Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          VB08eTNbbUmOCzBAHxRw3H3X2O5WOHV1ShwgI40ogpo=
Subject key identifier:   7B:18:5D:6B:29:97:A3:DC:5E:25:91:3C:F8:D4:5E:5F:1E:F9:37:D3
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0B9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0B92
Signing time:             Fri 04 Sep 2026 19:03:35 +0000
Manifest this update:     Fri 04 Sep 2026 19:03:34 +0000
Manifest next update:     Fri 11 Sep 2026 19:03:34 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: 7Ni6Ljwn11m7YxSmNoD00UmofHgw98lWP+SMgZ5g9wQ=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2972 (0xb9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: Sep  4 19:03:34 2026 GMT
            Not After : Sep 11 19:03:34 2026 GMT
        Subject: CN=6a9b1607-381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:0c:a6:c8:6a:79:69:23:8f:3c:c3:f2:57:
                    43:9a:fd:7d:75:3b:9c:bd:a9:af:52:af:4d:c7:31:
                    f7:06:15:f7:71:8f:bf:15:36:fd:dc:db:7f:b0:df:
                    dd:b8:9b:c8:b8:ba:5c:e6:3c:87:c1:42:5e:11:7a:
                    b1:b6:f5:fa:41:62:96:33:c7:bf:2f:e2:58:05:85:
                    17:99:81:0c:5b:3c:da:db:2c:50:79:ec:36:3d:e3:
                    66:ee:59:24:e9:7c:22:a6:be:ff:28:23:41:5a:df:
                    b8:f5:23:94:c5:f0:e6:01:95:af:95:4a:46:c4:c4:
                    30:55:10:1d:74:d6:ed:cc:37:4d:08:c8:a1:dd:48:
                    47:a7:97:c5:d6:f2:cd:e3:f1:4e:8d:9c:9c:b8:45:
                    64:ee:15:74:ee:85:3f:e3:eb:16:de:fb:2a:7d:f7:
                    45:14:3b:57:52:0a:dd:bd:bb:84:da:3d:81:2e:2c:
                    c4:f2:3d:34:a6:15:3c:77:0e:15:21:56:6a:f4:87:
                    23:a4:e4:fc:c3:b5:83:2f:e4:af:a8:78:95:36:f7:
                    28:24:4b:ac:c6:f3:8d:37:e9:a7:ec:27:cd:05:f9:
                    da:2f:15:aa:d3:1e:88:fe:a4:9c:51:cf:9a:eb:c3:
                    f1:29:f0:df:9a:ee:2e:3e:51:32:32:eb:ab:e0:67:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:5D:6B:29:97:A3:DC:5E:25:91:3C:F8:D4:5E:5F:1E:F9:37:D3
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:18:b1:c8:90:e6:ef:e1:c1:97:e9:e1:a2:f9:14:a2:4d:
         c0:08:fe:af:59:c0:12:39:b6:de:b5:71:f6:f1:12:f5:a9:1b:
         33:0a:23:eb:85:2a:78:37:a3:87:8f:68:1d:87:1a:29:10:6c:
         2b:78:22:2f:fd:e9:df:78:dc:55:75:25:89:63:9e:91:c3:42:
         f6:87:33:38:14:60:e0:d4:26:f6:f5:21:ca:e1:46:23:69:64:
         e2:e2:db:40:a7:2f:c4:0e:21:3e:a9:a9:f0:e9:77:10:50:7f:
         eb:0c:3f:4b:62:54:22:c1:dc:79:ee:82:55:bc:27:dc:c3:ec:
         2f:0f:0a:05:71:f2:3d:dc:ae:42:1e:ad:c2:92:8e:d1:01:26:
         ce:11:27:2f:fc:a8:3e:37:76:43:b3:f8:2a:ed:6a:f9:ba:35:
         36:6b:6d:6a:e9:90:3d:fa:a4:66:d2:2c:4d:32:23:c7:12:c6:
         c9:6d:66:a6:83:5f:fd:b9:93:14:2a:79:c4:62:fc:b6:58:0d:
         48:7e:8e:00:87:07:40:dd:6e:3f:ed:00:c1:5d:c4:1d:31:5f:
         d7:96:f4:e7:35:66:a9:74:16:28:7d:88:b6:10:2f:4d:46:eb:
         8e:d2:06:83:83:a5:ce:1e:44:a4:fb:75:a3:e8:69:ba:1c:d9:
         f6:72:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:35:53 2026 by rpki-client