Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File:                     fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier:          fCSt3ytTGthKoSMpKCLs/szYNyvm3jNtg7OuH6MILew=
Subject key identifier:   3E:B6:25:B4:7B:D1:DA:31:F0:D3:58:38:3F:C4:8B:49:0C:01:86:58
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer:       /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial:       0DD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number:          0DC9
Signing time:             Fri 04 Sep 2026 17:50:24 +0000
Manifest this update:     Fri 04 Sep 2026 17:50:23 +0000
Manifest next update:     Fri 11 Sep 2026 17:50:23 +0000
Files and hashes:         1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: X2tCQ4BdXH0vx9gfMPFbTQ0jzyZN0gzY3USc56eUJ+g=)
                          2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
                          rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
        Validity
            Not Before: Sep  4 17:50:23 2026 GMT
            Not After : Sep 11 17:50:23 2026 GMT
        Subject: CN=6a9b04df-89d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:37:aa:35:92:97:cf:55:bf:b5:30:5d:cf:
                    9e:db:f4:59:e4:85:5b:ea:0e:df:e7:61:01:63:9b:
                    5b:e9:6e:4f:76:0a:16:03:ae:0e:0f:6e:ea:3a:53:
                    0f:c3:07:ff:b7:3f:bd:ae:95:cf:67:02:9f:7d:1b:
                    7e:61:95:b3:7a:a4:ed:8b:07:5f:a2:03:52:48:1a:
                    ab:7a:dd:c1:df:15:02:34:e2:be:d5:e5:b2:d5:23:
                    00:ec:86:77:c0:3a:74:ab:df:6e:47:4e:e6:dc:64:
                    22:e2:36:f6:cf:4b:20:eb:ff:5a:49:58:2b:d7:06:
                    01:67:6a:67:30:98:82:91:a9:8f:c8:32:0c:53:aa:
                    8d:1c:20:56:c6:b4:2a:d4:6d:be:3d:1e:c6:d5:64:
                    57:cb:dd:0a:1f:ff:07:0e:b4:9c:d8:ce:d5:2a:c8:
                    e8:81:3c:b1:55:3e:13:c6:1d:2d:41:3e:2a:d8:68:
                    29:fd:3a:83:57:16:43:ad:31:4d:ff:60:f7:19:33:
                    41:88:04:aa:a6:65:af:81:b9:ae:e8:3a:9d:4d:a0:
                    e2:77:5e:c6:09:57:a7:31:d0:e9:2f:74:ff:74:ff:
                    af:3a:16:3e:c4:84:84:6b:99:72:41:60:14:19:2f:
                    6e:d6:42:88:32:2a:4d:6b:c0:56:6e:ce:9f:1e:f8:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B6:25:B4:7B:D1:DA:31:F0:D3:58:38:3F:C4:8B:49:0C:01:86:58
            X509v3 Authority Key Identifier:
                keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:48:0d:52:b9:ac:c8:b6:32:83:98:7e:d0:92:27:66:a0:4b:
         f6:d2:50:35:06:d8:ed:20:1b:6b:e6:1d:b6:15:c0:4b:54:cd:
         f6:ac:af:12:98:b6:6d:b6:9d:56:f3:d2:d1:cd:ce:c1:9c:8d:
         56:03:83:b4:07:f7:07:61:13:14:30:2a:fc:0d:97:ec:70:78:
         48:44:52:70:51:cd:71:71:51:91:a0:a9:d6:c8:2b:f7:a5:3c:
         44:ef:35:18:4b:33:6a:fc:5f:7f:7b:43:f9:96:13:98:81:e8:
         c3:fa:a8:e9:a0:aa:d5:41:25:79:4c:52:b9:7b:b8:fb:b7:ff:
         ba:52:63:f7:2b:f7:8c:bf:62:c6:25:53:8c:f1:3b:3b:19:36:
         64:a7:30:aa:86:ab:92:a9:cb:ca:3c:52:b4:7a:b5:4f:6c:59:
         38:cb:30:7b:91:e5:4a:0a:b3:9c:b3:15:8f:f2:36:c3:d2:08:
         83:37:da:0a:5c:45:fe:c2:98:c2:be:4a:a6:98:b1:fd:f8:67:
         1e:a7:b7:13:99:2b:8a:ec:b7:59:c1:ce:f2:86:fa:77:4d:06:
         f2:02:20:98:fb:88:05:72:ef:09:c1:a3:eb:13:c1:56:a0:ee:
         8f:34:51:90:32:5e:89:a7:f6:8b:49:aa:fe:aa:2c:a8:c3:71:
         4b:43:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:47:46 2026 by rpki-client