Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
File:                     UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json)
Hash identifier:          YlsBe93OCZ22j1CIKcn3Zp1q8W/MLzC2FZbxdrNb5Sw=
Subject key identifier:   6B:27:0A:C3:DF:FF:AC:1E:53:3C:36:D8:91:EB:29:C7:AC:CE:94:E1
Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
Certificate issuer:       /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Certificate serial:       2392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
Manifest number:          2341
Signing time:             Thu 24 Sep 2026 15:48:37 +0000
Manifest this update:     Thu 24 Sep 2026 15:48:37 +0000
Manifest next update:     Thu 01 Oct 2026 15:48:37 +0000
Files and hashes:         1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: d0mi7OR1ZBKpBkKbFHeqv0v8ruS/s/3CHT8xkzWZjug=)
                          2: 233533AABAE011F09A0D810BC4F9AE02.roa (hash: YnTXRLXoCwpVV5mpFfY79QAbWNlOLa5kqDUORn9Yqyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9106 (0x2392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
        Validity
            Not Before: Sep 24 15:48:37 2026 GMT
            Not After : Oct  1 15:48:37 2026 GMT
        Subject: CN=6ab54655-f341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:af:d5:d1:65:b8:df:56:fd:d9:f9:5e:d7:
                    a3:1d:55:b8:a6:ba:92:e7:80:b3:df:03:f5:e4:bf:
                    46:d5:47:16:ae:2d:00:1b:72:31:f9:02:d3:19:ee:
                    50:85:b5:f1:9f:e8:a0:2d:0f:22:fc:ce:d9:0f:b5:
                    18:59:ac:6a:19:41:d0:54:4b:ba:2d:3a:9d:eb:70:
                    30:3a:82:82:91:98:87:56:91:a6:09:11:0d:2f:33:
                    a2:1d:ee:36:5a:48:3a:6d:6d:a3:52:c5:bf:ce:b5:
                    b3:20:a1:d1:a1:46:95:48:27:41:88:7f:44:da:26:
                    cd:b2:91:7c:56:24:2b:23:61:a5:60:e9:4e:b9:bc:
                    48:df:dd:29:b4:59:88:4d:6b:f9:c9:6c:3a:8b:c2:
                    cf:ee:99:bd:b6:17:9b:93:ca:7e:24:64:25:c9:f4:
                    80:47:2a:38:8c:54:f1:05:0c:3f:0e:b2:6e:54:b8:
                    f6:e9:fa:58:76:c1:64:97:0f:95:13:be:c6:f4:bf:
                    c8:3b:f5:43:7d:fe:0b:bd:15:c4:1c:77:58:c4:33:
                    2c:8b:1f:83:b0:b2:e7:10:cd:05:9f:5d:d4:a0:cf:
                    4f:26:97:a4:79:e1:b7:9d:49:51:72:49:86:b2:14:
                    79:c4:34:27:8e:41:4f:d2:8d:c7:71:a4:6b:82:f3:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:27:0A:C3:DF:FF:AC:1E:53:3C:36:D8:91:EB:29:C7:AC:CE:94:E1
            X509v3 Authority Key Identifier:
                keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:67:5a:3a:af:89:66:98:04:aa:69:b8:3b:a5:55:69:05:ab:
         63:e3:04:73:ab:9f:3d:ca:5c:a8:dd:df:2e:88:c0:70:4a:ed:
         bc:5f:ee:55:83:ac:a6:90:6a:fb:1f:6d:b2:ad:d4:98:8a:92:
         65:0f:03:74:bf:1e:a6:84:1e:e6:59:ab:fe:33:12:f2:6e:b5:
         a7:bd:80:c8:3d:67:62:a4:b9:b2:fb:82:49:1c:9c:4e:3f:d2:
         79:40:28:16:8c:34:37:d4:41:89:24:79:51:5a:69:b5:7d:96:
         1e:1c:ae:f7:23:26:db:4a:a4:ea:14:05:0b:b6:64:d7:17:41:
         a9:79:28:e3:7b:7b:e2:f7:5f:db:fb:4e:7a:ff:6b:78:56:3c:
         47:07:3f:d8:e4:b8:63:79:b2:a0:13:67:75:b0:e7:79:90:a2:
         80:da:8b:db:d1:93:a0:96:91:0d:f3:e4:48:b1:c6:ac:b3:9e:
         cb:0c:f0:75:00:bd:ed:8d:01:dc:a1:39:b8:c5:6c:25:09:dd:
         4f:fb:ca:85:2d:c6:88:f0:0b:5f:03:42:db:41:9e:0c:42:cf:
         34:e2:d9:02:bf:1c:79:01:ad:1d:86:40:3b:e1:bf:59:cc:75:
         ea:47:b0:01:dc:64:34:c2:37:b3:90:34:57:4f:e4:ee:68:9b:
         8a:f3:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:22:09 2026 by rpki-client