Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
File:                     grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json)
Hash identifier:          SC8gT7gay7xydyJF5iCnK6Sl/N9/cfqsJyT5AUJV+oM=
Subject key identifier:   CB:B3:8C:28:F9:DF:27:96:A3:BB:9A:66:EE:E8:18:51:28:A2:64:2B
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Certificate issuer:       /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial:       0E79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
Manifest number:          0E70
Signing time:             Thu 24 Sep 2026 17:41:55 +0000
Manifest this update:     Thu 24 Sep 2026 17:41:54 +0000
Manifest next update:     Thu 01 Oct 2026 17:41:54 +0000
Files and hashes:         1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: oWI0VkcWV8XMucCl6JcBH/i0RgJtgkTwI/4O2WhK36Y=)
                          2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: HF4nucogvlWev/6+Vaa0aM/i/xbw1FYeTT4JnV0mPb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
                          rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3705 (0xe79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
        Validity
            Not Before: Sep 24 17:41:54 2026 GMT
            Not After : Oct  1 17:41:54 2026 GMT
        Subject: CN=6ab560e2-7124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:e1:87:65:80:37:d5:1b:9d:76:c4:1f:3f:
                    e3:17:4c:e9:40:8e:b1:de:1f:ca:1b:26:28:5d:8f:
                    85:08:ca:2d:ab:2e:1d:12:68:7f:95:58:34:07:f0:
                    99:06:d3:ac:21:fa:37:d6:fd:41:90:6c:f4:04:9e:
                    5d:4e:ec:d2:5a:56:d3:fa:96:e2:ef:3c:8b:94:73:
                    ed:c9:f3:fe:7f:ce:7d:99:2d:63:3b:15:65:14:25:
                    00:60:c5:69:a7:69:94:3f:93:15:6c:48:05:70:e9:
                    e7:3b:aa:1f:de:ec:ff:37:3f:39:ac:84:42:f3:45:
                    f6:79:4d:6b:9a:d4:e3:fa:26:f9:84:52:4a:43:5e:
                    ff:85:dd:91:f2:70:26:8e:67:d6:69:d3:f9:55:7f:
                    ba:68:eb:cc:c0:1a:78:21:09:2c:43:fa:04:72:01:
                    d8:a2:18:1b:e7:d8:9e:28:dd:9b:c4:b5:23:ab:47:
                    31:21:81:7f:d9:09:b4:3c:68:79:b5:cb:c0:42:f2:
                    78:2f:19:6c:ea:c9:80:1f:82:df:6f:ab:91:22:08:
                    14:cd:1b:8a:1e:15:e2:6c:36:97:6c:61:09:e5:4a:
                    2e:47:40:1a:56:6c:a4:09:55:4b:8f:ee:59:8d:1a:
                    70:54:33:87:20:0e:90:48:f2:3a:fe:3f:97:49:f8:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B3:8C:28:F9:DF:27:96:A3:BB:9A:66:EE:E8:18:51:28:A2:64:2B
            X509v3 Authority Key Identifier:
                keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:46:4e:cc:00:77:7c:17:bc:d4:20:55:32:36:84:b3:02:
         1c:e8:33:16:ae:43:d8:2e:b7:6e:5b:92:62:00:8b:02:e5:69:
         82:84:99:2b:e3:85:5f:d4:bb:df:f3:d6:c1:9a:fa:b6:26:50:
         6e:04:fb:2d:4e:3b:fd:6d:6c:8b:cb:68:fd:a0:bc:9e:da:de:
         83:ac:da:ca:e1:b1:ea:9a:ba:82:4c:72:cb:0d:d1:aa:8e:33:
         7a:87:13:d1:cb:d4:39:1e:26:0b:e9:60:20:ee:c7:cf:e0:ac:
         ca:16:2e:7a:a2:43:1f:da:38:46:09:62:8b:46:ea:89:3e:6d:
         d7:e9:e7:8d:8c:9d:76:3c:6e:1d:8a:38:8f:53:fc:bc:7d:09:
         23:8c:4b:9a:4e:7d:3a:d1:a9:35:f3:cb:82:f8:95:83:eb:80:
         b7:be:b5:fe:5f:17:af:7c:c2:7a:8d:fb:82:8a:02:6c:99:d4:
         26:bb:82:ea:1b:7a:1e:af:29:8a:5f:dd:a4:0a:e4:c1:5e:33:
         e7:63:c4:f2:02:6a:81:9e:2e:df:60:68:65:0a:9c:33:20:f0:
         c7:e5:b3:62:87:dc:76:f1:23:d9:79:2e:19:ae:1b:6f:0a:f2:
         ea:e1:a9:f6:fb:da:06:b8:3f:9a:d4:8b:21:31:65:6d:99:a8:
         87:60:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:27:25 2026 by rpki-client