Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
File:                     K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json)
Hash identifier:          LC4nA9R7GfM4KTNOrW5SZHRUsoF1jD/qnJu/a9PmWxg=
Subject key identifier:   49:95:0E:D9:C6:91:CA:2A:3D:84:DA:3D:33:99:F6:32:12:55:9C:71
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Certificate issuer:       /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial:       35A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
Manifest number:          3593
Signing time:             Mon 28 Sep 2026 14:56:57 +0000
Manifest this update:     Mon 28 Sep 2026 14:56:56 +0000
Manifest next update:     Mon 05 Oct 2026 14:56:56 +0000
Files and hashes:         1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: qHTIGbw7Bi6PdbvYKZ1pOse+2Milo3h7TnnpUbZKKeY=)
                          2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0=)
                          3: jL5H4WWk5uweAtGpMsuuxuOehM4.asa (hash: VE0Uz4JyhldZcaScldrzTn/xrAakRTFppWCFd2sM8Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
                          rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13730 (0x35a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
        Validity
            Not Before: Sep 28 14:56:56 2026 GMT
            Not After : Oct  5 14:56:56 2026 GMT
        Subject: CN=6aba8038-9cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:fc:a5:0b:f9:b9:ae:ce:83:57:29:6a:4e:
                    1c:34:6b:67:65:7f:ca:0c:b5:91:1a:e2:8c:00:8b:
                    f4:a0:e6:61:06:54:c4:de:70:2d:0f:25:b9:b8:61:
                    56:d5:09:36:f9:60:d7:87:42:40:cb:ee:fa:d3:78:
                    6d:d0:40:95:1d:99:d0:dd:f9:b6:07:86:25:ea:51:
                    9d:69:a4:dd:1e:6d:f3:d0:7e:82:d4:e1:bf:cb:37:
                    5a:1b:f5:3c:80:84:b9:f7:06:10:28:d4:aa:df:35:
                    9e:64:4c:01:05:85:8d:22:bb:bb:f0:e7:79:56:64:
                    28:da:63:68:bb:eb:84:b6:76:55:c4:73:02:08:a0:
                    1d:d4:d0:5c:35:b0:b2:47:69:06:72:45:eb:bb:e2:
                    1b:94:2f:85:8a:80:82:72:56:26:52:4c:30:4a:f8:
                    1f:d7:19:1f:d2:99:04:b2:5e:97:c0:a9:e8:0e:00:
                    ad:4c:62:ad:ca:e0:04:0b:34:05:7d:15:21:68:80:
                    a5:c7:c6:cc:95:64:d9:29:35:e7:83:0c:d8:0e:90:
                    49:63:7a:e4:6e:0f:7b:9a:60:0f:bf:e9:6f:df:30:
                    fd:dd:11:4c:92:a0:bd:0b:8b:a7:69:20:de:eb:a9:
                    66:ab:6a:90:86:7f:40:7d:23:b0:ed:7b:9e:df:e7:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:95:0E:D9:C6:91:CA:2A:3D:84:DA:3D:33:99:F6:32:12:55:9C:71
            X509v3 Authority Key Identifier:
                keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:21:32:93:3c:10:31:df:45:d2:0c:66:5a:44:16:9a:34:ec:
         33:8a:37:e5:28:12:a7:92:b1:0f:8a:b6:3f:f9:c2:b4:db:c7:
         af:a0:b6:ad:8c:23:05:21:2f:5c:07:3a:cd:8a:90:69:cb:2d:
         bb:dd:c1:9f:80:5e:a4:60:51:cd:eb:94:07:ca:e4:f0:fe:19:
         37:e8:ee:62:d8:de:3a:b5:31:57:29:61:1e:39:78:33:3c:f9:
         d2:03:bf:47:5d:95:81:6f:7e:76:c2:ab:52:da:33:d0:1b:6c:
         a6:51:e6:ae:f7:31:fd:95:52:ed:5c:9f:5f:07:01:07:56:64:
         e6:37:ea:04:39:23:26:27:76:33:e6:f3:bf:19:51:24:3c:e6:
         8a:9f:e8:30:2f:1f:ef:c6:2b:01:b2:60:68:82:fd:77:bd:42:
         95:a7:93:92:ed:3b:86:8b:1e:ca:39:32:63:d6:38:b1:2e:92:
         6a:98:11:09:15:82:aa:df:fa:96:cb:60:bc:9c:d0:b5:bf:1d:
         d6:91:41:2a:77:06:c5:49:03:c3:bc:a8:51:58:1d:71:fd:61:
         5d:b7:0c:f7:8d:10:87:ed:36:4a:69:ea:0c:05:ae:6e:24:f3:
         46:9b:02:c5:45:f6:05:6d:0a:79:55:4b:45:6b:b4:3e:10:dd:
         56:60:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:50:26 2026 by rpki-client