Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File:                     -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier:          YQIXfn5Ie3iHYUxBSD7HMrNBcNkO7PLUf/HWJ5sShIE=
Subject key identifier:   DD:E1:83:7F:3F:04:F6:62:67:28:A8:16:03:6F:D0:C0:63:1F:33:25
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       04BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number:          04B1
Signing time:             Thu 10 Sep 2026 23:46:33 +0000
Manifest this update:     Thu 10 Sep 2026 23:46:32 +0000
Manifest next update:     Thu 17 Sep 2026 23:46:32 +0000
Files and hashes:         1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: Nqt79h0pMmr52OVGPb9PfLraRCkt/5CF74qbX5ZZwyk=)
                          2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
                          3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Sep 10 23:46:32 2026 GMT
            Not After : Sep 17 23:46:32 2026 GMT
        Subject: CN=6aa34158-a3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:c1:d7:5a:7f:76:5a:b2:53:e7:8d:91:63:
                    e4:33:83:92:12:44:ea:60:cc:2c:0e:8e:23:59:92:
                    e5:28:fe:52:ce:e4:99:57:59:78:c6:bb:35:cc:2c:
                    e8:08:9e:3d:6a:ab:21:65:40:fc:3e:b5:42:5f:f0:
                    dd:b3:c9:54:17:7c:3b:db:49:02:ae:a3:1d:66:45:
                    df:45:8d:f0:d8:3b:79:10:71:38:fb:6a:20:2a:05:
                    54:8d:13:3d:fa:c7:0b:a7:7d:6d:1e:cf:58:b1:d1:
                    44:82:97:d9:23:44:1b:85:b4:b8:57:99:49:77:ad:
                    3d:fe:04:11:80:c0:e6:28:0e:1d:64:fc:fa:4c:f8:
                    44:02:55:85:dd:14:ac:b3:fa:5c:68:75:94:18:40:
                    a1:4c:82:b7:0f:e2:cd:9a:15:47:3a:84:11:0d:6d:
                    fe:6e:04:aa:c6:14:76:2d:7c:f5:e7:e1:9d:a2:ac:
                    00:c9:ad:32:27:7e:92:a9:fe:c3:e4:96:1c:04:66:
                    47:7e:89:77:71:9b:55:91:f6:24:55:8c:63:33:9e:
                    8a:19:0b:ad:88:9d:5f:8c:32:14:70:f3:97:13:f0:
                    d8:14:ce:e2:ec:fa:8e:88:c8:2b:59:8b:43:43:9b:
                    43:00:d8:43:71:9e:e9:04:ab:82:e5:0b:93:c0:70:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E1:83:7F:3F:04:F6:62:67:28:A8:16:03:6F:D0:C0:63:1F:33:25
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7a:d2:8a:3a:94:a3:ec:df:1a:bc:bb:40:e3:ff:43:08:5e:
         f5:d1:77:c6:e2:b4:15:1f:2b:10:7f:86:ea:52:94:76:25:70:
         9a:79:d5:5e:a5:89:f4:d7:8f:1d:1e:92:5f:c0:15:d8:c7:5e:
         bd:1c:2b:1c:10:7e:a3:5a:e2:de:33:38:9a:c2:1b:0a:8f:a8:
         7a:bb:2b:a6:dc:53:30:97:39:6e:e4:fb:a3:45:01:7e:4c:c1:
         7f:cc:c3:47:cd:58:46:f0:bb:da:0f:d0:7d:1f:5d:d7:d4:97:
         59:e4:f2:14:33:e5:1e:ed:fd:2f:25:f8:3d:90:1c:37:07:ab:
         6a:69:c8:c6:1a:1a:91:dd:7c:8f:4e:e6:2d:d8:82:98:d3:79:
         c1:a7:71:16:2a:aa:14:10:82:87:a0:80:e9:88:4f:36:f3:9c:
         c9:21:9c:8a:51:fb:0f:76:f9:95:59:47:90:ea:b7:65:22:3f:
         03:a8:2f:e4:95:ed:00:59:7b:14:aa:e9:f6:e1:63:d0:17:6d:
         0c:af:67:4e:da:b5:5f:cf:dc:e7:43:0f:c7:59:1d:02:a9:d1:
         57:35:f0:30:e1:71:98:50:21:5d:5b:18:93:c2:e5:f7:84:de:
         89:50:ad:ee:1a:d6:00:09:12:72:4d:21:b8:a3:e3:a8:2f:38:
         9b:c8:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:14:04 2026 by rpki-client