Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
File:                     rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json)
Hash identifier:          322VZi7xdKYHMb9WWRC4poVHU0mEii9xJGJvgPtSyKQ=
Subject key identifier:   42:F0:F0:5E:F1:13:A4:D1:AD:CC:E5:22:F4:FE:98:BD:BA:AD:0E:47
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Certificate issuer:       /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial:       0C2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
Manifest number:          0C1C
Signing time:             Tue 22 Sep 2026 18:41:25 +0000
Manifest this update:     Tue 22 Sep 2026 18:41:24 +0000
Manifest next update:     Tue 29 Sep 2026 18:41:24 +0000
Files and hashes:         1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: L6vr7k4GAVSIrwc9NZ2hdGA+Wjs9H6Q9E81iINF6bWY=)
                          2: 4BE5757097E511F19253A8476911F970.roa (hash: kp1Hz7ncHNN2Q2V/Opxr60e+iP8FHQPNukxZnZrbqQU=)
                          3: 8149B27675E911F19295859071A30FBC.roa (hash: tdvIAv84+ObvJ7mIypgIHxRBp8brbZOBkzTBZnvClfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3115 (0xc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
        Validity
            Not Before: Sep 22 18:41:24 2026 GMT
            Not After : Sep 29 18:41:24 2026 GMT
        Subject: CN=6ab2cbd4-4134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:54:71:dc:54:f9:7b:68:ea:79:d9:43:4e:
                    20:26:f7:b9:0d:da:c8:02:92:ba:85:33:bc:af:90:
                    0b:1d:66:f0:e3:ff:6f:9a:76:18:6b:82:75:b0:39:
                    e3:d3:4c:e5:75:ab:0f:6b:67:e9:b4:55:fb:22:90:
                    94:4b:97:94:7f:47:f1:b4:ba:44:ed:1c:8a:49:08:
                    45:b3:b8:9a:6c:e7:38:0d:4a:2c:67:4a:4d:f7:9a:
                    dd:b8:34:13:b0:9a:ba:48:44:9b:ba:24:5d:02:d2:
                    0f:36:f4:ca:97:78:c5:24:99:47:41:f7:26:88:01:
                    14:bb:48:9a:73:5b:6d:ce:74:6c:5c:51:bd:52:f2:
                    e8:c8:62:ad:6a:45:f7:f1:c6:37:0b:43:9b:3e:eb:
                    b5:f2:63:4c:28:f1:12:3e:70:24:d7:34:4e:bc:f1:
                    8b:32:99:8e:e0:96:e8:f9:ae:7f:56:df:2c:ea:29:
                    8f:41:e2:ff:1a:7d:01:83:9a:c8:1f:bc:74:d4:14:
                    35:26:a4:7c:0f:fc:ed:53:71:96:c5:f3:c9:55:e3:
                    c4:fb:7e:c6:dc:78:57:c3:40:73:70:d2:c2:03:de:
                    21:ae:d0:6a:99:97:45:bd:62:b5:77:97:02:5f:30:
                    4f:ab:6e:6c:da:af:e5:4e:85:f1:21:80:00:50:17:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F0:F0:5E:F1:13:A4:D1:AD:CC:E5:22:F4:FE:98:BD:BA:AD:0E:47
            X509v3 Authority Key Identifier:
                keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a3:fd:cf:ae:93:fe:35:09:d1:85:ef:04:cc:32:4f:e3:3e:
         2a:2c:27:df:05:27:f0:d1:29:ab:82:53:ee:34:2d:c1:a8:0a:
         65:91:3c:58:d7:ee:32:63:8e:1e:4f:da:c7:41:93:47:e8:b7:
         45:c5:1d:39:4b:8b:42:fd:56:97:c8:09:63:47:9e:25:16:a1:
         58:88:b1:9c:0a:18:49:5d:29:f7:4c:0d:5c:72:d9:f3:a6:ca:
         5b:b0:88:6b:19:24:8d:78:4c:e1:2c:ce:0a:0f:19:99:d5:f5:
         dd:b2:c0:cd:6a:0b:a5:57:55:07:8b:da:59:0d:5c:bc:aa:f5:
         1c:00:69:6a:50:63:c9:ff:bb:36:6b:d2:f4:87:a4:8d:49:59:
         36:1e:43:2d:c7:46:6e:5b:79:9c:7b:45:9f:0d:af:9b:34:6b:
         06:db:ab:2c:86:d4:37:e6:26:5a:04:4f:dc:24:77:86:b7:d9:
         14:cb:b8:bb:8c:e4:f0:64:ea:6e:c5:b6:5e:c9:88:93:fa:50:
         c5:fa:33:32:07:1e:9e:48:58:22:37:b7:96:8a:d7:26:e1:a5:
         51:08:a5:08:01:72:88:80:72:5e:e3:73:71:fc:a0:3b:61:0b:
         76:cf:50:1e:81:16:72:0d:a7:2a:90:11:2b:30:98:74:ee:cf:
         8d:75:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:14:32 2026 by rpki-client