Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
File:                     cpJMv-NjcwP3sTdsjPca22H7bDk.mft (raw, json)
Hash identifier:          rsNNcFp/EOJQHhXzvGsaUllsB0Z8zCbrJ+Fpt6c+haM=
Subject key identifier:   68:0C:E1:05:59:9A:9A:00:06:C2:B2:EC:E8:9B:D0:EA:8F:2D:C2:E8
Authority key identifier: 72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39
Certificate issuer:       /CN=A91D09BC/serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
Manifest number:          01C6
Signing time:             Sat 03 Oct 2026 05:43:57 +0000
Manifest this update:     Sat 03 Oct 2026 05:43:57 +0000
Manifest next update:     Sat 10 Oct 2026 05:43:57 +0000
Files and hashes:         1: cpJMv-NjcwP3sTdsjPca22H7bDk.crl (hash: hpGgf/n++Gxs3W3RuMFjYmm6s+sZ9A9re6tMZ9OdFAo=)
                          2: 526AF16A3C7B11F1B0CB2EC97EEE528E.roa (hash: /a4QOETR5wBQx4lL0BfTBrG9hDYCg/Ec1yCZX3YiOH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39
        Validity
            Not Before: Oct  3 05:43:57 2026 GMT
            Not After : Oct 10 05:43:57 2026 GMT
        Subject: CN=6ac0961d-9851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:ea:c2:86:65:f8:06:2a:d7:75:22:f6:fb:
                    34:6b:ba:35:fe:1a:60:a5:28:36:29:a3:8a:cc:ad:
                    0b:f2:53:ce:26:c9:4f:87:1c:45:c3:15:02:be:4a:
                    fd:b4:49:96:50:44:cc:66:66:63:46:fb:0d:cf:58:
                    92:76:c8:4e:a0:07:dd:da:85:f7:3a:e7:0e:94:1e:
                    9e:aa:f7:48:83:9f:20:2b:11:9a:e8:2c:5a:c7:48:
                    d1:ea:33:4f:4f:1f:94:8f:74:c8:20:12:7f:91:cd:
                    8f:9c:83:e1:39:53:c5:84:d8:c8:d9:33:a9:15:33:
                    11:a9:66:60:8c:52:0a:dd:a7:79:99:7c:9e:f8:dd:
                    2b:b2:84:2b:b9:0a:8d:34:d9:92:d4:f5:ec:13:76:
                    a6:97:d4:ce:05:eb:dd:ad:04:9d:da:21:52:7b:d6:
                    17:f5:34:33:cb:70:3a:f7:88:71:5c:0e:54:e8:10:
                    62:52:7e:6d:e5:15:12:c8:62:fe:1f:4f:43:58:93:
                    62:93:21:ac:66:25:6b:e3:4f:0f:37:7e:3b:93:4a:
                    80:d2:37:10:8b:07:0a:d8:3f:9d:63:af:2b:ad:9c:
                    1c:1e:88:3f:6d:54:77:17:fb:66:6e:60:a3:b3:4f:
                    13:b4:7f:a8:67:14:06:23:90:8e:d6:02:de:9f:ab:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0C:E1:05:59:9A:9A:00:06:C2:B2:EC:E8:9B:D0:EA:8F:2D:C2:E8
            X509v3 Authority Key Identifier:
                keyid:72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:36:79:77:09:e5:f2:bc:30:8e:58:55:40:ed:d0:07:0f:
         96:9b:97:87:11:ec:a6:a7:5f:cd:f3:d9:9b:2d:9e:ba:39:8c:
         1b:d0:5d:34:2c:09:df:63:f2:cb:9e:3d:91:73:1e:60:c1:39:
         06:7f:97:6f:91:73:dd:22:4a:e2:59:0f:0f:a1:eb:e3:fb:ac:
         17:c8:d1:fd:aa:77:92:d4:56:49:af:8d:dd:1e:3f:f1:99:cc:
         fc:80:fd:96:f3:10:5f:f7:1c:a9:c7:f8:0a:0c:c8:01:8c:a3:
         0f:1b:4b:b6:5a:54:d5:63:7e:6e:c5:10:cc:b3:64:57:a9:5f:
         a3:68:c9:50:2d:80:fd:28:28:b3:57:d9:73:53:54:6d:74:c8:
         f4:cc:07:d4:cf:3a:bd:1a:d4:34:52:16:55:e2:ca:20:49:b4:
         d4:d1:3c:a7:5f:f9:17:da:01:32:70:a5:4a:46:94:ad:66:ea:
         38:34:44:18:1b:c1:23:46:de:ec:81:6b:60:11:2d:f7:23:f4:
         3b:fa:4b:2d:d2:7a:9f:d4:52:b3:35:c7:c0:30:bd:62:47:6e:
         00:46:c1:6c:c7:16:7f:a7:4d:25:17:e6:b5:dc:d6:5e:d6:30:
         ed:57:14:16:53:cb:e7:66:f7:df:fb:c5:ff:24:da:99:36:59:
         8c:3e:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:54:21 2026 by rpki-client