Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
File:                     MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json)
Hash identifier:          45mFm921QkJxekmaSm+MuYunGwojYyZdAxulFidMvDY=
Subject key identifier:   00:BF:C4:E8:BA:65:97:06:8C:A5:6F:00:66:D5:02:B7:AA:FF:27:1F
Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
Certificate issuer:       /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
Manifest number:          0223
Signing time:             Mon 21 Sep 2026 02:48:33 +0000
Manifest this update:     Mon 21 Sep 2026 02:48:33 +0000
Manifest next update:     Mon 28 Sep 2026 02:48:33 +0000
Files and hashes:         1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: wsXWFjMBAbAWd7Oas+6ymlcf/wSzeQW5cmjJ5C2Ran0=)
                          2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: KvfHIPuFU1q+aC272iMwdKoNoq5N7DEJ+uq/zpJXB94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
                          rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
        Validity
            Not Before: Sep 21 02:48:33 2026 GMT
            Not After : Sep 28 02:48:33 2026 GMT
        Subject: CN=6ab09b01-939c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:dd:2f:0d:d1:a5:f4:37:d7:a1:5f:b6:05:
                    bc:25:6d:ea:92:af:a9:24:3f:cc:f0:1c:a9:17:1d:
                    19:15:ea:0f:f5:f0:64:d5:e8:4b:f1:37:5d:2a:a8:
                    13:19:30:6a:2d:d3:a5:95:84:4a:39:e3:ea:a2:7e:
                    15:f3:bc:f2:9c:a0:27:01:58:53:5c:0e:61:19:6b:
                    85:bf:3b:14:03:cd:0b:8f:30:31:7a:43:a7:bf:18:
                    a6:64:33:8f:a2:04:59:04:a7:65:d6:7b:20:97:f0:
                    3c:85:42:0e:76:74:39:1a:cd:09:a4:a2:11:39:f4:
                    59:d5:90:d5:a1:86:04:e6:2b:cf:d2:43:a2:4c:da:
                    b1:b3:ef:0d:c2:a6:ad:5b:ee:ed:a0:34:e7:d6:b6:
                    69:dc:ac:58:e2:b0:d1:9d:ef:15:3b:06:57:22:9b:
                    0c:fe:24:be:17:c7:17:79:9b:4a:2d:02:c3:36:d5:
                    93:1e:1c:7a:5e:e2:2e:ca:7d:b4:6c:fe:c8:30:37:
                    d5:e9:00:1e:99:27:23:40:83:aa:37:c8:4e:08:93:
                    3f:91:a7:65:fe:10:ab:d5:3c:e4:fb:ed:97:8e:30:
                    8b:45:45:95:f1:61:30:26:2f:3a:91:0c:a1:72:3e:
                    e9:ac:9e:d0:84:f9:d9:4f:34:1a:82:85:39:fb:35:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:C4:E8:BA:65:97:06:8C:A5:6F:00:66:D5:02:B7:AA:FF:27:1F
            X509v3 Authority Key Identifier:
                keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:76:80:d2:27:30:06:a9:e9:63:69:79:bd:a5:4e:a1:84:a6:
         a7:34:45:92:bd:62:7b:78:d1:fe:fb:34:72:28:28:0d:78:b5:
         90:bc:83:2a:e4:12:28:14:26:73:6b:97:11:01:3f:85:3e:7f:
         a3:f4:6a:d2:d1:7c:4a:32:54:c9:94:f0:cf:8d:4b:9c:54:5d:
         62:ac:ef:77:6f:57:9b:a9:36:f8:3c:40:ed:98:c9:e6:91:0b:
         f6:7a:f6:e2:e8:ff:a4:52:c8:48:a6:34:4f:4d:66:36:aa:6f:
         01:5b:03:41:5f:97:10:40:25:ea:cb:fb:b6:3a:6f:53:d9:4a:
         d2:07:65:01:b6:77:d4:9e:6c:43:1c:59:ea:7f:91:84:12:57:
         58:35:7b:47:f0:31:7a:19:b3:0f:6f:79:36:79:bf:06:3c:5c:
         15:1d:dc:be:c3:96:59:19:2b:9a:7c:1b:65:09:d9:80:0c:10:
         b3:99:25:50:ca:1b:1f:6e:74:49:df:74:8f:a2:50:0a:44:9d:
         7c:5c:c7:08:00:ed:2f:f7:c6:ce:f2:e6:8d:f9:c0:b3:5b:d4:
         87:1d:a7:7f:4e:a1:84:b1:bc:26:48:7c:cf:48:e1:6d:5a:e7:
         2c:31:4e:57:e4:c4:61:e2:61:d0:ee:bf:8d:24:4c:59:bd:65:
         2c:f9:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:18:11 2026 by rpki-client