Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          ebdrkxFvmsW448OvT5WSOY7xNuqklNqCUk6DVj4ko/8=
Subject key identifier:   1A:C2:A6:61:C3:0C:EB:2D:DA:89:BA:4A:36:07:AA:93:BD:74:C4:43
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          0827
Signing time:             Tue 06 Oct 2026 21:20:10 +0000
Manifest this update:     Tue 06 Oct 2026 21:20:10 +0000
Manifest next update:     Tue 13 Oct 2026 21:20:10 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: V5pgQLmlaHQER/x4wTJrfnoWEJxXNjTpAko4C9H4qwc=)
                          2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: T/CKAwe8N408GvjfoSl3NP/W24L3kVYXhNzRByIXSbo=)
                          3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: ZuhRcUdP5wWWKIGm+OsKBc5cm+WWrvev341G/9NcVBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Oct  6 21:20:10 2026 GMT
            Not After : Oct 13 21:20:10 2026 GMT
        Subject: CN=6ac5660a-1a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:6e:1b:37:d7:ac:1e:91:f3:45:83:67:a1:
                    81:ce:9f:63:c5:a4:b3:36:df:77:0f:c4:6a:a2:f3:
                    91:db:f9:43:cb:1d:d3:1e:4f:ce:52:4f:19:46:0d:
                    b9:24:33:08:2f:fc:06:f5:90:78:da:3b:00:b5:3b:
                    8f:7e:9e:8d:b7:bf:b8:dd:4b:56:1b:94:1c:e8:68:
                    f9:2a:ec:c4:11:7a:a9:9b:34:44:17:98:90:d8:e4:
                    37:e4:bc:d4:02:3a:00:d8:63:60:16:0c:c6:b6:de:
                    05:a5:58:84:9b:7f:f1:6f:90:93:b6:38:90:25:91:
                    62:10:a5:da:d4:7a:71:83:42:9c:7f:3a:ed:e8:89:
                    6c:52:74:47:2e:d5:34:31:0f:9f:bb:73:fb:25:ac:
                    88:98:95:7a:e8:24:c8:2d:a1:5d:7c:a5:85:7d:88:
                    35:25:24:4a:f5:70:e2:db:30:64:bf:30:fd:50:a6:
                    6b:17:49:dc:5b:c6:af:02:17:17:e3:41:78:89:ac:
                    68:fc:c8:21:83:7a:b9:40:4c:1a:6d:93:50:4a:28:
                    45:9a:82:c6:1e:80:99:66:00:0a:55:af:42:3d:3c:
                    c8:86:7e:b7:df:ce:d8:4f:8c:cf:3c:3a:12:4a:e6:
                    ef:c9:b1:eb:24:0b:ff:30:92:10:d2:27:66:b2:57:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:A6:61:C3:0C:EB:2D:DA:89:BA:4A:36:07:AA:93:BD:74:C4:43
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:82:44:67:80:04:e4:c8:79:c7:90:51:07:32:b5:11:d9:
         c1:3d:ff:f0:95:4c:8f:69:6b:8e:7d:99:a7:a5:2c:80:38:07:
         0c:36:ff:da:10:9a:eb:9e:20:ad:af:87:d7:ba:80:95:3c:37:
         71:6b:5f:1d:49:15:c1:5c:9d:20:4d:95:e8:6e:bd:d5:4a:0e:
         fc:49:64:a8:1c:d0:73:36:3f:81:a3:1c:31:e7:01:30:2e:53:
         db:55:a4:30:65:22:46:68:0e:14:d2:60:2d:9c:f5:43:60:95:
         a1:4d:c7:20:1d:4b:26:7e:f8:a8:54:b9:1b:4f:ef:09:6e:18:
         a8:9a:7e:98:bd:bc:97:3e:f6:34:2b:c2:dc:bb:5c:c6:05:05:
         c3:25:ad:94:e0:50:c1:d3:30:cf:7c:50:9a:66:1c:f4:15:27:
         b5:62:9f:89:11:10:43:1f:71:49:61:71:74:9d:ee:ef:a5:97:
         4d:b4:5b:81:2d:68:e6:7a:98:e4:03:47:4d:aa:7c:03:e2:6b:
         34:92:0a:de:5c:42:51:b7:0d:ab:e8:06:70:5f:54:72:eb:75:
         eb:b1:ba:a1:ea:ec:95:ad:fb:eb:61:8b:0e:8f:bc:c6:fa:3d:
         d1:7f:ec:05:e8:73:ab:56:2d:7f:08:7a:5c:69:36:ad:2e:85:
         66:0b:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:57:05 2026 by rpki-client