Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File:                     _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier:          PNOAQ54yaK7XAwInOnHlzKQdVT2mgJGjpzvpOSiBY/Y=
Subject key identifier:   45:02:17:39:3D:B5:18:C7:45:7F:52:44:BA:33:93:AA:C1:2E:A0:3F
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer:       /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number:          024F
Signing time:             Wed 23 Sep 2026 02:12:36 +0000
Manifest this update:     Wed 23 Sep 2026 02:12:35 +0000
Manifest next update:     Wed 30 Sep 2026 02:12:35 +0000
Files and hashes:         1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: mTxBMCalL6fQ8ouDouspr9CX39BA4GxBqwNhecMZHVc=)
                          2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 9qjTDIESmxEjzI0WcDUL/9pvn6/XAMgDdbhrxTlivHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
                          rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
        Validity
            Not Before: Sep 23 02:12:35 2026 GMT
            Not After : Sep 30 02:12:35 2026 GMT
        Subject: CN=6ab33594-71d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:3d:a2:bb:c2:c7:01:51:f8:e6:f2:78:9f:
                    ea:61:46:b1:70:59:9d:9f:1b:be:18:24:f7:76:f6:
                    59:fc:5e:e2:fa:35:1c:ab:e6:cf:85:cb:8e:ee:57:
                    5a:06:e8:86:1b:ae:39:92:a5:21:24:16:3b:91:33:
                    68:42:df:7a:14:ea:c0:54:64:aa:19:ba:91:4f:fd:
                    14:55:c4:90:b1:e5:70:92:73:ca:b4:b7:8c:47:7a:
                    77:82:94:a3:82:c9:6d:eb:b2:8f:c6:81:7b:91:67:
                    32:df:4a:d1:55:03:92:a1:1c:64:0e:7f:2d:07:6f:
                    0d:b4:96:e5:11:49:8f:cf:68:5e:e3:20:53:17:76:
                    a4:0c:8a:7b:7e:51:c3:bf:6d:ae:7c:92:76:56:7e:
                    bb:ed:2f:0e:88:a4:01:9b:7e:44:2a:4c:3a:e2:7f:
                    ed:9a:6e:7d:7f:00:53:30:da:05:41:8f:8c:97:b3:
                    58:4b:e9:f7:38:4e:15:99:68:21:21:bf:d6:df:71:
                    d5:c9:d8:24:0d:d8:53:95:0c:3c:3a:8a:f1:1c:bd:
                    e6:94:7c:97:28:b1:aa:8a:f7:9d:13:bf:23:ac:6b:
                    ae:b0:c3:68:a6:1e:85:63:b4:73:cf:23:91:8c:78:
                    9b:cd:70:55:7c:d9:3b:fa:f2:6b:1e:66:f8:f3:91:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:17:39:3D:B5:18:C7:45:7F:52:44:BA:33:93:AA:C1:2E:A0:3F
            X509v3 Authority Key Identifier:
                keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:37:04:cc:e6:6b:8d:40:09:c7:21:0d:4c:18:09:6c:85:8e:
         f0:6a:a3:43:c7:3c:30:54:f7:40:ff:61:41:93:c1:dc:af:10:
         9d:6e:d1:91:e3:7a:f4:d9:03:e9:65:35:ff:bf:7a:6e:ad:e8:
         68:7f:ce:20:f9:29:6c:bc:68:96:57:9c:47:d4:d3:b8:d1:05:
         b3:3a:89:3e:66:4d:68:df:f6:cc:4c:19:22:b5:d3:e4:3f:b3:
         f5:12:25:21:6f:68:8d:d3:34:0f:24:73:32:8e:a5:2e:06:9b:
         93:de:45:86:7d:94:f6:d2:41:2f:7a:62:bb:e9:7c:8b:1d:15:
         8e:82:60:37:2e:79:eb:f2:18:70:96:2e:08:30:c7:4e:9c:cf:
         98:4a:dd:92:c2:be:f2:2d:56:2d:5e:86:f2:c6:62:77:97:ed:
         2a:a3:30:bd:f9:86:74:df:20:bf:e9:57:51:07:c0:45:6b:92:
         8a:6c:43:0c:90:71:44:65:6d:d8:66:a3:56:b6:bb:7d:62:5f:
         28:f7:67:c2:09:ae:77:f8:4d:1d:b5:1d:27:d5:89:ca:47:f0:
         aa:d0:8f:51:c7:5f:e6:d2:51:71:4f:d0:fd:44:4f:51:0d:51:
         d4:2e:db:cd:78:13:b1:48:f8:37:08:a9:fa:2c:76:d7:00:b4:
         32:1d:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:03 2026 by rpki-client