Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File:                     9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier:          0p2r0tDDiPhZ46t5xgbz3XGfjbbsLhBOi5YcW8c6wts=
Subject key identifier:   60:7F:C2:74:23:C0:44:1C:C6:D7:B3:B4:04:B1:FB:A1:80:1A:7D:27
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer:       /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial:       0380
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number:          0363
Signing time:             Fri 11 Sep 2026 00:50:21 +0000
Manifest this update:     Fri 11 Sep 2026 00:50:21 +0000
Manifest next update:     Fri 18 Sep 2026 00:50:21 +0000
Files and hashes:         1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: YrL/DKgCaf+hIo9SJdcqokvVzLe109KWd1OH7jWuysw=)
                          2: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: Qb3ZZ4SikV2WHi4CRTl7r77sazIvugdPjeAoW12ca2o=)
                          3: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: wE3Uf2pSa1xcLU3ClpuPyQdN+phUS44BD3EpUpas5KQ=)
                          4: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: qpDmImQRJO8O/RBZUpeYgaw/yJrBWadW45wwlwwQWHc=)
                          5: oDizl2kx7hqC7bnZnzmFDTFFkCo.asa (hash: DwuyCxvHHTg9QUQgeV7DKPj202v84XmN+iodqo8TusE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
                          rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
        Validity
            Not Before: Sep 11 00:50:21 2026 GMT
            Not After : Sep 18 00:50:21 2026 GMT
        Subject: CN=6aa3504d-7124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:90:16:b0:71:6e:85:03:af:d4:96:f9:e3:
                    c2:44:6a:f1:e3:0d:67:de:66:7d:9d:52:0f:93:2e:
                    c6:ef:2a:0e:57:fb:c9:fc:24:28:6a:4a:de:74:86:
                    81:2f:6d:27:d9:bc:9e:22:46:25:68:49:b6:97:44:
                    9c:d9:c5:e8:bc:d9:09:9e:a2:85:3a:f8:f0:72:39:
                    85:31:ba:bd:95:f3:f6:f1:f6:9e:a3:d1:14:3b:db:
                    a2:92:61:83:33:91:a9:1f:c6:77:19:a8:22:50:f3:
                    47:6d:0f:d4:9b:c9:3c:e8:d1:be:df:a5:bd:df:e3:
                    61:e6:6b:95:8e:da:d2:64:aa:20:ee:ec:65:7d:b5:
                    89:e3:61:70:01:e5:04:be:46:66:f6:ab:ec:cd:12:
                    69:f5:b5:45:bd:09:34:67:60:d1:f0:e0:3b:12:b7:
                    9f:61:f7:71:35:78:81:5c:9a:4c:d6:69:62:57:55:
                    99:bf:3d:52:65:12:4e:86:97:d1:fe:16:c8:1e:70:
                    60:a1:2d:10:af:0a:fc:90:60:9e:9d:f0:87:02:73:
                    95:81:71:ff:9e:fb:4f:d4:0c:b9:d5:f0:4c:8f:bb:
                    aa:9f:5d:16:f7:91:31:85:2a:0b:50:8d:88:50:ab:
                    d5:70:1d:3c:2a:52:7a:86:6e:49:35:59:b7:7d:df:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7F:C2:74:23:C0:44:1C:C6:D7:B3:B4:04:B1:FB:A1:80:1A:7D:27
            X509v3 Authority Key Identifier:
                keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:13:5a:fa:20:47:ee:d6:a2:87:eb:a9:aa:8b:b5:ea:c5:
         a0:ea:09:6e:64:50:78:80:0f:a0:cb:a3:8f:b9:d5:1b:5f:b7:
         e6:ec:f4:95:6e:25:b4:a8:07:3f:a0:8b:aa:22:d9:ed:3b:c4:
         bf:d7:83:75:e4:59:5e:34:23:c7:c9:3f:9f:a8:af:c9:b7:63:
         31:36:4b:19:8d:fa:ea:54:f4:bc:7b:9c:0f:88:03:7c:5b:5b:
         6f:3d:85:80:0f:67:3b:62:be:5d:70:45:d5:32:5e:12:6a:3a:
         68:8c:b3:17:5d:d5:b0:3c:05:47:c4:75:e5:6a:b8:4e:f4:7d:
         88:02:6e:92:f9:5f:2f:82:57:dd:12:e7:fb:ec:90:e3:62:30:
         c0:50:4c:6d:11:c3:67:11:9c:99:cd:10:75:99:80:8e:ab:f1:
         76:2e:55:a9:77:4b:99:a9:23:62:83:f1:1c:89:b2:3d:12:aa:
         b0:fd:e9:06:2c:68:83:51:c0:93:15:22:2a:2f:59:21:4b:18:
         78:9e:07:90:82:2b:08:fe:59:93:95:e3:8e:09:3a:7b:99:26:
         01:54:84:8a:4c:a0:57:a3:a6:db:cc:5b:2b:50:9b:7e:9b:33:
         54:37:d9:14:e9:bb:a7:66:b3:68:4d:b2:5a:96:79:4a:0b:a3:
         a4:53:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:35:07 2026 by rpki-client