Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          AH4rHxtCHR3brTHG3+SiayQEID9QheGDzxHTDQyagdM=
Subject key identifier:   02:49:28:06:73:5F:D9:0B:60:03:FE:C5:08:CB:2B:B2:C4:09:13:3E
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          01D3
Signing time:             Sun 13 Sep 2026 03:55:21 +0000
Manifest this update:     Sun 13 Sep 2026 03:55:21 +0000
Manifest next update:     Sun 20 Sep 2026 03:55:21 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: utmdGaZ1zzmPmdFUoak+HaN4/nSnOozV4S9kDlX8ekE=)
                          2: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: NZgLuzLqNee1fYy4mFTHbT3bJ6KftmgEr6+x/+S42oQ=)
                          3: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: NZ41GePO+wVrHhL385esVXgxdvkRTvbJf+OBmKNcFbQ=)
                          4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: 1qP+GrX3zgK9BKEEg6Dkyc1WLFMQUS+ZMJmqVReMcJ4=)
                          5: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PUGLK3hnFXvhVOmJO/mpJIqVNCfFg3Hqylh+LQYF1dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Sep 2026 03:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Sep 13 03:55:21 2026 GMT
            Not After : Sep 20 03:55:21 2026 GMT
        Subject: CN=6aa61ea9-b735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:64:05:39:27:07:c8:41:43:17:23:4f:a4:
                    3c:c6:bd:24:6e:73:94:1d:f1:d3:32:88:4c:11:f3:
                    de:8a:65:c4:c0:ec:61:a0:df:45:f8:7e:e0:1d:fa:
                    57:54:29:01:5e:f4:2b:2d:a5:7f:5f:7d:cc:a3:e2:
                    79:8a:ef:86:c7:7c:cf:f8:55:0e:6c:5e:ef:1d:57:
                    b4:c0:6f:54:77:cc:f7:bc:b8:85:83:c1:9a:66:26:
                    f8:d6:3a:8a:4d:16:bb:a3:64:ba:b6:fb:dd:6b:1d:
                    bb:a2:69:c2:c6:ef:e2:ec:83:86:1f:4d:09:63:0a:
                    65:36:61:56:f8:ed:d8:c0:f7:54:17:4f:95:0b:19:
                    86:ac:c6:18:e0:cd:57:b9:11:c2:88:7f:e8:a7:60:
                    36:ac:f8:17:19:20:fa:6e:8e:0d:48:fa:bd:44:63:
                    0b:9d:94:e6:7f:8f:84:9a:7b:e1:45:d0:f6:08:46:
                    0b:c4:7e:9d:ce:e7:45:ad:4b:b1:e5:ab:b7:b7:ea:
                    6e:d6:21:9f:2a:6b:89:26:f3:b7:7f:00:a2:aa:90:
                    5b:21:0c:ce:df:27:af:e3:43:f0:eb:0e:68:ec:e6:
                    86:fc:a0:54:02:3f:75:ec:18:c6:1e:46:95:75:30:
                    1d:77:1c:eb:11:8a:2e:00:8f:d2:df:3b:ea:fb:7e:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:49:28:06:73:5F:D9:0B:60:03:FE:C5:08:CB:2B:B2:C4:09:13:3E
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c0:34:ef:16:5c:9f:10:57:d0:6f:e7:14:c7:98:12:4c:2b:
         3e:2d:d2:a3:a4:e9:16:74:fd:0f:8a:1c:9e:73:d9:40:f1:35:
         3e:8a:f2:05:6a:69:63:3d:fc:c5:8e:ee:fa:b2:80:4d:f5:a3:
         af:24:fa:d8:2e:f7:82:99:69:df:08:b1:52:da:e0:14:96:6c:
         be:b3:65:a1:28:2d:a1:c5:9d:0c:ad:e4:42:f3:21:f9:f1:8d:
         72:1c:48:1a:50:a4:de:c0:51:77:98:66:e4:8e:68:ff:41:de:
         92:84:55:5c:15:16:c7:fc:a8:bb:bf:61:60:84:f7:e6:b3:2b:
         f7:43:fc:05:3a:33:2d:8f:a6:50:ab:5d:aa:90:95:1e:dd:5e:
         72:38:71:ac:74:61:c9:e2:1b:fa:4b:74:3f:fe:d5:56:08:83:
         3c:f5:11:46:0c:f4:d9:c6:0a:57:87:da:bb:d5:82:1b:28:8b:
         31:83:38:e9:c7:84:45:1a:26:c9:7d:d9:82:c2:6c:4a:48:8f:
         2f:b1:63:df:28:0f:5f:eb:07:3e:1e:88:b9:61:5f:8b:f5:92:
         f4:fd:db:13:bc:df:95:94:6e:a4:f7:af:0b:42:4a:ac:44:fd:
         88:9e:17:e9:c0:19:25:71:aa:54:fd:e8:18:1d:5c:af:c2:39:
         9a:07:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:47:40 2026 by rpki-client