Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
File:                     4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json)
Hash identifier:          kogpXfEUqgKhoAjpm8fHUE9yqb0VgZcmJ/jN2p1hsug=
Subject key identifier:   79:F9:65:66:CE:3F:BA:F7:9A:F3:C1:88:F7:10:5F:6F:83:5D:50:0A
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Certificate issuer:       /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
Manifest number:          96
Signing time:             Wed 23 Sep 2026 07:13:25 +0000
Manifest this update:     Wed 23 Sep 2026 07:13:24 +0000
Manifest next update:     Wed 30 Sep 2026 07:13:24 +0000
Files and hashes:         1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: RSAlcozN6H5vJVvL+u8MwuOdcJpaD+3H8BNvEr+ezNg=)
                          2: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=)
                          3: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
                          rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
        Validity
            Not Before: Sep 23 07:13:24 2026 GMT
            Not After : Sep 30 07:13:24 2026 GMT
        Subject: CN=6ab37c14-b1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:48:ce:c1:e8:dd:0c:fe:c5:73:e6:7e:49:
                    3d:01:d3:13:cf:ac:80:87:0f:88:44:9a:78:bb:26:
                    5c:15:f1:d5:ea:34:76:94:29:f2:31:5e:fc:65:e2:
                    21:c7:0c:01:95:c3:b1:ce:db:74:30:7e:ba:ea:7c:
                    a4:dc:3e:55:bf:84:88:be:dc:81:7b:e9:82:e6:39:
                    1e:52:46:f8:9c:db:68:af:10:73:80:13:52:9b:79:
                    8a:60:1f:d0:4f:70:2c:b5:57:53:06:3f:10:72:22:
                    b2:dc:92:47:45:92:3a:ef:11:35:7f:e4:1e:81:bc:
                    b1:f6:11:ce:44:06:ce:d1:eb:af:6e:96:92:84:71:
                    32:79:43:ab:91:2e:3d:39:97:23:22:eb:57:bb:86:
                    a6:8b:fe:8e:42:fd:83:46:c7:87:2a:2a:ed:c4:a1:
                    68:9c:a9:96:0c:18:04:4c:93:7a:a5:df:b0:47:04:
                    25:7f:0e:65:f8:4c:06:12:71:b1:ef:8b:b5:c2:01:
                    e3:55:e2:fc:8d:16:6e:2e:10:c6:6e:c4:6e:14:07:
                    be:81:06:99:1c:bd:14:69:01:3c:60:f9:9e:12:92:
                    da:ec:8d:3c:37:71:d8:c1:45:32:48:73:5e:d9:51:
                    ac:0d:93:ad:a7:2e:84:85:00:fa:8f:e4:fe:7a:0f:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F9:65:66:CE:3F:BA:F7:9A:F3:C1:88:F7:10:5F:6F:83:5D:50:0A
            X509v3 Authority Key Identifier:
                keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:74:08:d9:52:d7:3b:43:65:ef:a5:6e:c5:be:43:47:0b:
         0d:c8:60:4c:e7:c0:cd:c9:ee:dd:61:34:a6:99:ff:d7:54:26:
         6c:26:8c:16:ea:96:66:e3:62:88:33:30:d7:6b:13:da:33:93:
         a4:8c:73:6d:5c:71:33:a5:58:ab:cf:15:c6:5a:4f:3f:66:d3:
         9d:25:76:6d:2f:c0:13:c2:d6:b6:bf:84:90:b4:86:dd:b2:99:
         7d:21:0b:d4:ff:c2:96:b6:0f:79:82:6f:f9:2f:4d:67:52:28:
         87:cf:e6:83:c9:73:95:e8:d5:df:6a:59:6c:04:fd:ad:76:76:
         61:fa:06:a1:43:01:0f:bf:24:b4:5e:b4:fd:5c:52:f2:95:75:
         41:ab:69:9f:3c:57:64:88:e7:71:87:b8:2b:e1:91:5b:57:f0:
         c9:56:95:ca:07:79:ac:1d:aa:7f:d8:a3:38:3b:88:ac:35:09:
         f3:c6:e2:27:de:d6:ed:30:7b:d7:10:26:4c:ba:d2:88:d4:3e:
         a7:bc:98:f5:0e:f5:51:87:dd:ff:54:e5:47:28:15:cc:05:03:
         da:52:76:b5:4d:e1:03:01:e5:5d:01:15:8c:44:26:00:54:df:
         e9:e1:69:5d:bd:28:a7:c8:5e:fa:a4:a1:db:8a:89:c7:44:ac:
         dc:3d:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:37:58 2026 by rpki-client