Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
File:                     AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json)
Hash identifier:          9zonaQ3waJEMF++U7orfWEWUtwF/xCoJDtcWSFB5bsM=
Subject key identifier:   5B:22:DC:2D:8B:44:AD:9C:2B:10:E1:56:EF:FF:1F:2A:F1:72:79:3C
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Certificate issuer:       /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
Manifest number:          04CF
Signing time:             Sun 04 Oct 2026 23:50:23 +0000
Manifest this update:     Sun 04 Oct 2026 23:50:22 +0000
Manifest next update:     Sun 11 Oct 2026 23:50:22 +0000
Files and hashes:         1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: xAwhaN70GNj0MLZfF80/fyemzaxMoO2ozsdQ75wV2Wk=)
                          2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: fjSWCV6GApskxLqYEz6j6d7oXSeC7q7HKpQeRL3WkxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
        Validity
            Not Before: Oct  4 23:50:22 2026 GMT
            Not After : Oct 11 23:50:22 2026 GMT
        Subject: CN=6ac2e63f-9143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:e1:ac:a7:82:9d:b2:e6:9d:d0:74:f4:a9:
                    e2:45:34:e3:3c:3a:be:3f:fa:98:11:a8:56:a6:d6:
                    0d:81:6b:9d:7d:7d:61:6d:57:e0:f8:d0:e7:66:74:
                    b5:31:00:23:4e:d6:11:dd:e3:1f:11:ba:1b:1d:a6:
                    a9:5e:7f:a6:a1:f3:bd:4d:5e:76:2f:8e:23:bf:63:
                    87:d8:ae:6a:0e:16:5e:5b:0b:0d:ef:e7:0d:0d:05:
                    e0:65:fb:11:96:21:1a:17:db:66:cb:c3:fd:8f:01:
                    8b:2c:d9:80:69:dc:11:81:ff:23:4c:d6:8e:e6:2c:
                    3f:76:29:2e:96:7a:4c:f6:4f:ad:65:9c:34:7a:6a:
                    71:c6:1e:66:3a:88:71:6e:ff:e0:60:0b:6b:0f:e4:
                    65:ea:52:da:df:65:ed:da:fb:ae:87:c4:77:c8:87:
                    03:f7:7b:14:16:09:62:c6:94:03:f5:31:d0:b5:0e:
                    26:da:a6:5b:c9:20:7d:4c:07:79:a6:ca:e3:36:cf:
                    05:fd:5d:b9:bd:ce:92:97:25:8a:d1:b7:e7:87:93:
                    20:36:d6:9c:4f:9d:17:a0:f1:75:05:5e:4c:d3:0d:
                    d7:e3:97:59:85:96:75:dc:74:89:6f:22:85:da:57:
                    a2:ea:5e:41:ef:48:95:68:38:ec:66:13:06:00:f0:
                    25:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:DC:2D:8B:44:AD:9C:2B:10:E1:56:EF:FF:1F:2A:F1:72:79:3C
            X509v3 Authority Key Identifier:
                keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:e2:c9:90:a5:8d:c9:46:97:01:fe:c5:ca:4c:5b:bc:dc:
         c5:0a:67:2d:ff:b8:a3:d4:fb:e6:8f:43:18:6b:fc:59:f5:49:
         27:f1:2f:15:89:11:6c:4f:6f:7e:e3:26:63:8d:67:2b:84:41:
         5d:ad:bc:ec:d5:76:3d:09:60:72:2b:50:cf:e3:4f:e1:64:b8:
         26:59:bc:8f:41:6d:bf:94:7e:58:4f:18:8e:d6:f7:7d:94:a6:
         43:37:93:da:f9:e3:5f:0f:e1:e1:dc:b9:d3:e0:93:22:ad:a2:
         d1:5d:ff:03:01:ab:90:5c:0a:9e:50:79:fe:6e:1c:66:bb:ec:
         b3:70:37:46:d4:57:94:52:da:43:ec:48:cd:87:81:a7:ad:8f:
         73:9c:d7:82:53:33:f7:66:c2:45:c1:ff:ea:a6:89:a1:de:93:
         23:d9:dc:63:7f:4b:83:3e:90:a0:f8:c5:8a:78:88:d7:87:c2:
         28:c9:4d:a6:9b:95:a9:74:1f:8d:41:85:1d:46:ea:3f:f3:97:
         9b:90:06:c8:a3:d8:c8:22:45:da:5d:2f:ff:02:f1:cc:95:ae:
         96:f6:ae:ed:5f:98:e5:34:2a:fd:54:95:f0:4b:14:a5:a0:d1:
         81:a4:b0:21:71:1e:88:2f:2f:31:0b:fb:05:8b:4c:97:9e:4e:
         66:54:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:56:24 2026 by rpki-client