Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File:                     MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier:          p4qtNTaWX90j5VFelbhTQzNdTWS3g4/gWjqHtN+i1ec=
Subject key identifier:   84:D5:36:64:BD:2D:B2:68:08:E5:BE:1C:01:73:4F:72:1A:1E:35:A0
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer:       /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number:          9E
Signing time:             Mon 21 Sep 2026 07:19:54 +0000
Manifest this update:     Mon 21 Sep 2026 07:19:54 +0000
Manifest next update:     Mon 28 Sep 2026 07:19:54 +0000
Files and hashes:         1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: KuR7YcHOE+JZpQCcI46441gf6xGjv92NfvackbUvgsE=)
                          2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
                          rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
        Validity
            Not Before: Sep 21 07:19:54 2026 GMT
            Not After : Sep 28 07:19:54 2026 GMT
        Subject: CN=6ab0da9a-35c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:d5:3d:c2:05:f6:f9:72:fd:14:e3:a5:d8:
                    3b:7f:23:13:69:a1:2c:a1:27:25:75:bb:61:89:e0:
                    a3:92:3c:06:b7:bc:9d:69:18:b1:a6:0f:0f:a9:10:
                    0c:b9:6a:c2:90:c9:36:10:37:65:d8:59:1b:b2:39:
                    04:d6:a4:c4:29:67:8a:41:f4:43:6a:4e:db:7b:9d:
                    64:5a:ec:c8:f6:4f:35:ac:5f:77:0b:f1:60:83:e1:
                    3f:13:39:0d:aa:40:8c:65:e4:3e:e0:43:89:40:57:
                    16:41:12:b2:a7:6b:20:2b:34:5d:f0:7c:48:a5:13:
                    5e:d0:ff:dd:50:f9:c2:90:f4:ce:93:22:a4:fb:99:
                    b1:6e:6d:35:fb:28:3a:51:80:04:84:76:f6:d8:5d:
                    35:3a:59:1e:ce:a2:ad:d1:a5:ba:54:23:f5:ac:d1:
                    5a:c3:f9:8f:cf:2d:a3:e8:88:d9:bd:5f:74:40:70:
                    32:bd:c5:4f:15:f6:21:4c:bb:aa:a9:73:c9:bb:2a:
                    6b:a4:c0:f6:e0:22:ca:74:81:16:9b:1c:42:13:0a:
                    33:3a:45:56:57:2c:20:46:c5:f4:4f:db:18:40:8c:
                    2f:93:ce:16:ee:c1:aa:5b:06:56:69:14:91:14:9f:
                    ae:c1:b7:4d:22:f5:70:52:8f:4e:c6:ef:3b:02:e8:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:36:64:BD:2D:B2:68:08:E5:BE:1C:01:73:4F:72:1A:1E:35:A0
            X509v3 Authority Key Identifier:
                keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:67:50:10:1b:29:af:20:8d:4d:63:77:11:58:f3:9b:85:ba:
         58:95:8d:b0:d8:b4:fe:e8:ff:70:cc:28:51:28:d8:02:95:6d:
         0f:92:c3:11:f9:b2:76:28:76:d3:48:cf:a8:91:b2:59:aa:08:
         e2:d2:72:fa:2e:f2:57:53:6c:85:da:42:e3:76:e9:9d:8c:05:
         39:89:2a:2b:59:88:59:87:bb:22:57:14:75:9f:b2:19:ef:15:
         ba:21:1d:07:6f:ad:04:2e:c2:94:b0:db:35:14:a8:08:12:41:
         a2:7e:87:0b:44:62:8d:81:3f:76:a1:7a:2c:17:15:7d:52:e1:
         cd:24:0a:1e:bd:0a:1b:2d:04:2c:5f:2b:e1:74:d5:ec:d0:46:
         db:0b:fd:1c:1a:4f:84:5b:38:30:7c:80:83:6e:9a:22:11:5c:
         b7:f0:03:d2:c4:b4:ae:0f:b6:23:9c:7a:cd:37:cd:6b:18:bf:
         0f:e3:1b:70:f6:a1:ff:1b:85:54:83:41:3d:b8:bd:fe:31:b9:
         2d:c7:50:48:9d:76:1e:4b:39:65:58:77:99:f1:35:1d:16:a5:
         72:99:09:98:ce:dd:cf:3a:de:86:fa:86:b2:1d:77:36:17:e7:
         d5:49:7e:e5:2d:b6:b3:11:43:a6:01:7c:3e:21:7f:3f:8e:25:
         5b:35:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:33:17 2026 by rpki-client