Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
File:                     rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json)
Hash identifier:          RvoRrg2Ye7OPf4HA3c7b/A9f7JYTwb3SMvmR4x0gMM0=
Subject key identifier:   60:28:EE:AC:1D:21:4B:75:9D:F3:E1:B8:A3:CD:52:DD:1B:5B:6B:61
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Certificate issuer:       /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial:       0A81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
Manifest number:          0A6B
Signing time:             Mon 28 Sep 2026 19:46:52 +0000
Manifest this update:     Mon 28 Sep 2026 19:46:52 +0000
Manifest next update:     Mon 05 Oct 2026 19:46:52 +0000
Files and hashes:         1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: i9UT8zrpq6OnvYN++WWkcNqxz7ALCiHr5ISNfLfd3wM=)
                          2: 7AEEA290829E11F0975FC440C4F9AE02.roa (hash: NJ63YJDh2rXhGyC41ze8yWJyNkK6DiJWZj8EZ4mClWY=)
                          3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: BWMRKEzqCdvPb4VJWbmdWJfwpPUSHKLOetVFGH3P10s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689 (0xa81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
        Validity
            Not Before: Sep 28 19:46:52 2026 GMT
            Not After : Oct  5 19:46:52 2026 GMT
        Subject: CN=6abac42c-b00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:a6:14:3f:eb:1f:c7:ac:e0:38:bb:47:51:
                    cd:c2:d0:f7:9d:91:b6:09:72:93:5e:00:ae:07:c6:
                    5e:12:3e:12:e5:57:a7:b2:55:b0:71:0f:56:4f:dd:
                    ab:6b:82:17:94:38:e0:0f:e1:38:89:40:86:64:e0:
                    8c:d6:4d:8d:07:b5:6b:e0:a0:d1:ff:6a:55:0a:2f:
                    3e:fc:69:5b:49:e5:29:b6:d6:6b:ea:50:3a:ae:6b:
                    09:43:70:4a:be:b7:25:4c:d1:25:75:42:8b:ea:3e:
                    bb:8d:46:bd:89:17:4b:70:17:6c:7c:29:72:81:89:
                    0c:8d:bc:6d:f6:bf:42:49:a4:a7:cb:a5:73:07:7e:
                    60:22:67:58:2f:f1:9a:5b:3d:00:8b:24:8f:22:d3:
                    07:3a:7e:e8:7c:5e:dd:3a:d7:e7:b4:74:5c:26:26:
                    24:bd:32:ca:6f:f8:64:41:cd:85:6d:3b:0e:56:17:
                    d6:9b:2e:b0:e1:7a:eb:d0:84:fd:76:57:d6:2a:66:
                    2b:ee:93:86:0a:1c:b3:49:45:e5:9d:ce:4c:4b:de:
                    77:f7:84:b6:1b:0e:27:bf:14:fd:a1:04:89:1d:fa:
                    2e:b8:84:35:93:1f:13:13:d4:8c:a3:c9:84:7f:f2:
                    eb:e7:fb:89:ff:11:4b:e3:12:cb:04:8f:ed:05:31:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:28:EE:AC:1D:21:4B:75:9D:F3:E1:B8:A3:CD:52:DD:1B:5B:6B:61
            X509v3 Authority Key Identifier:
                keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a2:29:ae:54:44:4a:df:65:7f:f2:18:bb:40:80:99:61:04:
         d8:8b:73:bd:f4:06:05:78:69:08:c6:18:59:bf:37:49:d2:be:
         13:8f:65:7f:5e:2b:85:af:ba:79:5c:fa:e9:95:37:6e:57:41:
         d8:fb:b1:26:01:17:10:be:dd:50:20:2c:3b:a6:9d:14:0c:24:
         ae:06:a0:35:78:37:5f:b8:a8:4b:50:8f:e8:05:08:aa:fa:15:
         1d:83:00:34:84:4f:ae:33:68:67:5b:74:28:dd:0d:bd:62:bc:
         04:bb:30:de:cb:d8:06:a4:c9:88:7f:3a:23:a6:23:a3:9d:5f:
         04:ec:cc:be:65:e7:0c:e7:38:9b:cb:af:f1:72:81:54:af:22:
         0d:b5:27:19:6b:ec:b6:d2:76:9b:6e:38:78:d3:a2:51:50:6c:
         7c:72:f8:3b:aa:2f:d9:7c:3b:1d:60:e1:89:fc:29:e9:88:9b:
         8c:04:55:33:fc:e0:e0:2a:58:52:d6:5a:89:7d:a6:44:51:62:
         53:d2:e1:1b:c7:c0:7f:7a:01:36:58:1e:80:3b:a1:7c:6c:74:
         d0:4b:60:75:d8:c7:bf:88:c3:4c:de:3a:6b:14:c4:87:68:16:
         44:c4:67:eb:03:81:b1:24:a6:a0:ac:ab:75:5a:ee:a6:ec:47:
         b3:ad:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:07:53 2026 by rpki-client