Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File:                     SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier:          dyvkKBtyF9dCEW66IkmPGgvko1SAOeAgWF3DK0mSIWc=
Subject key identifier:   2F:49:BE:FC:D4:C8:62:0B:86:53:92:9E:47:F0:52:CC:02:15:41:99
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer:       /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial:       0897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number:          088C
Signing time:             Mon 31 Aug 2026 20:42:08 +0000
Manifest this update:     Mon 31 Aug 2026 20:42:08 +0000
Manifest next update:     Mon 07 Sep 2026 20:42:08 +0000
Files and hashes:         1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: Xrqjmjew4OEriM95BnaCNYxPRWGpmL81ObFpLKKT+2U=)
                          2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
                          rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 20:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
        Validity
            Not Before: Aug 31 20:42:08 2026 GMT
            Not After : Sep  7 20:42:08 2026 GMT
        Subject: CN=6a95e720-2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:b2:57:c6:ec:d5:a2:9d:0c:d8:7e:2e:4f:
                    d0:b2:45:ac:42:aa:e2:1a:1a:60:f6:c1:f4:d5:bc:
                    1e:d4:8e:fc:ed:2f:19:b1:09:ea:3f:27:0d:4d:b6:
                    5a:88:38:37:76:ef:11:2b:e9:05:be:64:4c:35:bb:
                    31:96:78:14:1a:91:4c:a1:10:a2:29:e7:9c:2d:6c:
                    d3:b6:de:44:e8:66:f1:7d:46:da:4a:69:b4:d5:57:
                    b5:52:59:8e:3f:24:4e:fb:ab:23:bf:a3:da:4a:0c:
                    9e:9d:d0:c3:4b:9f:cc:06:59:26:ab:f7:b2:4e:cb:
                    a5:72:cf:8b:34:f3:c2:53:7a:19:38:28:db:62:14:
                    cc:6c:c8:ea:f2:d5:98:5c:ba:24:12:f2:dc:47:04:
                    ab:03:b7:36:a9:ac:c5:2a:06:77:19:0c:7d:a3:e7:
                    a6:24:21:2a:d0:fc:0a:3d:9f:0e:85:a2:3c:07:85:
                    68:e1:05:8e:da:b3:41:70:bd:1f:28:f8:0a:2a:68:
                    da:34:76:33:42:a2:46:5a:cb:86:6c:91:6e:68:d3:
                    dc:17:52:e1:14:38:ce:e3:4d:b2:52:57:6f:cf:88:
                    bc:45:2e:1c:52:fd:fa:a4:9d:18:41:fa:57:0c:6c:
                    89:58:e4:09:6b:a0:4a:6d:39:ea:f5:c5:c1:9e:fe:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:BE:FC:D4:C8:62:0B:86:53:92:9E:47:F0:52:CC:02:15:41:99
            X509v3 Authority Key Identifier:
                keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:a3:19:43:0e:62:f8:4c:2b:f6:f2:20:5d:78:4b:74:07:
         6b:ba:4d:ae:f6:b5:4d:b2:82:a7:48:54:be:49:16:04:86:42:
         75:bb:d2:76:d9:67:87:06:79:49:43:51:fa:e4:f1:18:d0:3d:
         ef:1c:6a:62:5d:4a:88:ca:e1:54:e0:1e:00:45:cc:d7:f2:c3:
         d9:32:4e:9f:89:c1:a4:7c:8c:2f:ad:74:ce:8e:01:9a:36:51:
         52:db:81:b5:08:59:d3:ac:bf:1a:9f:0f:da:a4:ad:1c:ca:28:
         fe:d1:8d:4f:7a:69:fc:8f:9f:b7:46:d2:9e:42:82:3a:9e:30:
         04:ac:06:5a:79:55:72:db:34:ea:2a:a2:6c:7b:d5:ed:9e:d2:
         b8:d1:42:56:65:c7:f4:86:d6:20:16:68:df:d6:90:35:69:c4:
         2a:28:f6:a1:5e:32:9f:4b:28:50:37:5d:31:0f:c4:ad:b6:6c:
         5c:e9:c9:d1:1b:bd:02:72:57:70:d1:b8:2e:b3:cd:53:48:e6:
         85:69:d2:00:30:d6:4e:3b:94:6f:e2:5a:03:66:94:e1:84:88:
         a0:b4:69:8b:0e:94:00:29:81:ca:8d:99:ba:6a:8b:6d:1b:3c:
         18:2e:a9:f5:5e:ac:6e:51:29:f1:d5:8f:14:3c:1c:d8:af:06:
         31:47:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:05 2026 by rpki-client