Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File:                     aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier:          /pMr/DrGbUSNwJ4S6Bbu51C3BkN4EEzKb856j9b2m6g=
Subject key identifier:   97:C8:B5:09:93:75:E8:6F:48:D1:3E:60:CC:F5:86:73:6A:02:89:E4
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer:       /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial:       31A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number:          31A0
Signing time:             Fri 04 Sep 2026 15:23:09 +0000
Manifest this update:     Fri 04 Sep 2026 15:23:09 +0000
Manifest next update:     Fri 11 Sep 2026 15:23:09 +0000
Files and hashes:         1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: fgZVvufIEsSPqIe4EFA749zGR3H48PWIYiVqsw382OA=)
                          2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: Ws4kXOycMxQBTaXBEjmznoXyRi5PYCjorSZYTJcdYNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12712 (0x31a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
        Validity
            Not Before: Sep  4 15:23:09 2026 GMT
            Not After : Sep 11 15:23:09 2026 GMT
        Subject: CN=6a9ae25d-ab5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:fa:2f:3f:61:9e:8c:38:4c:9b:a6:fb:a2:
                    3a:33:ab:50:ca:a3:56:2d:5b:6d:1a:26:e6:da:3d:
                    09:ba:5f:3a:d2:ed:e4:e9:d0:b5:ca:6b:91:8f:62:
                    d7:da:25:78:a8:0d:6f:56:2d:9e:f2:1b:c0:7c:29:
                    c3:52:7d:4c:09:06:ad:c1:11:2e:53:6d:a4:a9:15:
                    6b:7c:b6:ea:49:39:77:0b:62:ca:ba:8b:45:20:be:
                    a0:1d:a0:5a:77:92:a4:2e:e4:e9:0d:8e:97:43:65:
                    64:ba:bc:cf:61:34:ac:37:4c:a5:d9:1f:27:07:b6:
                    9e:00:a5:cd:db:c5:16:b6:37:0d:6b:ba:74:43:ae:
                    49:a1:41:f8:a4:b9:9d:5a:cb:74:9b:b5:ca:31:69:
                    c2:03:1a:f2:3d:30:1d:35:51:d0:48:17:59:ac:94:
                    ba:e1:ab:c2:32:3a:bf:32:23:7b:47:24:33:86:7b:
                    89:9f:1a:12:e0:12:c1:a3:d8:9a:05:2b:e9:40:84:
                    9d:13:d3:75:98:2e:0b:a6:a1:71:13:63:44:af:eb:
                    97:cf:ea:1d:d3:c5:04:2c:5e:15:af:9d:18:e5:ad:
                    b8:64:5a:40:d3:54:b3:21:d3:f7:8b:83:d4:c4:00:
                    61:6d:21:6a:ea:e0:59:c1:3b:bf:6b:6b:29:7a:77:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C8:B5:09:93:75:E8:6F:48:D1:3E:60:CC:F5:86:73:6A:02:89:E4
            X509v3 Authority Key Identifier:
                keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:89:57:9a:0d:fc:6a:23:7d:ab:e0:6e:20:a4:7b:b3:dc:d3:
         3f:b7:a7:eb:c3:0a:41:d3:62:d3:e6:7b:36:db:51:bd:34:34:
         1b:f3:1e:3f:65:78:88:df:42:61:eb:f3:4b:65:8b:fd:79:16:
         d9:72:24:bd:6a:dc:23:bf:b9:d0:d9:fa:34:a6:d3:54:7b:f4:
         ed:82:e8:f6:d3:53:90:e1:80:58:0a:04:78:54:74:a7:85:9c:
         ed:fd:ed:f8:66:95:f8:b3:6a:ac:0a:a7:df:ff:fb:cf:a2:92:
         50:94:57:f4:c5:1f:9c:4b:3c:32:4f:70:9d:6d:ad:db:e7:99:
         aa:67:82:0e:41:f9:b5:42:5b:b9:a6:70:19:69:8f:3f:37:05:
         7a:de:b8:da:4a:35:ec:38:5a:43:9b:12:18:7b:d6:bb:3c:fc:
         cd:79:a5:0a:a9:ff:ba:71:f3:84:c0:4a:13:39:5f:9a:a3:99:
         e9:9a:df:97:fd:fe:30:b6:9a:1f:42:93:2f:d8:83:76:ae:54:
         e2:cd:26:ac:e5:35:95:37:bd:bf:e4:9e:af:25:67:df:be:33:
         db:59:a6:93:e5:c8:32:f1:b2:6b:e3:de:53:21:48:f3:5c:49:
         08:cc:0e:6b:22:8f:9e:7c:a0:a9:70:9c:40:37:f1:34:57:ef:
         7f:4a:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 04:53:48 2026 by rpki-client