Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File:                     mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier:          xvfWKQKYZ05yk0uxzPLCNJ73PM3l8j2NyiCT/3qD8Ds=
Subject key identifier:   70:61:0B:9E:A7:F9:2A:FD:3A:D7:29:9A:74:1B:06:DF:0A:64:8C:F3
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer:       /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number:          07B8
Signing time:             Fri 04 Sep 2026 21:18:26 +0000
Manifest this update:     Fri 04 Sep 2026 21:18:25 +0000
Manifest next update:     Fri 11 Sep 2026 21:18:25 +0000
Files and hashes:         1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: ZkOjb40LnvfPxYCPmHFK/w+sFip9Jl2yQSIXKdIFoQk=)
                          2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
                          3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
        Validity
            Not Before: Sep  4 21:18:25 2026 GMT
            Not After : Sep 11 21:18:25 2026 GMT
        Subject: CN=6a9b35a2-cde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:92:0a:65:8a:a7:36:44:4a:25:6c:7c:12:
                    68:9a:d4:62:0f:3e:98:50:58:42:88:ce:9b:ee:ce:
                    cf:ec:0a:4d:e2:f3:a4:c5:19:c6:f2:de:39:01:e9:
                    26:b8:9f:0c:54:f8:d0:eb:eb:87:50:69:e5:b6:1c:
                    01:65:0f:e0:cc:70:34:ef:69:72:43:5f:07:97:03:
                    36:80:23:e1:13:89:3d:14:40:6d:fe:c8:3f:5a:0a:
                    5c:5e:34:c2:54:69:3c:75:18:e6:e6:5c:12:d8:cd:
                    cf:94:58:83:96:14:63:1f:9d:80:60:25:2f:31:54:
                    67:b7:de:44:ff:98:37:34:2e:cd:1a:96:93:35:af:
                    15:26:b1:79:86:07:7a:27:de:23:56:b1:47:5e:4b:
                    2c:4f:8e:75:0d:7d:90:d5:12:ee:0f:00:14:ec:99:
                    04:89:7e:2d:a9:cd:34:50:47:0f:ba:ef:b1:00:21:
                    0c:3c:61:b4:53:ed:1c:ff:2f:08:14:9d:df:56:f8:
                    d3:8e:10:70:b8:f6:40:6e:a3:c0:df:29:eb:7b:d5:
                    98:a5:fd:22:e3:78:3a:a3:49:e9:bd:f0:e5:d0:84:
                    2e:9b:da:fa:54:2d:7c:d8:a7:a2:42:e9:ba:a6:a3:
                    c7:63:c3:fc:d3:21:6e:f0:4b:16:3c:38:d1:37:fc:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:0B:9E:A7:F9:2A:FD:3A:D7:29:9A:74:1B:06:DF:0A:64:8C:F3
            X509v3 Authority Key Identifier:
                keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1a:3c:cd:f2:3a:53:2b:93:23:f4:24:bc:07:00:c8:ef:87:
         40:a3:83:8a:43:03:e6:b9:ca:81:77:4c:9e:38:68:69:4d:ef:
         82:f6:0e:6a:25:e5:bc:73:59:3a:1f:cc:26:e9:46:7c:7d:f9:
         89:39:04:b6:3e:ed:57:b4:14:27:93:61:03:59:6b:a9:a6:93:
         6d:b8:12:a7:f8:e8:60:04:e0:84:28:f1:e1:42:49:bf:d1:7a:
         ca:fc:71:c2:f7:05:6e:40:14:14:70:45:5b:5f:55:ad:d1:1e:
         43:ee:53:82:69:1f:ae:7a:b7:f9:00:d4:03:40:82:92:6d:b9:
         11:76:4a:e6:0b:c3:11:05:68:ec:b2:28:45:02:68:cc:0b:15:
         d9:39:8e:23:60:81:84:a6:5e:23:fe:1a:83:76:15:13:5a:80:
         f3:09:74:ae:f1:e9:8d:2f:2d:8c:12:c7:03:0b:f1:a6:b9:01:
         75:6b:7a:d2:6a:9a:66:ab:57:ba:90:ff:0f:fa:18:c5:32:64:
         1b:86:fb:1c:dc:95:3c:78:84:aa:3c:0f:d6:2f:92:fa:7b:79:
         79:6a:4d:a9:bc:5d:0c:cc:17:48:5e:ee:b0:47:22:89:74:62:
         b2:c2:00:61:5c:f8:16:e9:6b:69:75:3d:4a:4b:dd:38:08:8d:
         9d:f4:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:36 2026 by rpki-client