Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
File:                     m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json)
Hash identifier:          nY/jTC9IvDR9+6BHACQEq3DkZ+3OmDO1Kbdz/+AlnUo=
Subject key identifier:   EE:90:34:90:E5:4D:AE:84:5D:E1:06:92:AA:A2:23:92:B4:C3:2F:67
Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
Certificate issuer:       /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Certificate serial:       0D14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
Manifest number:          0CF9
Signing time:             Tue 06 Oct 2026 18:34:28 +0000
Manifest this update:     Tue 06 Oct 2026 18:34:28 +0000
Manifest next update:     Tue 13 Oct 2026 18:34:28 +0000
Files and hashes:         1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: wlerCHlnqrezMwuoHgalQe+KbhZieFnt5pm8wOTrbfw=)
                          2: 988741FEDB8111F0B008B5AB60D3641D.roa (hash: rh5kanvG5QXPAMOrNiNLJLVHnbyU12f7aHXUzCF2hMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
                          rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3348 (0xd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
        Validity
            Not Before: Oct  6 18:34:28 2026 GMT
            Not After : Oct 13 18:34:28 2026 GMT
        Subject: CN=6ac53f34-c2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0e:3a:e5:70:04:f8:30:e7:26:32:bb:e6:48:
                    48:3e:81:18:be:c1:85:47:00:c9:aa:13:cc:c4:6a:
                    02:17:98:cf:0b:b1:3a:f1:47:60:5f:fa:f3:21:93:
                    fe:fb:80:e0:70:a0:d1:d2:f5:20:0e:9d:cd:3b:70:
                    8e:fd:40:69:4b:2e:42:bd:bb:46:23:b8:73:58:d8:
                    98:1a:8d:5d:77:81:8d:cd:98:2a:f7:4d:53:b7:3e:
                    04:93:17:fd:4a:80:56:fc:4c:1b:79:1c:70:81:94:
                    8f:a3:9b:59:4f:ed:6d:84:8a:f2:3f:c6:ea:e3:b1:
                    ae:53:ea:6e:07:f2:81:dc:68:d0:81:9e:01:09:10:
                    e7:21:66:e6:31:b3:e5:cd:1a:21:ea:33:91:da:80:
                    2e:41:a1:df:82:79:45:90:29:4f:12:97:60:0d:cf:
                    1f:3d:46:f3:2d:6a:51:45:8c:bf:59:bc:bc:cd:87:
                    f0:02:09:22:88:4f:2b:dc:16:40:06:5b:f1:92:ab:
                    2d:98:da:3a:e3:cf:50:27:48:33:84:cc:95:12:97:
                    e2:41:88:73:bc:88:48:a6:d5:69:2f:69:59:ff:e1:
                    7f:a5:3e:8a:6e:e4:76:61:bc:be:0a:18:d3:ae:af:
                    90:70:22:97:98:ff:ac:4b:31:c2:36:39:5c:be:e6:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:34:90:E5:4D:AE:84:5D:E1:06:92:AA:A2:23:92:B4:C3:2F:67
            X509v3 Authority Key Identifier:
                keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:84:96:ad:a0:7c:f0:c7:2f:04:de:39:8e:f4:e6:4a:6f:b4:
         08:66:c2:b6:6d:91:48:e7:04:54:e4:40:d5:b5:d2:8d:5c:a6:
         9e:0d:d1:e8:27:50:84:ce:16:36:7e:89:eb:08:59:55:60:31:
         bb:e0:72:b6:15:70:c1:42:ec:b6:ea:87:03:de:41:75:a4:05:
         1a:1c:53:6e:e9:ca:0c:38:d2:9a:3d:0d:55:19:85:c5:67:a3:
         7f:bd:55:36:5f:8e:72:1d:14:f6:5d:f6:22:09:3f:d7:44:0f:
         c1:aa:2f:42:79:62:74:f3:a1:ae:b6:9a:45:d9:da:81:f0:37:
         1d:44:34:ce:44:cb:db:7d:fb:12:4c:94:be:48:ea:82:32:92:
         e8:34:54:e7:f7:32:13:84:b1:40:c4:86:e1:7e:4f:30:e1:44:
         4a:54:f2:76:96:5f:92:ad:43:9d:54:30:3b:1f:45:5e:b0:82:
         c1:95:95:79:9b:8e:05:d7:32:73:53:65:e1:03:ba:e2:ce:47:
         24:d7:98:fe:b5:1d:18:46:0f:59:a1:7d:52:7f:c1:ce:1d:1b:
         91:83:33:40:04:3c:72:53:10:22:46:43:31:5d:64:d5:79:aa:
         5c:9f:ab:a6:d2:5c:a2:95:e6:76:65:4d:db:c4:93:99:50:3d:
         06:42:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:08:07 2026 by rpki-client