Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File:                     cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier:          t0pIQyHlLz9Ky6brXOYIhNY+7JI2ECw5xvF+HoNePWw=
Subject key identifier:   D1:94:5D:FC:79:C4:57:2A:91:4A:B8:32:D7:5F:D1:5C:C9:41:44:82
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer:       /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number:          049F
Signing time:             Wed 09 Sep 2026 00:00:23 +0000
Manifest this update:     Wed 09 Sep 2026 00:00:22 +0000
Manifest next update:     Wed 16 Sep 2026 00:00:22 +0000
Files and hashes:         1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: xem4EX8R34c3/ETfJlTZhZaxM9ejcIhu2t250wt6GK8=)
                          2: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: mRQhgZ81M0Ts1pMOJw8D4F0g0lJj03RtR9EyLiUMZPc=)
                          3: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: I+xSYvR5vfpxBiIRAe84JarFe3Ja6Qu8IKK38QKP4g4=)
                          4: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (hash: NUGAPcQG3JutO9qEKwmx4ZtFctU4cvoVKH+jTCY6e9c=)
                          5: 0DB56636FB5311F09CD98C1F476F56BC.roa (hash: Bx/J/S8TWW2QQNpW8oZ/fMwuA/TbhW9uJ00ERz5Dobk=)
                          6: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: l7DTtvHxD8US5fD+QSxEm5H3PVvZjXTvGP27QgToQ+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
                          rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
        Validity
            Not Before: Sep  9 00:00:22 2026 GMT
            Not After : Sep 16 00:00:22 2026 GMT
        Subject: CN=6aa0a196-967a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:73:5e:98:7d:11:7c:91:1a:3f:06:87:8f:
                    ff:25:c5:b9:b0:4e:9c:10:95:b8:e3:8c:66:86:3b:
                    d4:5a:96:3f:3d:a4:43:3e:f1:c5:50:78:66:91:89:
                    f5:06:40:66:75:d8:f3:66:62:c0:99:36:c7:91:b9:
                    a5:74:01:c5:02:ca:7e:af:b4:03:0e:73:d4:c4:66:
                    81:77:11:6d:1f:7c:89:17:a7:30:de:e7:43:40:0a:
                    0d:47:ca:f1:11:88:b5:39:c2:f0:bf:dc:e3:e6:95:
                    70:aa:c9:18:a3:0e:0b:85:8d:0c:82:9a:eb:08:2b:
                    fa:77:b4:d9:7a:60:4d:24:ed:26:b7:17:58:02:7f:
                    b3:29:8f:8f:cf:db:3c:9a:99:1b:cb:1d:19:91:49:
                    d8:01:cd:26:f7:10:00:6b:ae:14:4c:a6:97:dc:70:
                    2d:d4:cd:9e:8b:c6:b0:e3:8c:21:bc:e6:ce:87:0b:
                    1c:32:9b:de:30:08:af:cd:7e:6f:f5:70:24:57:dd:
                    1c:eb:86:8d:65:8b:b9:9f:52:4e:e7:e5:4d:11:44:
                    f7:bd:99:da:19:13:60:3b:af:a3:d1:99:61:34:30:
                    1b:58:86:ef:33:bb:a3:db:e0:af:55:50:b6:ea:e1:
                    a5:45:c6:54:2e:d4:80:cc:08:24:98:14:76:19:6c:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:94:5D:FC:79:C4:57:2A:91:4A:B8:32:D7:5F:D1:5C:C9:41:44:82
            X509v3 Authority Key Identifier:
                keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:72:a4:b3:5c:a1:ad:ac:bd:73:84:03:d6:ed:0b:b5:8a:28:
         d6:5a:9e:87:ab:14:36:77:dd:38:2f:78:d1:bf:53:a9:c5:da:
         96:53:1f:23:77:d0:4d:80:48:40:8d:03:73:c7:f1:b6:65:ad:
         45:07:1b:e6:73:3f:dd:71:e9:2f:89:8b:af:c4:be:8e:fc:40:
         c2:89:68:17:3d:06:c4:06:24:c5:4a:1b:02:e5:53:81:65:1d:
         8c:f5:9f:1e:88:0e:70:5b:6a:dd:05:09:2f:5e:bd:d4:0c:97:
         dd:f5:6e:62:b5:f2:b6:c3:c1:bb:ea:e3:67:d3:ba:14:b4:32:
         3c:c0:17:38:e8:c3:1b:0e:2c:44:91:32:ca:80:e4:72:99:d0:
         d9:90:f6:bd:dc:09:36:bc:3c:8a:0e:63:c9:4e:cb:9a:4d:46:
         39:e1:78:02:db:7c:59:4d:15:d7:b3:9d:eb:c0:f3:5f:ba:94:
         b8:64:8f:62:f8:7a:d4:45:34:bb:1a:d0:a8:fb:4e:bf:34:67:
         bb:79:d7:c0:e8:c9:ff:82:a2:29:c3:0a:4e:1f:49:65:b2:59:
         81:01:8e:80:28:32:ca:f3:58:db:2c:31:e3:7b:ab:b0:34:5e:
         c5:36:2c:43:df:26:9d:1e:09:ab:c9:a7:43:bd:d8:5b:27:09:
         8b:fc:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:34:33 2026 by rpki-client