Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File:                     Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier:          uaJE0paeowDxFcEUF3y7FUwGLDdyYK5DqufggzlmRLk=
Subject key identifier:   EF:ED:F8:D7:49:92:C1:1F:38:D8:68:B8:41:1F:1F:B3:6A:74:D8:49
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer:       /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number:          79
Signing time:             Mon 21 Sep 2026 07:51:26 +0000
Manifest this update:     Mon 21 Sep 2026 07:51:26 +0000
Manifest next update:     Mon 28 Sep 2026 07:51:26 +0000
Files and hashes:         1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: dv4MwbIRhN86z2XabGaZ8sGOtUFoHlQThe+rJY+4K4k=)
                          2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: 74mwc9LQpW/L2dkBvxUUTHTqTkYyfx6a6uTfz8A4a5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
                          rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
        Validity
            Not Before: Sep 21 07:51:26 2026 GMT
            Not After : Sep 28 07:51:26 2026 GMT
        Subject: CN=6ab0e1fe-5b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:22:83:c7:a4:35:73:92:ce:2c:45:70:67:
                    2d:17:94:e6:2d:b3:3b:80:fe:44:c9:96:18:14:57:
                    b7:82:5d:8c:3b:d6:8c:8b:d7:2e:26:eb:aa:6f:f2:
                    ee:1f:93:5a:ee:0d:3d:7c:12:1d:e3:9e:1f:e0:8c:
                    15:17:24:d5:ea:7a:90:aa:b4:fc:d4:c6:58:4e:d1:
                    6a:9c:1e:8d:d9:1e:57:64:b7:89:62:a5:b8:05:fa:
                    02:07:a8:f0:83:d9:7c:3d:af:ba:92:cb:a2:c1:6f:
                    7e:e9:f3:79:3b:ec:11:98:73:e1:2c:eb:11:a4:31:
                    bd:3f:6f:64:d4:e4:bd:9c:1c:56:4c:00:17:fa:d7:
                    dd:5c:47:54:ab:eb:d6:ac:3c:ba:c5:93:35:35:98:
                    c9:09:2e:6b:4a:6b:98:7d:13:45:0d:36:99:95:17:
                    a5:78:1b:7c:f3:11:6b:f3:47:2d:2c:5e:fb:a1:ff:
                    02:77:81:68:5f:98:58:bd:a8:57:1d:c9:f8:16:6a:
                    16:24:53:6b:82:d2:70:3c:da:5e:6a:b5:3f:82:8a:
                    38:8c:aa:f3:84:58:a5:56:38:79:44:85:20:ae:db:
                    ae:1c:a4:41:6a:b2:48:2d:77:f0:b2:38:2c:28:a4:
                    a1:2f:bc:b5:b8:23:28:bc:29:5d:ab:d6:98:bc:10:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:F8:D7:49:92:C1:1F:38:D8:68:B8:41:1F:1F:B3:6A:74:D8:49
            X509v3 Authority Key Identifier:
                keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:28:81:6c:03:2e:b8:5e:01:c8:d8:88:f3:2f:0c:1d:58:e2:
         88:19:d5:9a:58:95:d7:db:1d:0b:6d:81:90:dc:3f:91:42:b9:
         75:df:29:1c:86:65:f0:a7:27:3f:13:6d:f3:7b:66:12:4e:6c:
         c0:61:a4:90:54:40:9b:de:83:58:76:84:aa:98:8c:ae:08:13:
         19:b3:6a:23:24:de:37:1e:aa:bf:88:24:54:25:42:5d:d2:9e:
         66:4e:5f:05:32:97:22:e0:c5:4a:83:e8:6d:f5:56:c9:e7:52:
         db:bc:93:49:2c:32:b8:3f:25:a2:be:af:cc:65:db:06:af:37:
         1d:e8:c2:64:46:4a:5a:2f:b8:ac:da:f5:1f:7a:b0:c0:94:b5:
         26:d9:83:62:5c:7c:15:70:fa:ce:7c:d6:17:bf:25:50:35:92:
         3d:5d:8b:2c:d6:70:35:33:21:ff:76:3b:09:e1:0f:41:fc:bc:
         63:5b:13:7d:98:7c:37:ef:d2:b0:36:61:3d:d2:ef:d6:4c:23:
         95:26:2a:cc:75:02:3d:5b:7d:7c:95:05:c9:43:d8:af:e4:af:
         52:75:de:9f:a8:37:81:9e:c2:13:68:d6:bb:6f:6e:35:32:24:
         57:16:d8:8a:3d:a6:9c:29:5b:36:c0:e4:66:33:38:a9:40:60:
         6e:e0:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:46:27 2026 by rpki-client