Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File:                     RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier:          luPDll2tlDTAgHMApvOj+l//7HmI3FTlRy95loIUTpU=
Subject key identifier:   F8:72:2F:DE:E3:32:7E:80:3F:20:F7:54:28:6A:B3:6F:19:99:5C:71
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer:       /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial:       0597
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number:          058C
Signing time:             Fri 04 Sep 2026 15:48:03 +0000
Manifest this update:     Fri 04 Sep 2026 15:48:03 +0000
Manifest next update:     Fri 11 Sep 2026 15:48:03 +0000
Files and hashes:         1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: Db2/1SRkRSfDoK8YT7yWur9taC4Ny145LLpx8Pp0qnw=)
                          2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: M7OYmQFL8/41ldtug+5JoOUb7vy7UyfuPrmsX/809jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
        Validity
            Not Before: Sep  4 15:48:03 2026 GMT
            Not After : Sep 11 15:48:03 2026 GMT
        Subject: CN=6a9ae833-a23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:c1:5f:fb:26:1c:38:fb:7e:84:3d:3b:9b:
                    63:37:2d:de:c9:fa:b7:6f:b8:dc:24:fb:45:14:5b:
                    d1:71:e2:9a:dc:41:d6:36:ca:cf:fe:91:c7:ef:e4:
                    7b:cb:5f:01:ca:b9:f3:d2:83:0d:4d:1d:92:aa:b2:
                    58:aa:a5:98:bf:e7:ac:ab:60:2e:1c:d8:74:c7:8e:
                    11:aa:91:72:48:03:ca:df:0f:a2:c4:e9:cd:e9:51:
                    93:ae:d1:42:a9:f0:03:2c:8a:e1:e0:1d:28:30:d1:
                    d3:4a:28:d2:50:75:f4:34:42:46:f0:91:02:c5:f4:
                    9b:1d:6a:11:f3:dd:70:08:06:77:5c:d8:53:81:bd:
                    e3:01:41:56:9a:84:96:0f:9b:6d:d5:64:c5:a7:1a:
                    ed:d1:97:d0:9d:ce:93:ba:d1:88:5f:d8:be:95:04:
                    3e:c1:64:3a:f8:14:cf:81:e8:9a:10:9c:43:90:a6:
                    40:ce:fa:70:de:29:21:44:41:96:63:c4:9f:96:5b:
                    46:45:9e:b8:b7:a5:dd:9c:20:cd:31:0e:a4:5d:fa:
                    ec:3c:ed:b6:3a:be:13:5c:69:5d:09:e2:e2:c4:b4:
                    47:c6:4c:7a:ff:36:e4:ff:4b:6f:7b:0f:ca:8b:0d:
                    15:8e:88:db:17:66:2b:71:56:61:b1:48:d3:a8:9d:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:2F:DE:E3:32:7E:80:3F:20:F7:54:28:6A:B3:6F:19:99:5C:71
            X509v3 Authority Key Identifier:
                keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:3b:91:cd:1c:4e:50:0f:03:75:18:e8:32:e6:24:2f:7f:
         51:e6:b1:3e:44:d6:d3:ab:d4:96:6e:08:99:94:52:b1:55:92:
         8d:97:c4:e6:5a:a0:fa:09:4b:6c:99:79:56:2d:ce:bc:6c:d3:
         a4:6f:42:cf:e1:00:91:8e:4c:f1:8a:65:66:ab:88:58:11:70:
         14:a4:2a:45:c1:ff:86:0e:19:e0:dd:ee:1b:e3:12:a2:4b:27:
         2b:fc:7f:07:b0:32:30:a9:0e:1c:36:f0:5b:e8:ca:a3:1c:b1:
         56:d6:ca:7e:2f:6d:7c:07:0f:b3:45:31:9d:f6:4e:7f:fd:99:
         7e:8f:93:af:ad:e5:29:f6:c6:2b:a9:96:11:f7:c9:e8:87:85:
         ce:38:c8:81:c6:a1:28:59:c7:67:b0:e8:c8:c0:41:10:23:21:
         8e:24:51:be:7c:c6:25:78:a2:5e:ba:61:90:0e:6d:b6:19:00:
         25:7b:59:af:79:d9:bf:58:e9:02:8e:01:74:bc:71:72:65:54:
         c9:ee:44:34:c8:66:4c:83:d9:c5:86:aa:8d:1d:1d:60:06:08:
         8c:e9:f3:ad:30:be:d9:0e:1d:99:9e:b5:cc:be:b9:17:d7:51:
         50:9c:39:c2:d0:a8:7f:fe:b3:27:aa:bb:65:a5:73:c2:3f:e3:
         34:6c:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:17 2026 by rpki-client