Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File:                     r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier:          pqoR3huvwg2avqGz5396ptMfF43vDVxWLIGRGmhaMO0=
Subject key identifier:   D5:38:CD:6B:E5:DB:7D:F3:96:68:05:91:D8:44:C6:31:DA:08:27:60
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer:       /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number:          0156
Signing time:             Thu 10 Sep 2026 22:14:04 +0000
Manifest this update:     Thu 10 Sep 2026 22:14:04 +0000
Manifest next update:     Thu 17 Sep 2026 22:14:04 +0000
Files and hashes:         1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: r1RnHbmp0fpio2NuHRDH+tSCgJwyJQpjmoTMet8sgTQ=)
                          2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: +IqdnY0bu/tedBPSD8j29fV45Yb1kBQrsRNgm4wsYso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
        Validity
            Not Before: Sep 10 22:14:04 2026 GMT
            Not After : Sep 17 22:14:04 2026 GMT
        Subject: CN=6aa32bac-86a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:ef:32:a4:72:c8:f0:cd:95:f7:62:64:2e:
                    78:49:8c:16:17:3f:18:86:52:53:0a:b7:e9:b3:79:
                    a1:51:cd:ec:00:72:f6:bd:c9:99:e9:47:4a:b4:1c:
                    f8:f5:92:78:ba:e1:57:c0:74:4e:97:4a:d1:c8:71:
                    2c:6b:ca:fa:91:2b:93:56:bc:0c:f1:91:90:0d:da:
                    4d:af:20:2f:be:80:19:da:50:22:70:49:c3:62:97:
                    6d:d3:b2:d2:44:72:82:d5:0a:36:4a:2e:7b:d8:6f:
                    61:82:7a:47:ea:50:d9:00:e5:67:e9:44:94:e2:07:
                    b0:10:9a:69:17:72:79:79:e1:54:c3:82:7e:86:f3:
                    0c:1f:81:83:69:92:a9:09:52:07:88:90:ca:a1:b0:
                    12:f8:71:f4:c2:8d:6d:db:df:0f:5a:05:11:46:85:
                    32:1d:54:24:84:04:79:e7:23:04:4b:d8:0a:3d:3b:
                    5f:68:ff:ac:96:72:d9:1e:cb:53:c6:43:6e:4c:eb:
                    3a:41:9a:29:18:c5:18:cb:55:53:ea:ab:d6:0d:fa:
                    9f:27:1a:4d:99:07:89:70:72:c4:ce:8a:ab:ca:fb:
                    19:a9:d8:fa:2d:e0:35:44:0a:4b:38:77:ae:b7:b3:
                    fe:5e:3f:da:b1:d9:51:ad:8f:07:9f:1d:78:8f:aa:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:38:CD:6B:E5:DB:7D:F3:96:68:05:91:D8:44:C6:31:DA:08:27:60
            X509v3 Authority Key Identifier:
                keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:a2:a9:79:38:b5:cf:cd:6c:64:e7:7e:18:45:56:5e:69:
         6f:b1:ae:81:d8:4a:39:0e:88:6d:17:6d:38:14:cc:ba:79:3b:
         b3:51:7e:3a:50:0a:49:fa:31:be:7f:aa:1c:69:f8:a6:1a:96:
         3f:b4:17:72:e5:4c:1f:36:36:2b:40:71:11:9d:46:38:8b:4e:
         75:c7:ca:90:9c:c5:aa:18:db:23:df:7f:54:c4:70:8d:62:f4:
         b4:e4:dd:7a:ca:33:35:8a:5e:8e:e2:d2:66:25:73:03:ab:1b:
         39:8b:1e:99:e3:9c:4d:0b:12:43:d5:34:f1:fb:0f:19:99:2a:
         24:6f:67:19:8f:97:c4:12:e4:db:d0:c6:dc:b7:fa:d8:b1:32:
         1f:bc:5e:6e:af:22:0f:b7:8f:27:7a:de:6d:19:9f:55:ea:92:
         42:9a:86:93:00:ba:26:da:94:5b:00:67:f4:9c:55:b3:a7:b1:
         fa:15:51:de:41:a0:99:5e:fc:26:0d:4d:d1:5e:5f:d9:3c:c8:
         f6:2a:d5:e2:0c:07:67:cc:eb:ea:51:4e:36:16:a6:d8:91:1b:
         60:63:21:a3:f9:c3:91:10:c4:f8:75:bf:da:5c:bb:66:00:f6:
         ed:6e:ac:75:3c:63:d6:81:b7:69:59:a9:36:57:44:d9:65:56:
         e4:59:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:17 2026 by rpki-client