Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File:                     81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier:          jn8WWCsvKm0AhxRnxqADiLbT1jf0wjPS619CSKJF+JE=
Subject key identifier:   78:8E:2E:98:E5:1F:E7:89:5D:E5:CB:8E:76:84:6D:3E:9E:9C:FC:02
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number:          0890
Signing time:             Tue 22 Sep 2026 20:38:27 +0000
Manifest this update:     Tue 22 Sep 2026 20:38:26 +0000
Manifest next update:     Tue 29 Sep 2026 20:38:26 +0000
Files and hashes:         1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: N+P+1D3U7kxC8XUo4N3gb+QcpoPc5c+Xq/dLImntdys=)
                          2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: 7l8WCyK2qB5Ax8El2bn7f20GEIYhxxt3GqqtbVDOp/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: Sep 22 20:38:26 2026 GMT
            Not After : Sep 29 20:38:26 2026 GMT
        Subject: CN=6ab2e743-42bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:12:21:e7:66:2a:86:22:50:95:94:8d:d4:
                    b5:6c:a6:d1:6c:12:e9:65:b6:30:5e:ad:ee:a4:8b:
                    65:c7:86:33:5f:a7:95:be:9c:5e:4d:f5:f9:ae:cc:
                    08:c8:8f:5e:5b:d9:23:3f:07:3f:1b:43:9e:5f:97:
                    b3:03:75:e2:a9:2b:06:f9:52:ba:b1:72:83:52:f5:
                    3b:2b:4a:02:86:1e:c4:0a:61:04:58:46:67:1c:b6:
                    8f:fb:d4:74:b7:0e:c5:5a:ae:97:c3:23:e2:27:98:
                    f2:c7:30:50:2c:12:b2:6e:ec:10:91:9f:65:1d:b2:
                    29:c5:ae:88:cf:f9:dd:0b:cb:89:fa:fa:0e:cc:02:
                    e4:de:b1:51:aa:24:b5:ee:57:78:d0:00:bc:a7:ea:
                    d0:f9:51:a9:85:8f:28:fe:27:21:bb:29:e2:82:a7:
                    01:38:0f:77:a4:1d:23:c7:32:3d:07:b9:a6:4f:ae:
                    0c:e9:72:d2:3c:70:0e:73:05:8c:98:00:8f:78:eb:
                    a4:a2:b7:c5:96:06:21:29:f4:44:06:4b:03:ad:fd:
                    1a:98:98:57:85:70:d8:49:fd:82:21:89:2d:61:ce:
                    74:60:c9:95:68:ef:d6:93:12:bb:86:5f:91:03:5c:
                    be:47:1c:20:a5:e2:74:85:8a:a5:57:eb:09:8d:08:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8E:2E:98:E5:1F:E7:89:5D:E5:CB:8E:76:84:6D:3E:9E:9C:FC:02
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:85:fe:27:8d:b0:e0:3b:19:67:21:51:de:a6:88:8c:76:15:
         48:29:9b:c6:21:df:31:e6:f1:c7:c2:54:1a:5e:6e:18:bd:15:
         e4:e7:88:a4:8c:2b:c6:37:d7:04:56:27:10:df:8d:3e:ea:cf:
         4a:91:f0:52:70:37:31:35:21:cb:6c:25:28:e5:74:d7:5b:f5:
         ab:aa:7e:92:44:4b:e6:54:d8:a8:bc:82:ce:83:9f:dc:e5:ce:
         34:4a:9c:e3:46:cb:11:a5:a9:8a:37:95:dc:99:ef:d1:df:68:
         fe:b1:c4:78:60:a6:29:15:3f:c8:c6:9a:f1:03:e4:93:be:23:
         33:40:25:2a:a2:27:d7:f7:02:37:65:98:04:5b:6c:76:19:99:
         6a:dc:82:be:c1:d8:ce:46:d1:0b:82:24:a5:3b:02:30:ed:9e:
         e1:dc:cc:84:98:1f:36:c2:52:7c:b8:e6:90:df:77:fe:4d:c2:
         a1:de:76:eb:71:c4:44:19:46:04:ba:f0:ee:4f:83:13:7e:68:
         dd:cf:48:02:57:4b:ba:94:3e:b8:d3:be:69:ba:fc:c4:41:96:
         5b:b0:c7:c4:bb:99:9b:2b:55:1b:c4:65:4d:fb:31:d6:01:96:
         93:79:cb:8d:b5:31:c8:dd:ea:00:d0:97:3e:1c:4b:15:0f:e3:
         59:82:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:34:17 2026 by rpki-client