Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
File:                     -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json)
Hash identifier:          /VAcLhRbZ4WkQLvwJ9i1OV2w3xg1rj/chFwB5GQU2Ww=
Subject key identifier:   F5:A5:9E:C5:59:6F:AC:10:8A:F6:C0:C8:55:FF:45:4D:17:95:51:FB
Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E
Certificate issuer:       /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
Manifest number:          D6
Signing time:             Fri 25 Sep 2026 06:47:41 +0000
Manifest this update:     Fri 25 Sep 2026 06:47:40 +0000
Manifest next update:     Fri 02 Oct 2026 06:47:40 +0000
Files and hashes:         1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: 3+a2jVaMyMXUIc6NqAwj5x8Ok2kvS9/MSaSOJJEa/s8=)
                          2: D18B4798F06C11F09D48C4D25F6F56BC.roa (hash: FzVb/xQYMbYZ8H9dr6uwy2m6EVKcwi9t2xwaP8CIRPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl
                          rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
        Validity
            Not Before: Sep 25 06:47:40 2026 GMT
            Not After : Oct  2 06:47:40 2026 GMT
        Subject: CN=6ab6190d-c400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:5f:8a:7c:6c:6f:06:8b:11:20:ee:2d:7e:
                    80:d3:3c:5f:1a:e3:42:32:d3:cf:ac:06:2d:4b:82:
                    3a:6e:23:e5:e0:29:8e:40:8a:2e:36:ef:0e:cc:23:
                    74:0a:3d:85:be:18:9f:4e:b1:7a:73:2c:41:cf:b3:
                    9b:2c:96:cd:c4:7b:4a:ac:ee:75:57:dc:da:9c:f8:
                    45:c7:18:86:5b:4a:42:05:0c:1c:89:0f:cb:45:d8:
                    3e:61:a5:f5:18:57:87:cd:b6:3d:f6:f3:25:01:04:
                    8a:2e:47:72:bb:53:0c:09:a3:4a:f9:06:96:08:6e:
                    52:ca:80:7c:32:fa:af:f5:a6:dd:98:7c:34:ee:0e:
                    c8:8d:1c:98:ab:f5:62:2e:e9:e4:0a:b8:e1:1e:f6:
                    b2:26:24:3b:57:6e:3a:b1:9b:15:bc:10:3a:ed:4d:
                    a9:60:d3:19:74:4b:2b:55:46:4d:48:e6:f1:ec:31:
                    50:59:16:4c:1d:e4:c9:e9:6c:5a:e1:db:2e:3a:23:
                    84:b2:0b:41:99:ad:71:c8:8e:28:66:b4:82:98:5e:
                    64:a0:a0:5e:02:bf:51:e3:a4:94:b6:f8:25:0c:a1:
                    42:a6:4f:f5:8e:24:91:a4:90:c3:7f:08:96:30:e3:
                    5d:cc:09:c9:9c:d0:1c:2b:fa:b6:dc:cc:c0:c4:35:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A5:9E:C5:59:6F:AC:10:8A:F6:C0:C8:55:FF:45:4D:17:95:51:FB
            X509v3 Authority Key Identifier:
                keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:c3:8d:48:c1:84:fc:2b:a6:0a:39:15:f9:c2:0a:29:21:
         d7:81:13:f0:b4:cd:8c:9a:85:76:a6:a5:46:fa:d9:64:f3:3d:
         63:85:a8:9c:8e:1b:9f:a6:4b:49:25:0b:80:ee:6e:7c:97:71:
         ca:5a:6c:c9:b9:10:45:56:04:7e:8c:15:1f:af:23:01:83:40:
         41:68:64:d7:89:e7:ed:ab:84:2e:65:bd:08:b4:42:ac:30:17:
         e6:e5:8b:29:c9:19:1b:ee:2b:1d:63:64:28:7e:a3:77:e3:07:
         78:c6:eb:25:ce:5c:81:fc:52:b9:32:5f:9f:a6:f2:59:ae:30:
         f0:4c:cf:3b:f6:ae:a9:da:ce:a9:1b:99:6b:87:fa:72:4e:32:
         46:61:44:5c:d9:fb:6f:a7:04:53:4a:fc:ba:c6:1a:df:48:3b:
         da:4c:65:0c:19:62:d1:50:30:50:22:12:1e:1f:8f:75:23:a4:
         a8:ed:36:c9:a3:ef:76:f8:87:74:d5:d7:ba:ee:a9:c2:64:c1:
         ae:45:6e:1a:91:92:9f:42:da:c5:fe:e9:79:4f:7f:bf:35:b4:
         8a:fb:08:de:75:ca:f8:22:09:e4:d1:5d:46:c5:53:4b:84:b6:
         b9:74:df:5e:06:20:f2:0e:51:b7:04:09:f3:18:1e:4b:79:6a:
         4c:26:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:19 2026 by rpki-client