Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
File:                     XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json)
Hash identifier:          eJRZ5DL4pdlynL2mnw5cMChQ1sKpgL0nTKHXvzwywDw=
Subject key identifier:   EE:5F:F8:26:D5:C7:2B:20:4D:8C:98:AB:E7:79:7C:E7:32:A7:51:FA
Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53
Certificate issuer:       /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
Manifest number:          4E
Signing time:             Thu 03 Sep 2026 08:34:01 +0000
Manifest this update:     Thu 03 Sep 2026 08:34:00 +0000
Manifest next update:     Thu 10 Sep 2026 08:34:00 +0000
Files and hashes:         1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: s/XjiqdanQW/M76xKsubv7t0AUv78/5OSCBRrLuiRzI=)
                          2: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=)
                          3: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
        Validity
            Not Before: Sep  3 08:34:00 2026 GMT
            Not After : Sep 10 08:34:00 2026 GMT
        Subject: CN=6a9930f9-9762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:fe:6a:3e:a4:7d:e8:93:cc:5a:a1:bf:a5:
                    9c:9f:4c:ac:bc:42:1c:8a:b3:d6:2c:d0:c8:be:ae:
                    ff:78:69:40:dc:ce:a5:f9:30:9e:a5:6e:86:34:22:
                    9d:de:6e:81:f5:6b:43:51:fa:03:3b:94:0c:97:b4:
                    62:86:e1:97:33:7e:c5:c3:0c:85:5f:c8:69:c6:46:
                    ea:03:8a:a3:4a:a7:88:82:e3:2b:99:92:db:2c:db:
                    a9:5d:41:19:9e:37:f2:1f:ad:4a:79:71:b9:6c:89:
                    d1:54:6b:e7:0e:fe:8f:fe:90:de:35:3e:17:91:5d:
                    19:dc:be:b5:6e:09:b8:94:75:90:cd:a7:07:74:85:
                    fe:34:66:23:4a:3e:77:43:6d:4f:31:55:19:68:ea:
                    71:b9:30:ec:d4:e9:16:c1:bf:e8:b0:3d:8a:53:24:
                    63:85:55:13:90:9f:45:79:69:4f:cf:38:05:96:c9:
                    cf:bf:95:84:0a:f2:c1:0e:be:cb:64:91:42:40:5d:
                    03:76:d6:17:e2:70:e8:ec:b3:d9:98:c6:f8:50:68:
                    40:66:53:4b:1a:1b:23:f6:e8:91:0f:57:7d:2a:b1:
                    88:24:95:71:a1:a9:e1:9d:15:f9:13:27:dd:41:e4:
                    3c:7b:50:4f:27:af:a4:15:f8:11:32:b5:5a:dc:11:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:F8:26:D5:C7:2B:20:4D:8C:98:AB:E7:79:7C:E7:32:A7:51:FA
            X509v3 Authority Key Identifier:
                keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:59:32:c8:7d:b4:ca:66:2d:47:a8:2f:cd:0b:84:fe:36:89:
         4f:cc:34:85:46:42:c2:97:cf:66:95:92:f7:67:7d:0d:1d:e7:
         4f:02:0d:9c:7e:aa:a9:c0:7f:37:2a:b6:49:0d:31:76:d8:88:
         e6:1e:16:ed:8a:70:16:9f:7b:3f:98:50:50:01:42:de:58:5f:
         95:e8:7b:c8:ba:e3:b0:c5:d1:3f:77:7b:4e:b8:01:fd:7a:54:
         4d:4a:31:81:40:49:76:ca:6a:30:5a:61:1e:47:8f:1c:eb:92:
         2e:e2:fd:5e:63:92:ee:fd:2a:a8:1b:3b:14:75:46:5f:fe:e0:
         37:cc:e6:94:1e:90:75:2b:39:29:ef:06:66:9a:ad:98:9e:a9:
         04:c3:37:a0:a2:83:d5:59:b3:58:77:eb:da:de:b2:85:f3:6b:
         2c:32:a5:b5:91:2b:79:95:fa:02:f3:2b:dd:7c:24:9c:ff:0c:
         78:64:64:6a:2c:74:56:06:f3:e5:45:17:8c:05:28:ac:fc:fb:
         16:31:51:40:28:fc:4a:54:0e:e3:02:7f:92:8f:69:e5:55:5e:
         1e:b1:70:ee:a7:12:17:2b:72:03:d9:12:3a:67:7d:81:99:e8:
         70:62:48:ed:7b:3a:b7:c1:d3:bf:76:5e:6e:13:0d:2d:b9:12:
         17:01:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:27:46 2026 by rpki-client