Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File:                     MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier:          jj6ZcGB3m9mAULTdgFRFsAl5Du0XPa7bpfrzsjBA3yw=
Subject key identifier:   2B:07:C5:1F:1E:E9:49:46:0C:8D:7F:F5:1C:1C:34:D3:23:50:1A:A0
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer:       /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial:       04A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number:          049B
Signing time:             Sat 26 Sep 2026 23:59:49 +0000
Manifest this update:     Sat 26 Sep 2026 23:59:49 +0000
Manifest next update:     Sat 03 Oct 2026 23:59:49 +0000
Files and hashes:         1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: OQ5hv6Tw6yHQwey4QltRv4zx2b17BTLxa4bZlORdH+U=)
                          2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
                          rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
        Validity
            Not Before: Sep 26 23:59:49 2026 GMT
            Not After : Oct  3 23:59:49 2026 GMT
        Subject: CN=6ab85c75-758d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:2b:e9:db:73:be:9c:41:be:8e:b6:70:a2:
                    ac:53:04:d3:40:56:54:d7:c2:a5:0a:a7:bd:44:0f:
                    b2:b7:86:76:7d:87:5a:c4:4a:af:a5:85:c6:4b:91:
                    97:74:d2:9b:60:f5:d0:84:87:3c:4e:3d:24:76:da:
                    d6:ab:0a:47:8f:b8:1b:99:5e:bf:2f:a8:1c:5c:9f:
                    7c:dc:ab:29:d2:09:01:21:00:9b:4e:57:29:64:86:
                    d5:5f:03:90:dd:0d:2a:57:a2:6e:36:1a:27:73:57:
                    48:32:ed:d7:a1:47:97:88:23:2d:83:94:f8:94:ae:
                    08:ab:06:44:77:0e:e3:f1:1c:62:3a:40:54:85:79:
                    c5:c3:6f:78:68:c4:e2:11:1f:16:43:21:6f:a3:2f:
                    d5:61:b2:c9:c6:68:17:c1:c2:d3:82:5a:f7:35:c0:
                    9c:ea:a9:76:d5:36:27:38:67:8a:0b:d3:f4:ca:dc:
                    e3:da:02:45:a6:4f:fc:c7:93:d9:51:12:4d:22:83:
                    b8:67:ac:e5:b8:70:ff:e8:d5:34:d2:27:cb:7a:aa:
                    2c:e0:02:03:79:2c:b7:39:e6:cc:d7:69:e3:b1:74:
                    75:5f:07:46:08:62:9e:5b:fb:60:53:44:18:ce:ac:
                    86:fc:8f:1f:a4:6a:d9:e0:05:2c:a1:12:a0:2f:27:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:07:C5:1F:1E:E9:49:46:0C:8D:7F:F5:1C:1C:34:D3:23:50:1A:A0
            X509v3 Authority Key Identifier:
                keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:1f:29:09:54:34:fd:03:0a:ca:e5:d5:8b:7e:e9:ef:68:
         ea:f0:38:86:ed:02:eb:30:2f:88:c9:e2:1c:82:13:93:36:a3:
         c6:61:05:34:26:dd:2d:ca:d0:73:99:1e:f9:b7:16:f0:be:a7:
         8f:a4:66:c7:fc:b5:92:65:f9:8b:37:5e:37:79:ab:52:df:df:
         78:27:a0:e4:9a:d8:49:f3:e4:00:4d:c6:df:da:45:51:88:61:
         3c:0e:97:40:fd:34:05:df:37:1a:9d:4e:43:60:a5:8d:e6:1f:
         2e:2d:19:79:dd:39:48:d8:fd:ef:e1:57:e0:4e:94:17:08:a2:
         a2:a7:91:25:19:8b:19:86:5b:a3:b7:96:36:49:8c:55:d6:a8:
         e3:a9:ea:93:72:c6:57:16:36:49:10:d8:df:31:18:b9:e7:b9:
         74:71:75:49:c2:1a:3e:b0:94:7f:40:00:12:04:05:53:73:26:
         9a:5d:00:ef:8d:0a:e5:94:fc:18:fe:4d:22:c6:9a:55:56:9b:
         12:98:07:58:0c:2d:ca:3e:7b:13:e8:d2:bd:35:97:56:ea:c6:
         a7:68:f0:b8:df:90:1c:fd:1d:3b:71:b5:66:9b:ca:13:ca:54:
         f6:a2:63:b3:89:74:3c:33:60:cf:be:ca:ef:ee:af:61:29:4f:
         2e:da:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:31:55 2026 by rpki-client