Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File:                     2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier:          r4t1eFza0+GfQkauLF6MMojYY3lEYICoz9KJBzzVg0E=
Subject key identifier:   F8:EE:D7:5A:AC:45:8B:3F:DB:26:62:25:01:06:77:01:84:EF:6D:1E
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer:       /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial:       3587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number:          3581
Signing time:             Fri 18 Sep 2026 14:48:48 +0000
Manifest this update:     Fri 18 Sep 2026 14:48:48 +0000
Manifest next update:     Fri 25 Sep 2026 14:48:48 +0000
Files and hashes:         1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: lgjG4IGY4gq7djKdYVht17WUwRIcrU217ZFUpm5da8A=)
                          2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13703 (0x3587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
        Validity
            Not Before: Sep 18 14:48:48 2026 GMT
            Not After : Sep 25 14:48:48 2026 GMT
        Subject: CN=6aad4f50-98d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:c4:24:ba:23:6a:c9:79:ee:a0:d5:d1:80:
                    db:a4:93:57:08:0d:5c:ba:f8:10:df:44:2e:6b:2b:
                    dc:04:73:f1:f6:33:d0:99:83:37:5d:d0:41:54:4a:
                    c5:cf:d6:ad:4a:c7:f0:84:12:1f:a1:7e:ee:fa:d3:
                    c2:94:cb:86:71:6f:c9:9b:22:82:8b:32:53:0a:f1:
                    33:04:c6:60:c1:c0:d7:6b:50:96:23:d0:04:66:51:
                    61:ba:89:d5:d1:d0:54:f2:5b:0a:af:fe:b6:e8:03:
                    08:10:f3:b9:93:83:09:f6:0c:d5:de:d7:7c:b0:50:
                    1d:16:be:aa:25:8b:06:04:47:c9:1d:43:f4:2d:01:
                    a6:70:26:74:bb:f3:af:be:6e:f3:5f:74:c4:08:30:
                    33:8a:45:ea:09:0d:76:d4:67:d1:b6:21:23:f5:07:
                    39:24:9a:1d:b0:ae:b4:3f:c4:5a:18:ba:10:9a:58:
                    4e:e1:ff:2b:e5:ff:f5:36:00:ae:d5:f9:9a:61:0d:
                    e1:c8:d9:36:ca:b8:09:84:9f:2e:86:d4:b3:f6:2a:
                    17:9f:d0:ff:76:5f:e4:d2:51:62:ad:b5:cd:06:94:
                    80:16:1d:02:95:4d:88:6b:f8:17:a9:04:82:83:ee:
                    96:34:f1:da:39:56:2f:6c:5c:d4:c5:4f:a1:de:b0:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EE:D7:5A:AC:45:8B:3F:DB:26:62:25:01:06:77:01:84:EF:6D:1E
            X509v3 Authority Key Identifier:
                keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:85:39:37:5f:0f:8a:88:43:60:c4:6e:07:e7:12:e1:68:05:
         2f:d1:9b:9b:6b:bb:17:6f:ce:70:4a:2b:91:6c:ea:4f:81:0d:
         5c:8d:78:bf:56:3e:92:66:ae:21:0f:e8:03:28:e3:2d:48:07:
         54:ee:b4:92:14:b9:69:75:87:23:ac:2d:4e:8d:c5:a3:9d:e9:
         ef:13:71:85:83:ee:7c:51:97:08:99:73:a7:a8:a7:98:da:f8:
         7c:2f:64:4e:97:28:00:e8:89:ba:47:15:0a:56:00:40:c6:84:
         54:28:4b:22:81:da:38:10:8e:d2:9f:07:0d:92:81:df:be:14:
         db:5f:ff:cd:38:95:2c:6d:f4:38:0b:5f:af:fc:bd:d7:6e:0e:
         33:f6:6b:58:6d:c7:b1:5e:cd:9f:69:e8:11:7a:2f:35:36:59:
         1f:cb:c3:c3:2a:12:32:b4:92:84:cf:80:5d:16:db:6c:b5:a8:
         d0:5d:b3:51:b3:dc:70:33:ed:e9:8d:03:6a:02:89:1b:c9:6e:
         2e:cc:56:ad:12:9a:01:36:0d:6d:30:76:77:d0:38:ec:82:21:
         6d:56:3c:5c:b1:0c:ac:c3:02:f2:ac:14:58:7c:5e:b2:3a:b4:
         31:7b:ef:e6:51:5d:05:48:d1:50:8c:79:85:2c:35:2b:8c:19:
         2a:e0:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:03 2026 by rpki-client