Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File:                     N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier:          aQ5SpkOwfn0IF6C9QzGPCoqm7Kc+90ow1E0hidsi8Kw=
Subject key identifier:   25:6E:D3:2D:65:02:AC:CC:B6:5B:A5:8E:C7:F1:79:B9:23:14:4D:6B
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer:       /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number:          97
Signing time:             Fri 25 Sep 2026 07:33:20 +0000
Manifest this update:     Fri 25 Sep 2026 07:33:19 +0000
Manifest next update:     Fri 02 Oct 2026 07:33:19 +0000
Files and hashes:         1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: g8NTPHdtxyQBLCFaUSwzsAcsgtevjXGXpAw4aMqh+0k=)
                          2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
                          3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
        Validity
            Not Before: Sep 25 07:33:19 2026 GMT
            Not After : Oct  2 07:33:19 2026 GMT
        Subject: CN=6ab623c0-6969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:6a:91:9d:04:05:0d:11:64:c0:bf:f1:b5:
                    3a:a7:84:e8:1b:ce:34:56:90:a7:a3:e0:50:11:84:
                    7d:d2:09:0d:92:4f:d6:c6:e2:02:0c:de:db:67:1d:
                    0e:e3:5e:2c:61:1c:97:f8:97:39:02:33:6f:06:67:
                    7a:20:df:93:e8:f4:ee:07:dc:da:2a:2d:86:4b:29:
                    62:86:a6:cd:40:ff:eb:9d:db:f1:3e:84:8d:46:70:
                    0d:46:a4:ef:23:be:b2:72:17:eb:68:27:39:88:0d:
                    e4:da:46:aa:af:48:76:e6:df:c1:5f:ab:09:6d:16:
                    84:1d:f1:39:0f:90:a2:77:22:f7:c2:d4:94:35:9b:
                    74:be:71:a9:87:63:a2:9c:4c:6f:58:09:d1:25:f8:
                    fa:93:62:56:ab:b3:e3:31:24:bc:2d:67:89:58:61:
                    42:ce:ec:35:0f:0e:13:64:bd:56:7c:6a:d2:bb:d7:
                    7c:29:7f:94:c0:f0:ab:12:84:ce:b8:c9:8d:53:e9:
                    9c:9d:84:ce:81:b7:82:a9:89:9b:dc:03:ec:ae:e8:
                    08:cd:fa:53:aa:7b:22:1b:68:cc:c2:af:df:5e:b6:
                    21:3f:15:a8:f2:bf:24:b7:e3:70:44:1d:a2:2b:c0:
                    81:29:b7:53:c6:ab:44:b9:79:8e:cf:3d:83:12:9a:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6E:D3:2D:65:02:AC:CC:B6:5B:A5:8E:C7:F1:79:B9:23:14:4D:6B
            X509v3 Authority Key Identifier:
                keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:bd:e5:e1:b0:19:50:04:31:86:f0:c7:1c:c0:c7:1d:f6:
         e3:aa:9d:18:b2:95:a1:c7:b5:ca:11:a2:ce:0f:da:91:c9:35:
         cb:ff:22:d4:d8:9f:6a:c0:4c:c2:50:e5:50:50:32:c0:ca:a3:
         5f:b5:7b:ce:88:ff:bb:99:cc:12:59:07:3e:02:54:49:ea:77:
         ca:26:2f:5a:32:2b:ee:ca:61:cb:f5:25:3a:91:18:f9:23:6e:
         92:5d:9a:19:7b:d4:50:4c:7a:d7:d8:f1:db:7d:8d:c9:a9:3e:
         36:92:b5:4c:71:d9:30:30:7f:97:43:82:9d:29:d2:4d:5e:8e:
         79:e7:92:76:21:0d:62:4e:98:bf:f2:cf:ba:5b:c7:98:d6:67:
         66:c8:fd:f6:bb:9a:14:c4:9c:53:6e:8c:df:c4:b2:82:5b:85:
         e9:31:09:f0:f7:cd:d6:b4:1d:7d:60:3b:6e:f1:ab:2f:4b:53:
         82:27:9c:0d:cf:a3:2e:26:25:7c:9f:50:65:2d:0b:ab:4f:13:
         2c:be:38:7b:99:77:e3:9a:bf:3e:6d:af:ab:11:20:a9:80:9b:
         9b:c0:c3:ef:29:38:1a:70:e5:95:e9:60:52:bb:4f:6f:a6:37:
         e6:86:25:9b:81:49:14:9b:f8:95:2b:d8:cf:77:25:5f:ce:7f:
         59:43:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:21 2026 by rpki-client