Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File:                     Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier:          BEZ+x113zR4NhswYhE23ZbWXhNadStWylxef9Fbi8xA=
Subject key identifier:   DE:68:A0:90:63:69:5B:E3:75:77:F8:AF:6A:2D:4F:F9:EF:05:4D:F7
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       060B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number:          0603
Signing time:             Mon 28 Sep 2026 23:02:52 +0000
Manifest this update:     Mon 28 Sep 2026 23:02:52 +0000
Manifest next update:     Mon 05 Oct 2026 23:02:52 +0000
Files and hashes:         1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: 9KK17l34rVxjtqhTzQuh+MWnpHnl/rhB7+yI3U/pbuY=)
                          2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: MyT7XofLYnzbUWOsIx3LwQVnAKb+WKaP6LQMJGUgR18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 23:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: Sep 28 23:02:52 2026 GMT
            Not After : Oct  5 23:02:52 2026 GMT
        Subject: CN=6abaf21c-db92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:48:ca:e1:e1:e7:5a:e8:58:e5:b6:79:ae:
                    e4:71:1a:53:c0:04:5f:c3:4e:a8:82:25:2d:c0:6e:
                    f3:92:3a:66:62:a6:0a:b4:ab:92:3b:0a:06:6c:b7:
                    bd:58:e9:50:f8:e8:d3:6c:05:76:10:c1:71:df:19:
                    dc:11:c3:d7:87:dc:fd:ae:1e:9d:57:02:b5:e2:57:
                    fb:21:ff:23:c1:06:22:7c:e9:d0:90:4e:c6:f2:aa:
                    83:19:f6:36:1d:82:43:10:3a:dc:0f:46:6d:bf:c5:
                    7e:b0:c5:8b:e2:1c:b7:b8:2e:6c:68:b1:ab:c6:d7:
                    42:9a:d4:b3:40:d3:23:84:47:af:d2:ca:90:f4:24:
                    b5:5b:81:14:68:98:72:19:a9:35:0c:2a:89:25:ed:
                    b8:cf:91:9c:a5:40:34:ce:56:62:ea:79:7a:d8:52:
                    f1:71:ec:ac:77:70:32:7a:c3:ab:5b:e4:66:f9:f6:
                    d5:8b:ef:7e:0a:49:37:5f:3c:8d:8e:a3:e8:ee:40:
                    38:95:7b:24:98:d2:90:ba:3d:da:12:48:b4:8e:b9:
                    52:65:c4:54:70:e1:b0:ba:55:3f:00:16:8f:cf:cd:
                    ef:da:1c:ae:be:6e:2f:8f:61:02:90:21:bb:f5:99:
                    42:52:c7:32:8b:54:07:62:ce:56:ff:6d:f2:7e:17:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:A0:90:63:69:5B:E3:75:77:F8:AF:6A:2D:4F:F9:EF:05:4D:F7
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:e5:e3:7f:2a:40:41:c1:8b:02:77:4b:fc:08:ca:27:fe:
         96:dc:c6:02:70:4e:40:41:dd:38:de:65:4f:65:2f:01:9a:6a:
         ee:c7:04:db:6b:56:ba:1c:13:60:cb:5f:27:cb:9a:e1:ae:f3:
         b1:3e:92:b6:63:32:87:b5:e7:b4:dd:b4:5e:a7:c5:bb:7e:8f:
         a2:1c:04:7b:5b:87:56:99:54:08:be:21:c5:92:94:7f:72:19:
         6c:97:ba:1a:3c:71:07:7f:23:c5:d7:4f:04:46:cf:da:91:c3:
         04:cf:f6:bb:a1:14:ce:72:7a:fa:67:68:50:d6:b9:08:73:5c:
         22:e0:e0:f1:7c:99:0b:1c:b6:32:49:f3:31:ab:9f:f1:ee:8a:
         41:6e:50:94:74:18:14:90:34:1c:d6:8c:51:7a:01:39:0b:94:
         f5:da:44:8b:4c:93:89:2b:24:8a:68:22:da:04:fa:60:47:be:
         6e:77:68:58:10:76:44:11:16:95:c2:41:8c:f8:c7:a2:a6:c5:
         20:da:56:81:14:81:8b:f3:fd:bd:29:f4:38:d2:5e:db:df:fe:
         dc:6e:42:92:93:04:1f:71:cf:fc:9c:4b:f6:69:f0:e5:5f:0f:
         62:fe:21:ac:3a:b3:82:64:d2:31:8b:6d:6f:74:fd:35:4f:76:
         36:98:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:09:40 2026 by rpki-client