Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File:                     CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier:          JRJ8TMxBV/QehvIacI8EdRObL0ntwv27oTft2OErTpA=
Subject key identifier:   57:47:51:BA:9C:23:6C:BD:8C:00:69:70:D9:53:9B:7D:18:53:A7:CA
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number:          0288
Signing time:             Wed 23 Sep 2026 02:25:39 +0000
Manifest this update:     Wed 23 Sep 2026 02:25:39 +0000
Manifest next update:     Wed 30 Sep 2026 02:25:39 +0000
Files and hashes:         1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: hxCOukIqcUUHbFjeRP9aPwyG0dI+PWpsIhotek159tw=)
                          2: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
                          3: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
                          4: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
                          5: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
                          6: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
                          7: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
                          8: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
                          9: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
                          10: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Sep 23 02:25:39 2026 GMT
            Not After : Sep 30 02:25:39 2026 GMT
        Subject: CN=6ab338a3-6b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:d8:6c:8c:f5:d5:06:59:f3:bf:7f:c3:0b:
                    aa:72:42:85:45:88:03:b3:8f:4a:a2:39:40:7d:c9:
                    2e:dd:a3:c9:d4:7f:cc:6a:78:52:19:51:4d:f4:fa:
                    c9:a7:7d:1a:c0:59:c8:c6:40:4b:55:9c:47:2d:b2:
                    1a:8a:1f:2c:bd:23:8b:31:56:62:02:9c:39:d7:29:
                    d9:0e:e3:86:61:e5:8b:4a:25:45:e4:5c:82:52:15:
                    bd:f7:9c:69:9e:c0:86:56:48:33:0c:ea:74:20:6f:
                    d3:2c:f3:d2:ea:08:92:04:b6:21:91:43:5a:62:21:
                    2e:0d:60:af:49:2e:a3:d6:27:1c:83:7e:6f:1f:72:
                    d5:e9:aa:d9:47:f7:c3:6d:56:9e:77:24:66:45:7e:
                    d8:83:43:b9:6c:85:1e:a2:d3:3e:f5:d1:39:52:7e:
                    17:01:5e:66:3f:75:cd:cc:d8:78:fe:8f:a3:8c:b7:
                    95:ca:10:73:39:58:52:cb:d4:bc:bf:73:1f:c9:b9:
                    82:eb:28:4c:34:4d:5b:76:73:8d:3c:74:ff:e6:df:
                    76:b3:24:b5:7e:05:32:c2:6a:31:34:d2:72:fb:ad:
                    78:21:82:3b:f1:9b:8a:5e:b0:52:c6:77:b6:1a:78:
                    62:c7:dd:fa:23:c6:63:af:cc:de:98:8b:7e:6b:01:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:47:51:BA:9C:23:6C:BD:8C:00:69:70:D9:53:9B:7D:18:53:A7:CA
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:a9:79:3a:f4:3c:c5:2c:bc:ff:ce:e9:fc:cd:51:7c:a0:
         37:2d:7d:1e:73:23:b7:75:e4:af:79:ce:c1:d7:d5:2f:e2:00:
         24:ee:6f:d4:f1:c4:db:7f:9e:11:f4:a2:a4:d6:ad:6c:ef:70:
         04:ce:e8:1a:0f:6c:29:64:66:aa:d5:eb:c4:8c:93:f5:27:9c:
         84:f2:d2:62:30:92:75:93:89:e2:0a:e3:6e:1a:7c:de:f5:ab:
         cd:3f:b4:38:4d:33:e3:f5:ba:4e:31:d9:95:12:7b:cf:42:cc:
         00:d6:03:f3:16:04:f1:6c:08:1f:d3:03:8e:f9:9f:d8:d1:df:
         9b:b4:02:13:17:a1:20:08:a4:8c:1b:09:13:2b:05:08:10:c5:
         1d:06:5b:d0:b7:16:12:ca:a1:83:3f:18:1e:e0:2e:63:d6:74:
         a7:66:e2:35:c7:d8:5f:2b:8e:63:5e:9e:2d:36:15:f7:c5:47:
         8f:42:49:29:98:2a:47:5e:06:3a:25:72:14:5e:f4:a4:b1:75:
         2d:78:62:79:e3:05:75:b3:5e:65:69:fa:b1:61:a5:be:56:5c:
         17:a1:5d:7a:ac:27:6e:2d:14:9a:a4:47:58:39:98:47:95:27:
         9f:80:e0:c1:3b:17:8a:54:c9:3f:b8:e5:8f:ec:21:87:bc:27:
         e7:6c:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:16 2026 by rpki-client