Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          fUC4jzF9EZrBoM8JfjEQWyqxtoyfeFlKNaDrGlig0o0=
Subject key identifier:   40:10:98:5D:6A:14:6A:2F:38:5F:1F:D7:45:F8:00:3E:27:98:E3:F9
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          02D7
Signing time:             Fri 25 Sep 2026 01:25:11 +0000
Manifest this update:     Fri 25 Sep 2026 01:25:10 +0000
Manifest next update:     Fri 02 Oct 2026 01:25:10 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: G1VHRGBSylFwTrkjjQpqaJaCv3e0iIc4VcepS7A0LtU=)
                          2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: HngBFWxCeGdGGI7K1NehqNXwpSksJGC331CYSdk3V3Y=)
                          3: o-Sj-H8a3T_Xvk0R_FCyCrdRMvE.asa (hash: y3EFp6J5onJ0tD3nTztBMeEPywK5QBWrYlx3jpacAK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Sep 25 01:25:10 2026 GMT
            Not After : Oct  2 01:25:10 2026 GMT
        Subject: CN=6ab5cd77-802e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:ad:1c:93:b2:b0:0f:b7:d2:ef:0e:83:4e:
                    67:e6:b1:20:50:df:6e:74:a5:f8:43:a1:ff:38:f4:
                    92:53:8b:29:af:92:c8:52:4a:73:94:95:a4:a1:0d:
                    90:f7:5e:bf:45:99:0e:0c:80:cb:79:cb:c5:93:d4:
                    ef:d5:06:d4:53:18:17:e0:2c:bc:8a:02:24:b7:d6:
                    67:61:d0:83:15:b5:10:b7:a9:77:fd:bd:58:3c:1c:
                    1f:83:c7:1c:a7:65:37:5a:85:55:71:f3:11:79:ac:
                    ea:7e:c2:8a:43:7f:1c:60:f6:2b:cc:d8:9a:1c:26:
                    db:90:c7:8a:5f:14:61:62:9b:7d:44:d8:d7:6d:6b:
                    3d:c5:ef:1f:d7:ef:7f:65:82:04:af:88:68:1b:bf:
                    01:00:57:fa:cb:11:72:39:78:38:c8:52:b4:ad:87:
                    bd:75:01:a3:1d:05:54:c0:52:01:b6:ef:b4:85:00:
                    c7:8d:7c:6e:26:35:e9:5c:eb:6c:df:ae:7f:69:cf:
                    98:da:b4:36:73:fb:7d:39:17:38:ba:2f:8f:d3:5b:
                    c9:31:f3:db:a9:c2:64:c4:9c:bd:2d:2c:60:80:cd:
                    74:d5:d3:c2:26:b6:08:bc:5f:78:67:2b:1d:87:05:
                    74:d1:f3:c8:94:26:7e:ea:3c:85:61:6b:6f:b2:35:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:98:5D:6A:14:6A:2F:38:5F:1F:D7:45:F8:00:3E:27:98:E3:F9
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:f8:f3:6f:c4:6a:1a:c3:15:1a:42:b7:69:28:74:3e:34:
         7a:bc:25:d8:9c:48:de:3c:e0:96:f2:fc:a3:93:aa:c9:b5:f9:
         40:9c:30:e8:79:0f:14:dc:1c:ed:37:c9:cc:16:ca:6c:67:6a:
         f1:66:8a:3b:2d:13:68:30:e9:e7:fd:cf:3f:eb:f6:0c:fb:10:
         ef:ea:72:49:6a:1b:d1:99:de:0c:3a:8c:64:15:9e:15:57:99:
         f8:5d:25:55:d3:48:a3:b7:83:6c:18:b3:02:9b:05:59:0d:52:
         2e:a4:4f:53:93:fe:3d:f3:15:50:5e:82:0b:77:68:6f:5a:7d:
         89:1d:bb:02:06:ce:c0:8c:08:c0:5f:23:24:78:0c:b0:a2:c3:
         e2:cc:a7:d3:00:cf:d0:86:d9:9b:df:67:b6:12:e2:4b:2b:9a:
         21:a2:4b:71:e9:42:01:c3:e8:c6:0e:95:a9:33:a3:b7:16:f0:
         92:34:f8:1c:c5:de:1c:07:e7:02:09:a1:f1:55:3f:85:10:bb:
         80:16:b9:2e:3f:4a:e9:3d:04:5e:74:63:9a:ff:b3:41:0e:73:
         a0:f1:d3:62:b4:a0:fc:0c:46:da:4b:9e:ac:dc:b2:d0:1d:ee:
         48:d1:6a:9d:14:f3:64:16:90:9e:e2:c2:94:ef:e6:81:79:95:
         54:6d:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:33:05 2026 by rpki-client