Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File:                     MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier:          d0/70+dX7joSDc8VFD8oQMhRQdV0mxQh/SLaZSLwnYg=
Subject key identifier:   C1:40:D6:F1:B3:8B:3E:60:85:78:CD:FC:FD:15:AA:6F:04:9B:BC:6F
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer:       /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number:          0131
Signing time:             Wed 23 Sep 2026 05:36:37 +0000
Manifest this update:     Wed 23 Sep 2026 05:36:36 +0000
Manifest next update:     Wed 30 Sep 2026 05:36:36 +0000
Files and hashes:         1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: oNxkTD6OEfeTx1thKdxKAxcJUrKkOhl9DWrRDmv/2BU=)
                          2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: 0YPbPYRmDBxvxeUZ+nCsDlhMinpUmdIW4GNWTG2+RDU=)
                          3: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: iEXGIsNYH311PJIgaH9OeoRGxcu7W7Wehcq1wxoUdGY=)
                          4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: 4QP/rAbhyfXHecTQkzEPbUUKcaxecI63gYXrQwwXTlY=)
                          5: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 4J8/FZ6Z4aWtn3x7hmcoO5/BToWEDFdORTF4LOMQboM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
                          rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
        Validity
            Not Before: Sep 23 05:36:36 2026 GMT
            Not After : Sep 30 05:36:36 2026 GMT
        Subject: CN=6ab36565-0de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:cd:48:7f:84:c5:c2:4d:80:d0:04:df:c1:
                    1b:b2:1b:d5:73:10:76:5a:39:d0:a5:03:c7:bb:36:
                    21:f6:18:40:61:88:3e:0e:45:b6:2c:2d:be:4a:4b:
                    5d:97:9e:d8:38:30:6d:97:24:10:59:c4:45:3e:7b:
                    de:79:f9:dc:c9:56:e6:5f:38:19:d7:a6:ed:a8:11:
                    33:cf:27:fb:95:8f:c1:d4:73:86:f8:99:74:47:2d:
                    dd:1c:9c:33:76:63:52:ab:ee:59:4a:45:f2:aa:bd:
                    5d:86:30:c3:71:9c:9f:b3:69:d1:2c:7f:75:51:7a:
                    b4:13:e4:23:40:18:ad:ef:4a:3c:93:06:86:42:b3:
                    37:4d:42:95:0c:d0:2f:d1:21:17:4d:d6:ad:d8:e2:
                    4f:40:73:14:39:0a:5b:a8:ea:46:79:3a:64:e0:8c:
                    41:4f:43:f1:56:90:fd:62:0f:fd:6c:46:9a:cb:0c:
                    ad:80:84:ed:ce:ad:95:40:a8:66:0c:eb:0d:70:a1:
                    17:6a:2b:40:16:1a:1d:bd:b2:61:1e:87:94:63:d8:
                    4f:23:ac:77:48:9c:fa:83:79:b9:74:f9:6b:a8:15:
                    fb:77:f5:8f:50:1e:c1:60:84:70:01:f2:3f:30:ea:
                    c9:f3:3f:f7:fc:24:5a:68:f0:92:bc:f3:b7:10:69:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:D6:F1:B3:8B:3E:60:85:78:CD:FC:FD:15:AA:6F:04:9B:BC:6F
            X509v3 Authority Key Identifier:
                keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:fe:76:d2:b9:49:f2:66:f3:30:56:22:d4:6d:50:b4:9d:
         26:63:a6:8a:c5:bd:7f:4e:9f:b6:84:54:6e:19:17:f0:ee:53:
         61:67:79:33:54:6c:92:36:5b:a5:e4:13:25:65:40:3b:ca:18:
         e9:78:68:06:53:01:45:a3:bf:e8:90:72:16:bb:e7:e8:2d:a5:
         d1:dd:9c:4c:50:e5:3a:68:0b:64:1c:43:be:87:8e:26:8a:ef:
         ad:15:8f:fa:1a:4c:c2:78:fc:b2:79:3c:0c:ed:f7:05:29:64:
         1b:51:89:27:4f:24:8e:fb:80:fb:6a:21:21:a1:31:72:dd:07:
         4e:57:14:f6:26:ae:d8:10:d5:a3:55:53:e3:38:2e:23:c3:41:
         bd:88:77:3b:aa:03:7f:c1:6f:cf:4b:1f:77:6b:44:78:8e:9e:
         b7:07:f5:7e:ab:e4:9e:36:68:5c:4d:e7:bb:0e:63:af:e4:46:
         2f:00:18:c2:fd:9c:14:d3:dc:e3:c5:77:4e:82:45:40:a3:45:
         84:73:de:d7:c9:68:a6:36:64:07:d0:d3:2e:2e:60:a6:73:89:
         c7:ab:a6:69:7c:a0:de:62:df:bd:13:97:53:8b:32:c5:46:f7:
         79:b7:49:68:a1:bb:98:2e:f2:fc:94:55:f3:0e:7c:17:d8:bb:
         49:68:21:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:57:09 2026 by rpki-client