Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
File:                     d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft (raw, json)
Hash identifier:          8vDx7VrxC7OxpwyiB+hS1Evq2pKillyUZ8j8Z9MBGHg=
Subject key identifier:   02:59:43:90:9A:C2:A4:D4:53:04:AB:EA:82:AE:B3:9C:B4:46:D8:6E
Authority key identifier: 77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C
Certificate issuer:       /CN=A918C2EB/serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
Manifest number:          89
Signing time:             Fri 11 Sep 2026 07:41:26 +0000
Manifest this update:     Fri 11 Sep 2026 07:41:25 +0000
Manifest next update:     Fri 18 Sep 2026 07:41:25 +0000
Files and hashes:         1: d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl (hash: uVQTb+qSjeYa/jfRwYGC7X2qKB/I873tYnlVG4FlK2Y=)
                          2: 9C9F9D6AE61511F0BA7CC46D6A6F56BC.roa (hash: p8eavba2zmjT8rN7Dr/GDzyItyV8Fg/l0iky6Jo7qLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl
                          rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 07:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2EB, serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C
        Validity
            Not Before: Sep 11 07:41:25 2026 GMT
            Not After : Sep 18 07:41:25 2026 GMT
        Subject: CN=6aa3b0a5-d65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:6d:59:fd:ba:01:0d:61:b4:6b:7b:19:5e:
                    95:7d:72:96:d7:58:57:81:58:e6:45:55:69:11:e9:
                    7c:89:d1:1d:a8:18:9f:a9:45:45:6e:8e:b6:74:88:
                    a1:cf:80:19:7d:a9:78:e7:c9:d5:38:c0:6e:a6:14:
                    71:22:e8:c2:23:31:b5:a8:f0:25:9d:44:eb:cd:a1:
                    c4:37:03:c3:66:15:4e:92:33:f5:69:a7:6d:f9:96:
                    19:28:f2:6b:dc:8c:78:03:4f:34:8d:18:a4:31:07:
                    74:5c:1c:d4:e4:99:d4:e4:46:77:88:82:3a:21:69:
                    50:d8:30:b7:d2:f1:f7:27:6e:0a:09:2d:7a:2f:44:
                    0f:ae:4e:30:5b:91:24:aa:7c:5a:3b:e4:b6:ca:c5:
                    41:0f:83:a2:a9:e2:91:a0:c4:96:4a:80:5e:f5:1c:
                    cd:8c:0f:de:00:0f:5a:89:37:3a:6f:eb:0b:b9:ec:
                    ba:c4:5d:03:34:79:3c:43:31:09:27:0a:3a:20:f3:
                    47:da:2d:fb:27:c3:cc:d4:52:43:c6:47:12:25:4a:
                    8c:11:70:e0:14:2e:33:61:68:b8:a1:18:1c:31:fc:
                    67:f3:a1:21:af:e1:f2:2d:75:63:de:f5:ed:f3:ca:
                    77:5a:23:3a:40:ea:53:c9:c1:20:a3:da:dd:4f:a1:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:59:43:90:9A:C2:A4:D4:53:04:AB:EA:82:AE:B3:9C:B4:46:D8:6E
            X509v3 Authority Key Identifier:
                keyid:77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:43:67:c6:d3:13:76:c1:73:59:c5:88:93:2e:43:24:0a:
         53:14:ea:35:6e:aa:6b:0e:ad:77:ca:48:ba:58:05:82:32:80:
         bf:bb:e3:e4:a1:84:a4:f7:e3:27:bd:01:08:f0:53:7a:b3:99:
         46:1b:af:77:28:c6:7e:3e:a3:38:e2:7f:e3:a8:89:8a:d8:6b:
         7f:9e:aa:af:42:5d:e2:7b:dc:07:5b:7f:2b:c1:2f:4c:e4:6e:
         24:94:35:06:d2:1d:db:88:8a:ef:40:e4:93:9d:29:bb:fd:ed:
         54:09:52:7c:52:86:ab:40:1c:42:2c:08:e1:5f:38:61:aa:9a:
         a4:ef:56:10:42:f3:85:df:77:15:62:d7:ce:8c:d6:d4:e2:a5:
         05:96:9e:35:29:1d:20:23:c9:94:27:20:03:b8:9c:36:04:1a:
         d8:97:52:72:9f:1d:ed:6a:e5:f7:69:83:66:bf:9b:92:8e:29:
         96:54:56:64:5a:01:60:f8:18:84:2d:b5:04:ac:44:99:fa:36:
         93:f4:30:17:9b:1b:95:8d:d8:29:77:04:1d:b2:bd:9f:de:36:
         e3:ba:8c:35:59:58:4f:47:c3:4c:9e:c4:e9:9d:71:55:53:fd:
         dc:a9:0c:7b:94:3c:77:a7:44:d6:fb:eb:bb:eb:bb:a9:47:58:
         6c:39:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:26:51 2026 by rpki-client