Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File:                     v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier:          wqt8xgrmX6bZ+iHF51MCkN51ZZBvtBDWPRk2AFKcARI=
Subject key identifier:   88:4E:BC:24:38:E5:51:A0:28:8D:31:C4:AB:F5:FD:80:56:2F:FB:44
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer:       /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number:          018D
Signing time:             Wed 23 Sep 2026 04:15:54 +0000
Manifest this update:     Wed 23 Sep 2026 04:15:53 +0000
Manifest next update:     Wed 30 Sep 2026 04:15:53 +0000
Files and hashes:         1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: amyJMsQOLehCQRum8RWT8SFKuAJjyjxCpS5LuPGbCRs=)
                          2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: Z763OA2aGYPDmj4qlpDVEyptMjmrPDNUtAJf94UbdWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
                          rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
        Validity
            Not Before: Sep 23 04:15:53 2026 GMT
            Not After : Sep 30 04:15:53 2026 GMT
        Subject: CN=6ab3527a-9f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:c5:40:e2:a4:69:70:e6:98:82:e6:5a:38:
                    bb:bc:44:ad:4f:24:b0:e3:0c:39:ab:f6:cf:19:a1:
                    04:28:73:de:e9:e5:05:cf:af:2b:84:8b:4b:41:be:
                    4c:1b:8a:79:af:03:78:75:23:f2:78:d5:04:88:27:
                    4d:5c:a4:f6:9a:55:13:ad:2a:d0:e2:8c:ce:7d:e4:
                    19:74:d7:f1:ad:8c:eb:9b:43:ea:9b:05:a8:38:28:
                    fb:d0:65:8e:d6:76:0a:55:ba:c9:f7:74:63:87:c4:
                    ca:21:5c:78:af:7a:5d:ab:cc:9d:c5:35:ed:d1:c4:
                    af:9b:9c:a2:5f:3f:a7:ff:b6:ff:70:cf:81:6d:30:
                    66:55:d6:f2:c2:90:5a:1e:2b:3a:29:16:50:2d:3d:
                    eb:a2:cb:e8:75:74:4a:41:2b:c9:48:2d:f7:b4:e0:
                    09:97:ec:f2:8a:93:1e:b6:0e:9c:a4:45:e6:9c:ed:
                    2d:17:1c:60:2c:90:6a:8d:de:b0:c1:3d:8b:b0:33:
                    38:7b:a3:ee:5e:6c:66:59:b2:1a:43:2d:25:25:d9:
                    f3:e1:6f:9f:55:f0:5b:0a:f8:3f:c3:10:cf:bd:52:
                    c8:1c:e1:4b:79:41:88:c5:9d:43:41:34:31:be:94:
                    e9:a6:4e:6c:7c:26:f4:c9:08:79:3e:db:84:65:fa:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:BC:24:38:E5:51:A0:28:8D:31:C4:AB:F5:FD:80:56:2F:FB:44
            X509v3 Authority Key Identifier:
                keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:30:82:ab:1a:85:99:47:45:39:89:62:a4:39:25:bd:35:
         8b:75:cd:52:a3:3a:df:8e:4f:04:f5:d8:76:54:7a:25:b4:03:
         e9:e9:85:c1:ba:98:7e:c6:00:fa:8f:a1:76:3d:3f:bd:d5:ff:
         bd:61:ef:25:8d:85:e6:eb:bf:ee:ab:c1:4b:d0:46:8b:74:9c:
         62:82:19:97:a0:24:65:18:58:fe:28:bd:c2:76:82:1a:ed:1f:
         0e:90:74:28:e8:71:a2:5d:8e:84:50:25:67:07:36:5c:7f:95:
         c3:2a:9c:ba:7d:c1:6f:a7:38:67:9e:bf:4e:21:da:de:6e:ff:
         99:4a:26:71:8a:58:71:f0:e0:b8:e0:3f:d6:15:72:3d:ad:03:
         13:c9:4c:c5:27:b9:8f:25:f6:3a:c4:29:9b:5e:58:0c:57:88:
         96:63:4a:9c:95:2f:b7:74:aa:29:1e:1b:f3:b0:c5:e8:ff:39:
         4f:b3:6c:a0:ae:09:f0:73:73:64:9c:36:56:d1:c6:6b:b3:c7:
         6b:61:4d:3c:61:59:1d:85:de:f6:5a:d5:a2:53:9d:a7:7c:4b:
         51:c1:9f:d6:72:8e:1f:98:fa:4f:54:e8:df:18:db:b5:47:39:
         21:57:3c:e4:46:63:9d:5c:e5:7c:6f:dd:35:5c:f6:81:b1:d6:
         07:6c:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:14:38 2026 by rpki-client