e:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:03 2026 by rpki-client