Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File:                     A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier:          sqlIu1tuVQivuy8qRhtnqRDUQOzVIvfjumCsAvQ6HLU=
Subject key identifier:   C9:EA:E8:7A:F9:FC:98:56:92:D7:C6:0B:71:73:89:3E:66:00:23:45
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer:       /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial:       1270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number:          1017
Signing time:             Fri 04 Sep 2026 17:51:53 +0000
Manifest this update:     Fri 04 Sep 2026 17:51:52 +0000
Manifest next update:     Fri 11 Sep 2026 17:51:52 +0000
Files and hashes:         1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: l2h3yaS8rJvM+eiYpF/nU3dw2Rj2tN2RL+D+tbQADlQ=)
                          2: 55D1A87064CC11F18E187B1B6847A888.roa (hash: WSNq80m7RseKwiVBTN0MUdvWJK6F5MMYD9rHdnxgZJE=)
                          3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: kccLJAAJUftI3LLIsTKo7BiUv/BhOLEvY3/TqmL54Ss=)
                          4: A25B6E909E0311F18E1FD92A4A11F970.roa (hash: 0qfS4Tulhh74VpatYXS3ztYz0ycVKBZwgb1B/JbsnRg=)
                          5: BD60B6F059A211F183AF6F31B8833773.roa (hash: cNwv63/9s+kMtXt+Cr4yAjM1fI/LlZbgaRJaSG3g5nA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4720 (0x1270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
        Validity
            Not Before: Sep  4 17:51:52 2026 GMT
            Not After : Sep 11 17:51:52 2026 GMT
        Subject: CN=6a9b0539-88e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:c2:4a:fa:d7:10:02:8e:df:e0:99:bd:ac:
                    10:09:b3:c9:33:f4:e7:4d:19:2e:5b:78:03:33:44:
                    22:7f:19:ab:91:67:f2:4d:51:e6:55:a9:dc:ee:c4:
                    17:d9:93:f3:80:36:40:99:a8:23:f0:55:d5:13:73:
                    20:21:0b:b7:f0:bf:17:85:e4:ed:8b:d7:2c:82:b7:
                    1e:43:7a:dc:b3:56:cf:8b:e2:3b:7d:9a:09:62:5a:
                    b5:36:5e:43:55:c1:f3:40:66:d3:38:83:33:d6:6c:
                    a8:5a:2b:ea:06:90:ad:7a:ac:9c:a6:30:f8:65:41:
                    fd:41:d8:b8:10:da:e7:3f:5e:51:a8:d0:94:2f:49:
                    c7:33:07:67:02:b0:a3:0c:a7:31:83:d8:c8:86:14:
                    29:86:5a:d8:dc:03:35:c7:85:bb:f5:51:3d:04:29:
                    9b:5f:06:f3:5c:db:18:d5:41:04:ce:0a:16:1e:34:
                    56:72:79:1d:45:36:df:3a:d6:fc:af:13:0f:54:23:
                    94:b0:41:03:17:c4:9e:f8:8e:94:fc:82:1f:cb:93:
                    15:1b:44:0c:5f:76:e2:91:38:79:2f:a9:14:1a:dd:
                    3d:6a:a1:46:ff:55:50:f4:57:39:a5:ca:05:b2:7e:
                    58:91:e9:a8:57:b0:b7:4c:0c:52:04:f1:bf:54:59:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:E8:7A:F9:FC:98:56:92:D7:C6:0B:71:73:89:3E:66:00:23:45
            X509v3 Authority Key Identifier:
                keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:46:21:fe:d0:17:75:f3:be:6d:7b:70:35:fb:d6:40:ae:
         a4:64:aa:e3:bd:ae:a9:08:c6:59:bb:0a:51:99:d8:04:d9:49:
         48:31:7a:32:d5:d3:9c:96:bb:89:3c:7d:fa:94:38:7b:3c:82:
         e0:73:2b:7b:7a:6f:05:a3:c8:39:27:85:12:ef:bc:f8:33:e7:
         cd:9d:a6:f1:b2:ea:03:be:37:ed:91:77:d6:09:57:78:cf:6b:
         aa:68:0e:55:18:97:49:62:09:fc:9c:b6:28:ee:ed:24:05:57:
         b5:63:ef:19:79:4c:ff:f6:da:ea:92:a0:2b:b4:fb:02:e6:b3:
         69:0d:89:92:8e:30:ab:68:eb:5c:9f:ad:cc:bf:cf:f9:f7:71:
         b3:62:ee:20:f0:6f:f0:2a:fd:b7:9f:d3:9a:f6:11:7e:f7:75:
         ef:75:9b:58:9d:66:9c:6b:fe:f3:c8:0b:14:ec:0d:60:21:75:
         99:75:b5:e2:5f:32:0b:86:ec:8b:65:51:30:57:2e:35:04:96:
         9b:28:fa:ea:b5:c5:56:f3:b4:77:08:69:63:3f:4d:85:ff:af:
         12:13:26:06:0e:a6:3f:82:2a:54:bc:65:82:ca:79:f3:19:3e:
         ca:87:95:3c:a1:74:ca:19:62:b7:38:de:0b:c5:95:96:56:d2:
         93:3c:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:56 2026 by rpki-client