Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File:                     mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier:          kItIxVkbA7/EkAsE8GdBpln3jcypHWGx+3L+8s/kDdY=
Subject key identifier:   FE:01:AA:05:AB:A7:62:D1:7F:B1:F6:71:80:FA:19:A9:76:58:9B:75
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       03B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number:          03A4
Signing time:             Fri 25 Sep 2026 00:28:02 +0000
Manifest this update:     Fri 25 Sep 2026 00:28:02 +0000
Manifest next update:     Fri 02 Oct 2026 00:28:02 +0000
Files and hashes:         1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: M4CKpWx4HZnYV9VTdr3TYto4Kq1Mu0VKyhCHry9ddoI=)
                          2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: Q6NYe2Vl6swnL94bFMvFyQ1nEGZFVn7Br4W4RJTVQEQ=)
                          3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: OIfGssLEQpbD7cZsL0poYC+ggBlzdXE7TwY8gIPebIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: Sep 25 00:28:02 2026 GMT
            Not After : Oct  2 00:28:02 2026 GMT
        Subject: CN=6ab5c012-2ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:f8:51:a9:25:d3:7a:4f:e6:91:4c:01:a6:
                    11:b8:2e:bf:3d:65:58:68:b4:d8:03:4c:30:fe:43:
                    0c:62:94:58:88:f3:bc:f6:23:21:97:f2:00:4d:15:
                    80:2e:49:1b:e7:c3:72:f6:17:7b:80:e6:ab:21:c6:
                    52:25:7d:fc:09:54:a6:83:37:8e:e2:97:c1:af:60:
                    b0:cf:3d:2f:6d:c3:7a:54:d8:d6:e0:02:ec:9e:c5:
                    f4:fc:47:86:ce:6b:db:bf:b3:c6:22:a8:1c:0e:ed:
                    0c:d2:eb:b2:3e:0d:50:ec:12:0b:86:49:ca:9e:ce:
                    d5:ae:36:b5:43:fd:c6:fd:c0:a6:fd:8d:8b:e3:66:
                    5a:07:c9:df:1c:a2:fb:6a:c0:f1:11:6b:c5:69:be:
                    e3:d7:36:4c:38:5b:8f:c0:80:a2:3c:4c:12:da:f4:
                    ed:d9:c4:48:3b:2e:dc:ef:9b:90:ae:cb:a7:25:a5:
                    c5:f0:20:57:7e:77:3f:b7:65:cf:c4:00:1b:d0:b5:
                    f8:66:90:a9:0f:44:9c:1b:e9:20:84:44:05:a5:fc:
                    bf:12:cb:0f:17:b6:9d:ae:11:01:49:9c:7a:05:ce:
                    33:90:dc:54:9e:a2:52:ca:e1:64:3f:6e:67:b3:e8:
                    13:25:32:da:e8:a9:94:9c:18:58:a9:38:d8:17:a7:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:01:AA:05:AB:A7:62:D1:7F:B1:F6:71:80:FA:19:A9:76:58:9B:75
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c3:6a:2d:ab:eb:40:01:6f:ef:68:42:e7:35:fc:43:28:06:
         a9:8e:18:3e:6e:e8:73:fe:c2:11:54:4a:a0:fe:aa:72:98:dc:
         45:85:98:37:74:aa:87:17:1e:27:b4:eb:b0:64:9f:4e:a5:4d:
         0e:d2:7e:a2:77:9c:47:f4:ce:d8:5f:70:02:bc:53:f6:f1:c8:
         05:8d:3c:2c:77:a3:89:47:50:29:21:ef:61:27:af:41:80:03:
         a6:94:d1:3d:f2:12:a3:ad:62:86:f9:f3:db:bc:b3:83:3e:d9:
         fc:1f:73:11:c9:67:36:55:c1:74:e3:8a:90:b9:de:33:97:f7:
         55:bb:7d:7f:ca:bc:e8:81:f6:48:35:00:b1:96:c9:53:ff:61:
         b1:21:c1:d6:f6:00:46:d4:2c:2b:34:1b:f8:5c:d8:f9:3d:23:
         16:58:a5:3a:cc:9d:ff:22:d4:6c:99:36:77:1d:e1:18:b1:f0:
         9e:7b:bf:9d:8a:66:61:db:d7:80:2f:61:2a:58:82:d8:04:b7:
         e5:5d:a3:83:da:1a:0e:a6:92:72:a7:03:7a:73:66:93:12:1d:
         a1:11:87:ee:ed:83:6d:6b:59:3c:1b:8d:43:67:5d:09:e0:59:
         1a:00:46:86:79:6f:8a:7e:6b:b2:6a:c4:60:78:a6:36:f6:e2:
         66:69:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:04:05 2026 by rpki-client