Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
File:                     U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json)
Hash identifier:          XbAPVmGweePmdRToE2l2M3S2PpuVtvZ//SrS19qs1aw=
Subject key identifier:   01:89:74:16:24:0E:71:AC:30:1C:C9:49:26:2A:08:36:BF:43:7B:66
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Certificate issuer:       /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial:       0F58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
Manifest number:          0F4C
Signing time:             Thu 24 Sep 2026 17:31:21 +0000
Manifest this update:     Thu 24 Sep 2026 17:31:21 +0000
Manifest next update:     Thu 01 Oct 2026 17:31:21 +0000
Files and hashes:         1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: kautaRzHY3lEXqa4n0TRinWx4fiHxl45hvkHACxL1hA=)
                          2: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: dCbH4NL/l/xMZfu4F928E1bAEdQVgxFt32pJoJ1YYyA=)
                          3: 350711FA881211EE9710F928C4F9AE02.roa (hash: g5Jn/4mYG+O+uANS2Gq3ehc2407nXRKNECbsAhZFdHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
        Validity
            Not Before: Sep 24 17:31:21 2026 GMT
            Not After : Oct  1 17:31:21 2026 GMT
        Subject: CN=6ab55e69-0930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:2d:96:92:9a:c6:9a:a8:37:cd:7d:9c:94:
                    1a:44:13:e6:35:62:ba:c4:85:cd:35:75:d1:23:a9:
                    8d:01:00:3c:ae:35:22:a1:22:cd:2f:5d:26:8a:49:
                    d6:eb:1b:99:fa:08:8a:f4:16:1e:03:5c:f7:9f:c8:
                    9c:cc:ba:db:d7:66:d4:b9:56:33:61:69:4f:50:79:
                    df:30:5a:5d:43:d0:63:61:b9:c0:bb:d3:ac:2f:4d:
                    da:44:70:9a:80:da:e8:ca:98:7c:e4:64:4d:b3:0a:
                    7c:f0:7e:2b:91:39:2a:25:fa:bc:ce:56:0d:9e:2c:
                    e2:1e:e1:b4:e4:05:7e:89:13:34:a5:ba:4f:91:15:
                    53:7a:3d:3e:ba:31:56:9f:d7:0c:02:a6:85:52:e1:
                    49:45:b6:79:ef:77:67:80:3f:4f:cf:d7:9a:86:68:
                    cb:84:e8:a7:7b:57:cb:b6:e1:f4:56:be:6d:3a:b8:
                    04:c8:b7:03:22:84:0c:ee:fd:bf:f1:47:ac:32:d3:
                    04:9a:03:77:08:94:de:9d:97:87:98:36:d3:c2:e5:
                    4e:51:07:c0:91:2f:f1:7d:82:59:46:04:36:e6:8e:
                    c4:d2:e3:bf:47:58:b3:66:9d:8c:73:4e:2d:95:fc:
                    83:2f:c0:9b:fb:e1:d8:ec:8d:ae:2a:83:57:fb:55:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:74:16:24:0E:71:AC:30:1C:C9:49:26:2A:08:36:BF:43:7B:66
            X509v3 Authority Key Identifier:
                keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:16:da:13:fb:6a:01:e2:7a:3d:05:68:31:5b:40:5b:d3:6b:
         00:da:77:d2:7a:36:6b:47:83:18:fd:70:bf:c6:e5:ac:f4:9b:
         01:24:cc:04:e4:99:4f:00:cb:cc:06:61:42:c2:7c:0d:6e:f3:
         2a:9e:9c:1e:13:c5:d2:db:38:37:bf:76:2d:0f:01:b7:d3:ec:
         11:43:3e:aa:59:24:42:d5:7d:1e:10:c0:25:8d:e3:25:35:25:
         89:7c:6a:bf:d0:07:75:3a:98:83:15:f7:01:df:9c:c3:82:cd:
         a0:87:9a:8d:66:70:85:3d:da:c3:d0:9a:18:8a:f7:4e:e1:38:
         f5:fd:6d:2c:67:7a:9f:78:22:90:1b:83:03:bd:5e:ba:11:c6:
         3a:9f:23:38:66:0f:49:2a:31:b5:8b:e5:f7:be:ec:70:b5:ba:
         72:c0:86:73:8e:ca:6f:b8:6e:4e:4f:05:ad:8f:50:86:91:33:
         f2:1d:19:0f:35:5d:9b:53:9b:bb:8b:27:d0:17:16:80:71:31:
         c0:42:c5:b1:0a:bf:d6:03:15:39:9c:69:d0:74:ca:7a:04:60:
         28:10:d5:f5:58:7d:a3:c6:06:66:19:15:29:7f:ec:73:46:75:
         eb:56:0b:e1:c1:63:b2:47:23:da:57:13:a4:73:cd:4d:d9:a1:
         3f:16:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:52 2026 by rpki-client