Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File:                     Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier:          w2mx0f+AgnEi3MfIWOcbkwzlBjanV3Uz8ktkvA63kq4=
Subject key identifier:   95:71:23:06:B8:AA:99:96:26:6F:A1:83:62:D9:E9:05:16:56:03:98
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       2693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number:          2676
Signing time:             Mon 31 Aug 2026 15:39:41 +0000
Manifest this update:     Mon 31 Aug 2026 15:39:41 +0000
Manifest next update:     Mon 07 Sep 2026 15:39:41 +0000
Files and hashes:         1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: G+40krTiXwPo/K7YakMXy3nho+OwxzFcQF42MuM8wp4=)
                          2: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 0+dhsLV0hEijLWmW5GRXfj6s2WTHqpeZ24Q4A7DWnzU=)
                          3: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: PwNqKcYZhajR/KdGGezpNZmD2Nl8G3s805wTHD5hc9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 15:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9875 (0x2693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Aug 31 15:39:41 2026 GMT
            Not After : Sep  7 15:39:41 2026 GMT
        Subject: CN=6a95a03d-7bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:18:89:61:7d:6c:d1:1d:02:1a:20:b3:ab:
                    3a:11:7a:8e:a4:98:1d:7b:82:d3:8d:16:5e:95:55:
                    91:f6:aa:69:b7:c4:98:6f:83:ff:fe:f7:81:ca:fe:
                    79:2b:1d:16:2b:c7:91:dd:0c:a2:5d:39:24:23:af:
                    f7:ca:96:19:7e:7b:83:5d:43:05:c4:a3:de:85:51:
                    f6:e1:7b:6d:84:d2:ea:e7:d7:9b:40:15:e5:04:60:
                    f6:27:9c:67:39:bb:17:48:03:21:72:c4:f8:bd:14:
                    f3:9a:50:25:a1:9e:77:2a:bb:9b:a2:b7:69:62:16:
                    12:46:8c:db:93:81:6d:07:36:15:78:c7:23:66:a3:
                    33:16:e0:41:84:f9:06:57:16:96:3e:ad:78:e7:f9:
                    72:2c:ad:fd:87:3e:3f:8b:21:9a:a5:c8:69:a4:f6:
                    ad:da:f2:55:c0:60:02:dd:5e:7a:bd:0c:7c:9e:e7:
                    d3:b0:ec:6d:c8:41:1d:e1:cc:bf:2b:b9:3e:2a:e9:
                    4b:78:f2:b6:01:b9:dc:61:e9:06:47:1b:28:3c:c6:
                    fb:da:af:ba:26:a0:cf:a4:c9:8e:79:bf:5f:c5:09:
                    95:60:c8:23:30:e6:69:64:8d:d2:9d:70:dc:a3:4b:
                    93:93:75:ba:b0:e1:b8:3b:a7:a5:17:bc:46:50:b2:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:71:23:06:B8:AA:99:96:26:6F:A1:83:62:D9:E9:05:16:56:03:98
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:48:86:2c:36:6e:ad:78:52:aa:e7:27:6e:b8:19:d6:e3:ec:
         8c:54:63:d5:44:27:95:11:4e:27:dc:39:44:be:cb:13:0c:ed:
         6c:65:0b:3d:22:05:a4:3f:ce:4a:b3:a1:94:be:0c:ca:f0:15:
         46:e6:a3:a4:3f:2f:86:37:0d:99:ac:27:5e:be:df:08:e9:3f:
         19:9f:60:95:d9:77:3f:ae:cc:f7:0c:34:52:d6:0e:92:57:6b:
         90:aa:ae:c6:59:15:09:a5:a4:bf:65:e3:4b:a1:9a:a9:1d:04:
         ed:93:f6:f0:2e:10:c0:7f:6a:ca:0d:de:dd:c8:d2:62:e9:a6:
         86:76:e3:4a:b9:22:3a:66:35:a7:2e:f2:b9:80:60:cc:59:a5:
         7c:7f:9d:bc:f0:d6:aa:a6:ea:9d:fd:ff:d8:3c:24:64:75:13:
         dc:1a:af:3b:21:57:3e:82:a2:28:71:17:a1:ca:17:97:64:57:
         37:6f:49:0c:20:e5:63:6a:ea:5f:68:ae:2d:04:2e:f1:61:2f:
         9c:39:20:9f:f8:99:a3:97:93:4e:3a:6e:f0:d7:65:fa:d8:a5:
         f4:58:46:8c:7e:74:c2:19:9c:72:11:ab:50:63:a5:45:3e:5d:
         3d:52:e7:23:35:ee:f7:1b:b3:9d:08:e6:e3:8a:8b:35:7d:74:
         65:be:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:42:57 2026 by rpki-client