Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File:                     9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier:          YwY+DnFnkjaiDYsSo1yGLuROEIWsutarzf5q7I8XlZg=
Subject key identifier:   F7:EE:01:9F:39:22:3F:79:0F:AC:BC:EA:DF:B9:29:60:63:05:F7:C5
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer:       /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial:       0419
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number:          0411
Signing time:             Thu 03 Sep 2026 00:18:48 +0000
Manifest this update:     Thu 03 Sep 2026 00:18:47 +0000
Manifest next update:     Thu 10 Sep 2026 00:18:47 +0000
Files and hashes:         1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: FYG8BCwBFm1U5JD1mlcWSzSVtu974EjshgJZpbN6/lQ=)
                          2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: 2h+b01ppedXkp4nHTlDNbhvvdICfMaxpMADLzCXh8+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
                          rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
        Validity
            Not Before: Sep  3 00:18:47 2026 GMT
            Not After : Sep 10 00:18:47 2026 GMT
        Subject: CN=6a98bce8-8ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:37:b9:14:b7:b4:a8:5d:c9:23:e4:f9:d9:
                    53:79:58:98:6f:f2:8b:08:40:be:6d:05:94:21:d1:
                    08:35:a0:08:f6:54:e6:9b:4f:2e:1a:3f:74:24:93:
                    a9:73:f7:2d:a1:bd:8f:be:67:50:bd:d0:59:1a:61:
                    95:ab:fd:35:a6:d3:ba:62:16:59:e8:b5:6e:ea:e1:
                    e8:73:e3:d1:d5:bd:d5:e6:ef:1e:3c:29:ff:03:ab:
                    74:73:72:cc:71:c3:d1:ea:5d:84:82:86:ca:d0:bf:
                    a8:68:d7:70:0e:46:99:7a:bb:f5:20:08:bf:ec:90:
                    05:38:dd:1f:da:ac:59:c3:cc:d8:f5:ac:d4:96:99:
                    d3:bd:e4:4c:ae:2a:99:60:a9:06:27:cd:70:c4:01:
                    8e:f1:3a:a5:09:44:ad:1f:ab:fd:2c:aa:bf:38:58:
                    e7:61:32:d6:96:00:78:e5:e0:76:7a:dd:ed:32:34:
                    c0:36:81:6d:ea:d7:1d:e3:b3:9a:14:78:54:29:4b:
                    4f:46:f9:74:da:da:d1:f3:98:d4:22:03:96:7b:e6:
                    22:f2:99:ea:21:e8:ac:79:5c:ee:fe:80:6e:a6:06:
                    1c:b2:a9:d3:a1:68:c7:6b:53:e0:a5:3f:36:d8:80:
                    8c:7c:77:fc:1b:df:b0:34:9c:42:e7:22:99:18:fd:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:01:9F:39:22:3F:79:0F:AC:BC:EA:DF:B9:29:60:63:05:F7:C5
            X509v3 Authority Key Identifier:
                keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:db:35:1b:e8:b8:be:85:8a:2e:6d:16:51:e7:68:2c:3b:
         e7:13:3f:ce:bf:da:80:e7:ba:4e:b4:00:07:57:9d:59:a0:a2:
         ef:a3:95:e3:08:f0:dc:08:86:e1:ef:e5:74:51:90:d7:45:45:
         a1:21:0d:d8:f3:f5:96:c5:5e:ba:fc:69:84:a8:6f:81:f4:db:
         ff:78:0c:7a:1a:2a:63:23:46:c4:15:8e:e2:74:73:b3:00:eb:
         a8:37:52:a2:9b:92:19:1d:9c:b7:71:a4:a8:1f:a5:9f:4f:66:
         12:89:cc:ec:f5:8c:3f:2c:a6:a3:60:a1:3e:14:6f:50:a2:62:
         d2:56:a5:f3:35:e7:ba:da:d7:a1:00:63:90:6f:3c:3d:85:5e:
         46:d4:ed:0a:58:27:7c:c9:d7:ee:6f:73:46:66:f8:a7:fe:31:
         13:7d:c0:63:ee:ac:24:43:17:f7:61:45:31:40:ed:c7:04:6b:
         84:27:84:ae:ff:f2:b6:4c:dc:7d:09:c3:a3:32:58:3a:80:4a:
         74:b5:a5:4e:56:37:40:2e:8e:2e:00:a0:cb:d5:46:30:de:7f:
         fd:3d:ca:4c:1d:d2:c6:9e:51:ec:93:40:d2:dd:17:b9:b2:33:
         19:e2:0d:c2:21:ac:94:b9:22:e0:60:d8:80:f3:6a:2e:a4:48:
         aa:38:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:08:31 2026 by rpki-client