Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
File:                     D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json)
Hash identifier:          qXCXsh4jIDHkhnRdBsTeJy+iC3XZt2p7myYCmSa+JDk=
Subject key identifier:   B5:D6:B1:C5:F4:1D:0B:3E:97:CE:50:FF:23:DE:21:93:97:98:98:61
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
Manifest number:          01D2
Signing time:             Sat 05 Sep 2026 03:36:01 +0000
Manifest this update:     Sat 05 Sep 2026 03:36:00 +0000
Manifest next update:     Sat 12 Sep 2026 03:36:00 +0000
Files and hashes:         1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: OYrox0biZxgYqXotKsD4W5SQdg8Plkc1FXKupoO/0xE=)
                          2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=)
                          3: C6DFFAD8906B11F1A67C05D95E11F970.roa (hash: MxNcCgJXLkjB8/Q2d2fNCaIOQkKIonVn32bIfIAzNVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Sep  5 03:36:00 2026 GMT
            Not After : Sep 12 03:36:00 2026 GMT
        Subject: CN=6a9b8e21-0682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:a2:70:a1:6b:a7:93:0a:64:e6:37:f5:f7:
                    73:c9:62:cc:8f:be:c8:a4:a4:82:76:03:fe:87:5f:
                    06:ad:92:9b:af:43:64:02:07:00:63:b1:c4:68:69:
                    ee:9b:b7:6a:0a:7f:ea:84:cb:cd:93:d6:0f:73:29:
                    1b:4b:ce:34:5e:1e:57:b7:4f:52:16:80:9b:f2:63:
                    68:73:c2:ce:ab:40:cc:3f:3c:44:db:64:5f:4b:d0:
                    50:7b:79:93:02:bc:2d:f8:d1:1a:34:f0:6a:b8:24:
                    a6:03:e1:6f:8b:4f:4e:db:de:b8:f0:c9:22:8e:b2:
                    b0:92:a6:a4:5c:9f:0b:54:d0:10:c2:f3:b9:8d:0e:
                    e7:b3:ee:c7:83:cd:4a:25:b0:0b:5b:58:50:dc:0e:
                    8c:b3:fd:89:43:75:b9:ff:2a:2d:9b:11:d7:84:9c:
                    a0:08:c4:36:cd:1b:7b:22:96:c2:65:ac:76:98:71:
                    c0:e6:5f:7f:1f:0c:1d:b5:50:b2:4a:94:f1:61:3d:
                    6e:03:a9:ed:4f:b6:b2:36:a9:24:0b:83:a2:68:af:
                    bc:22:82:5b:ea:d1:97:b6:a8:68:c3:f7:af:75:34:
                    92:92:e9:72:9b:69:2b:81:23:a6:b0:b0:4f:90:cc:
                    80:c6:11:b9:18:28:31:a8:60:24:62:4b:91:39:51:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D6:B1:C5:F4:1D:0B:3E:97:CE:50:FF:23:DE:21:93:97:98:98:61
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:65:42:5d:24:f3:2f:59:93:e4:d1:79:63:80:b7:ea:58:
         91:dc:a5:01:4b:86:89:b8:fb:30:08:8f:68:6c:b9:f8:7b:41:
         c7:7b:85:60:66:94:ed:fe:99:ec:10:91:e6:df:68:dc:94:ef:
         0e:d1:8d:cc:a1:57:96:16:02:b5:44:f6:b0:02:d7:6a:48:3a:
         7a:b7:91:c1:b6:5d:90:86:10:9f:fb:75:6a:14:96:ed:6e:11:
         22:27:f6:24:c9:7e:35:58:36:5c:c5:67:62:33:4b:79:b8:28:
         73:c9:17:23:a4:1a:12:5f:26:aa:07:d1:cd:66:5d:6c:0d:d8:
         63:2e:7c:f1:89:60:bd:29:4e:30:b2:40:c8:a8:08:f7:12:97:
         9d:dc:51:fe:34:e0:c8:db:5a:28:66:38:26:2f:48:24:4b:53:
         25:2d:a9:37:8b:7e:41:7e:83:00:34:29:97:38:18:41:3d:da:
         19:9f:8c:17:62:17:e2:77:c9:2d:1b:76:94:f9:26:45:29:af:
         67:56:ec:bb:ec:4a:a3:3f:0a:63:2f:68:e6:37:34:3b:ff:8c:
         33:ca:c8:07:10:02:60:e2:a6:67:d7:d4:d1:ed:4b:56:19:ee:
         de:5a:f6:36:d3:9d:c4:43:29:6f:a9:f3:2f:e2:f8:31:9b:ed:
         51:88:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:55 2026 by rpki-client