Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File:                     D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier:          fN5azy3zU4itnou4VS78T2OnKjkBuEZ3UUQrdhAyedo=
Subject key identifier:   9D:08:0F:F1:22:E7:23:61:A3:9A:8F:FC:D3:3D:F1:3C:42:BC:C9:83
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer:       /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial:       0368
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number:          035E
Signing time:             Tue 01 Sep 2026 00:50:57 +0000
Manifest this update:     Tue 01 Sep 2026 00:50:56 +0000
Manifest next update:     Tue 08 Sep 2026 00:50:56 +0000
Files and hashes:         1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: c4YNL+1HJNxgi25HM+zcmF2ItWuhIT1qWJNIS0kuFyY=)
                          2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: BM+ozPBqi+7jkDfiv4Ek3CSSWjwIGqheBBZo7D8CtKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
                          rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
        Validity
            Not Before: Sep  1 00:50:56 2026 GMT
            Not After : Sep  8 00:50:56 2026 GMT
        Subject: CN=6a962170-4149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:20:02:54:26:0d:34:10:57:32:99:7c:0a:
                    99:c3:90:02:74:e0:54:b1:e5:58:58:a6:a1:48:10:
                    96:dd:62:b5:73:07:bc:1f:7d:6c:76:5e:27:87:85:
                    fe:7d:ac:55:ab:5e:0f:4b:02:72:17:f8:8e:67:51:
                    73:4a:bc:18:e1:65:a3:50:fe:5e:ab:8a:cd:f9:b6:
                    90:0f:d1:51:7b:56:91:5f:32:52:88:f7:c5:ec:4d:
                    4c:bd:86:60:72:5a:96:1f:f3:fa:16:96:17:f4:8d:
                    91:03:dd:a5:83:df:38:bf:7f:18:f7:20:60:7b:44:
                    c2:69:17:cc:17:8a:aa:c7:de:f9:40:d5:c3:30:c7:
                    0e:1f:ce:40:4b:04:99:5f:ef:08:6b:6b:65:ea:d6:
                    5d:e0:72:87:42:42:72:99:9c:d6:b5:ee:38:23:05:
                    4f:c3:a0:db:14:d6:35:16:e5:12:eb:c2:09:f1:00:
                    b3:60:e0:f8:f5:7b:79:71:5f:7b:15:7d:f4:fe:73:
                    23:ce:d7:95:aa:ca:46:67:85:70:52:95:d3:25:4a:
                    5a:5d:46:f9:2f:8e:29:1e:bc:bd:f9:4c:5e:a4:71:
                    3f:49:20:3b:80:ac:f2:79:b7:cc:d6:61:3b:dc:2c:
                    0c:7c:39:41:83:fd:a1:6b:78:a8:4e:36:1b:78:57:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:08:0F:F1:22:E7:23:61:A3:9A:8F:FC:D3:3D:F1:3C:42:BC:C9:83
            X509v3 Authority Key Identifier:
                keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:1c:47:6d:22:a0:11:4a:04:54:15:9d:48:dc:40:4e:38:
         fd:a0:6f:eb:fa:87:a4:0f:3c:4d:af:d7:63:19:fa:3d:38:81:
         2b:b9:14:c3:2d:b1:04:2c:c8:14:99:df:9f:9a:12:fe:37:08:
         16:b4:87:4b:b2:f0:a6:45:c4:74:20:3b:70:3f:00:10:4d:3c:
         9e:58:ab:97:a5:9f:1c:98:82:59:a9:d4:f0:80:d2:bc:cb:7d:
         89:9a:c8:7a:5d:2a:75:e9:d2:68:02:5a:cf:49:ff:fa:d8:50:
         fd:2a:4f:26:c2:d0:cc:9c:8b:56:5d:64:08:c9:d1:24:26:02:
         be:ce:9c:f5:08:de:53:3d:5d:a3:4b:53:54:2a:d0:c4:95:63:
         5c:27:a7:f5:e6:99:09:09:86:71:67:cf:36:fc:54:23:31:d6:
         18:df:44:a6:a6:14:39:f4:8d:0e:1c:05:86:43:19:ba:c0:62:
         8e:c9:87:24:ce:cc:ee:a6:da:b2:ea:7c:97:df:b4:ef:ad:2c:
         2e:f6:fd:dd:a3:9d:64:85:a6:98:c7:18:af:a1:8d:36:88:9b:
         e0:72:c0:37:86:0f:7b:10:53:2d:10:cc:a0:f9:9a:2c:91:e0:
         dd:16:95:56:71:08:22:24:50:82:f2:36:65:1b:6e:26:6a:22:
         73:e6:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:33:44 2026 by rpki-client