Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
File:                     Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json)
Hash identifier:          OGfqqX6OXrMRSKi0RAr/zf/72teXE6fzq2IIfqVv1gs=
Subject key identifier:   FE:3A:6D:48:88:29:BC:1D:39:4C:B2:D9:38:B6:81:60:70:24:10:90
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Certificate issuer:       /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
Manifest number:          018E
Signing time:             Fri 04 Sep 2026 16:15:49 +0000
Manifest this update:     Fri 04 Sep 2026 16:15:49 +0000
Manifest next update:     Fri 11 Sep 2026 16:15:49 +0000
Files and hashes:         1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: YDG27gNLPPgXWVmBI+V43FyBtfBs7l/biEmpWgeR1mM=)
                          2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=)
                          3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
        Validity
            Not Before: Sep  4 16:15:49 2026 GMT
            Not After : Sep 11 16:15:49 2026 GMT
        Subject: CN=6a9aeeb5-e469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:39:3e:fe:5b:8a:70:e7:6b:7b:1f:06:e1:
                    59:aa:90:be:8f:cd:0e:f7:5b:e8:55:d1:d7:bd:e6:
                    09:aa:03:bd:cc:8d:3c:16:98:79:90:7d:48:f4:90:
                    a4:30:bd:b5:f6:35:80:03:63:b2:05:41:5f:2c:d8:
                    48:b4:b2:bc:5c:a4:a4:da:14:af:ac:d1:9b:52:2c:
                    ef:f1:41:8f:12:ae:ac:c4:5b:bc:d4:47:0d:2c:6f:
                    f1:d8:06:93:fd:a7:4b:cb:aa:2d:e0:b7:ad:f5:db:
                    3e:fb:12:4a:37:43:42:38:3a:1d:6b:a5:7b:23:fd:
                    57:cb:28:8d:18:b2:b0:d3:cf:e6:a3:c5:42:df:03:
                    fb:2f:7e:43:17:40:6e:26:be:cf:9d:1e:09:67:a6:
                    2f:bb:02:f5:32:2d:56:c4:0f:4f:c8:22:6d:71:7c:
                    d5:fb:06:41:52:fd:25:e1:1e:5d:d1:8d:2b:c5:fb:
                    75:b0:f5:f4:7d:1b:7b:61:72:35:28:68:63:b9:37:
                    d8:44:7e:e6:8c:05:0b:b8:84:2b:f6:19:a5:57:90:
                    9b:59:63:54:40:9a:ea:4a:09:73:6e:da:22:d8:93:
                    5c:0f:a0:d6:da:e4:01:4c:ae:f6:44:c2:08:f4:c7:
                    55:79:0c:3b:4f:00:74:91:69:a7:08:07:2a:ef:a5:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3A:6D:48:88:29:BC:1D:39:4C:B2:D9:38:B6:81:60:70:24:10:90
            X509v3 Authority Key Identifier:
                keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:5d:93:19:34:3f:3a:5e:c1:53:50:7e:0a:42:1e:d1:8a:
         5e:3d:5a:b8:5c:7d:3c:27:44:da:89:d1:db:e0:35:69:fc:d1:
         0d:9f:d5:4a:50:bd:3f:03:12:78:cd:87:9a:78:b4:d8:fa:37:
         ce:df:3a:06:43:84:2b:7b:4e:ef:0b:73:83:dc:8b:0f:eb:86:
         e2:f2:db:47:83:51:bc:26:c5:16:e2:22:f2:ef:e7:aa:4d:ae:
         9f:24:90:1c:ab:0d:b3:0c:68:f5:bd:b6:9c:9d:9b:2a:56:36:
         27:71:9e:cc:30:33:45:30:5a:b3:0f:e6:d8:77:53:ec:23:8e:
         f3:dd:17:fb:0c:0e:a7:de:24:9c:97:63:ef:90:b8:c7:20:5f:
         f5:6f:d0:d0:c5:dc:fb:60:bf:3b:e4:18:6e:bb:de:95:d9:b8:
         f1:28:47:f1:98:0c:71:61:47:70:af:22:c6:c1:ec:ad:46:19:
         ac:34:8b:15:91:c4:7f:65:2d:9c:37:0e:66:fd:6a:f4:ce:f0:
         4a:a8:39:92:83:1f:2c:5e:bc:b6:b4:4a:b6:dc:83:ee:e6:4e:
         83:83:d9:92:c4:75:73:69:d0:7e:a7:d9:aa:6d:ae:d4:c2:7e:
         3e:53:58:4e:d9:20:a7:43:05:9a:77:98:80:9f:81:65:a3:77:
         b4:82:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:50 2026 by rpki-client