Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File:                     4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier:          wVJTjiXRkmldzJa+5fM28haVd87qbmUJJfKQ1NrLSPM=
Subject key identifier:   47:E7:F1:0D:11:C4:7C:51:76:7B:4D:AC:EA:FF:4A:68:0C:39:6C:F0
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       09D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number:          09BE
Signing time:             Tue 22 Sep 2026 19:45:09 +0000
Manifest this update:     Tue 22 Sep 2026 19:45:09 +0000
Manifest next update:     Tue 29 Sep 2026 19:45:09 +0000
Files and hashes:         1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: bxipOSRpF5MnqMjlsWz55o5IPaoKv5h5vCGhzsXWj8g=)
                          2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: GufOAmUmbBgvjXc0J89UeBy8dF93N+oEnJbdHPQ6yc0=)
                          3: 7A54F40C4F8911F18D85090792833773.roa (hash: o6p3iw3rhONzEiNetLEQUPFvD7H7C0JPmrzCOJSNgfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2514 (0x9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: Sep 22 19:45:09 2026 GMT
            Not After : Sep 29 19:45:09 2026 GMT
        Subject: CN=6ab2dac5-76ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:67:3f:7a:4c:3e:91:06:0e:fb:ed:19:95:
                    72:69:ac:55:ab:c0:b4:b6:bc:88:c9:cd:18:2d:b3:
                    ac:e9:9b:cc:f6:b2:20:21:a0:c7:4a:29:c1:94:1a:
                    05:64:19:aa:ad:29:d1:c7:92:b4:50:9e:fa:77:89:
                    8e:7c:ef:26:a9:bd:2e:51:42:47:65:1c:6f:e9:b6:
                    04:cc:51:65:27:1c:46:f7:ab:2d:4c:47:18:9b:d2:
                    5a:a2:13:1f:32:c9:6c:ef:ea:71:a9:33:ca:4b:4a:
                    78:ea:b7:6c:8c:04:20:38:8b:30:4f:6b:cb:55:4c:
                    42:57:e5:22:df:6a:35:e9:a9:71:10:90:f4:ea:ac:
                    a3:31:10:e9:af:5a:b2:ba:16:24:d5:68:7b:0d:fe:
                    8a:f2:15:09:d7:3f:23:c9:73:41:96:e2:c6:bb:16:
                    cf:66:b4:7e:42:43:b0:c1:3f:9a:44:e7:ec:52:db:
                    37:ea:bb:01:fa:c3:7f:28:a9:66:68:3c:ef:e2:0f:
                    bf:70:7b:f3:32:8d:e8:a7:e0:f4:ba:35:4e:1e:57:
                    46:d6:22:0f:2e:cb:d6:8a:5d:a2:28:83:72:8c:9b:
                    52:7f:f3:ea:38:35:19:2f:5b:e1:5a:80:83:e4:31:
                    99:37:6f:d6:5c:65:96:93:96:23:5f:5e:53:5a:2a:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E7:F1:0D:11:C4:7C:51:76:7B:4D:AC:EA:FF:4A:68:0C:39:6C:F0
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:90:4b:5a:e0:83:37:55:d4:5e:cf:79:72:09:2a:d1:fb:0c:
         9a:1a:95:b7:bf:bf:2b:5e:c2:6a:f7:98:2d:98:e9:56:20:5c:
         0c:bb:fa:0e:50:1e:79:70:ee:a7:db:99:3e:9c:19:93:96:24:
         7c:98:c4:76:f0:11:7b:80:ed:12:c9:1c:f2:ce:2b:64:58:cc:
         b8:01:d8:4c:50:4e:d0:75:a0:2f:b5:4c:ad:20:c0:48:63:0e:
         14:4f:0c:b3:94:30:d2:72:bd:6a:cd:2e:4e:71:c8:f9:90:d8:
         13:7a:76:79:5d:a0:03:62:32:a8:f7:c5:8e:2c:df:7b:72:ad:
         1e:3d:59:39:cb:07:72:5d:8c:bc:50:88:73:15:be:f8:42:57:
         72:66:66:50:18:2b:4e:30:01:d5:61:9e:cb:1f:b8:4e:7c:77:
         03:f8:d2:13:17:15:f8:67:f9:d1:b7:9e:47:41:53:b4:61:be:
         c3:b3:1a:c0:46:d1:ae:1b:a8:4c:8d:cf:ac:3f:37:14:79:18:
         22:8b:74:75:59:c1:15:0e:83:e3:a3:e8:bb:b9:bc:9c:f5:cf:
         a6:81:cf:63:47:29:16:34:56:94:d4:1f:04:46:72:56:94:e9:
         7f:73:0c:22:91:e9:eb:fb:df:68:47:43:51:0e:37:89:c2:00:
         a5:7a:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:21:05 2026 by rpki-client