Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File:                     Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier:          59eT84qJ6bHZp7LCK6jVAeQDFZpvBzevYsggsO+jQUw=
Subject key identifier:   58:9A:5B:35:69:58:1B:9C:D7:A1:7B:4E:02:7B:8A:3E:26:16:1D:37
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer:       /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number:          0945
Signing time:             Fri 04 Sep 2026 20:04:21 +0000
Manifest this update:     Fri 04 Sep 2026 20:04:21 +0000
Manifest next update:     Fri 11 Sep 2026 20:04:21 +0000
Files and hashes:         1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: QhmBUdsf3XTh/8qv2TN4LDKtRgYNVy0/SO9y+JCv7J4=)
                          2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=)
                          3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
        Validity
            Not Before: Sep  4 20:04:21 2026 GMT
            Not After : Sep 11 20:04:21 2026 GMT
        Subject: CN=6a9b2445-b6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:ff:de:74:b2:32:0e:0c:cd:82:7b:20:f2:
                    59:64:5c:f6:4a:6d:1e:72:60:9e:a8:39:0a:91:4b:
                    64:79:bc:0e:fe:dc:d3:e0:4d:13:3f:25:33:45:03:
                    19:59:fa:a6:a4:a4:56:91:e1:93:57:6e:e1:c4:68:
                    71:23:8b:9d:f1:eb:63:07:31:a1:2e:eb:eb:80:fc:
                    20:c3:a4:5a:fb:4d:fb:9c:9f:7d:3f:27:87:2d:ba:
                    2d:b8:76:7c:35:35:c6:16:bb:c0:43:73:73:f3:7b:
                    17:33:f3:5e:8d:a2:78:a7:45:16:66:16:45:7c:73:
                    63:27:7c:9c:90:32:e4:05:d7:f5:57:da:47:21:00:
                    dd:c3:44:dc:e0:fe:20:fc:7c:32:02:39:24:dd:be:
                    5a:50:19:9e:59:f8:33:31:1d:52:13:b4:86:e9:fd:
                    fe:5e:62:98:08:8f:c3:85:c4:25:20:f4:36:ec:fd:
                    2c:ee:fb:52:86:53:08:70:91:15:41:7f:b8:af:a8:
                    d1:e0:ed:2d:3b:89:d4:0e:56:cf:e5:49:a1:ff:78:
                    0c:69:16:d9:29:76:b8:ef:ca:61:bc:7a:8c:94:bc:
                    1d:3c:4d:b7:98:82:50:bd:85:67:5b:c1:a2:28:b0:
                    e4:ed:11:31:ce:12:1b:df:87:61:6d:42:1f:c9:a2:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:5B:35:69:58:1B:9C:D7:A1:7B:4E:02:7B:8A:3E:26:16:1D:37
            X509v3 Authority Key Identifier:
                keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:39:f5:76:d3:ad:f9:a7:d1:a7:ff:5c:31:bd:e1:e3:7f:e9:
         f4:35:61:e3:1e:39:79:1f:54:56:23:ac:cc:62:2e:ee:37:56:
         8f:57:68:21:ea:cf:56:8a:d7:8d:d0:27:85:aa:93:0f:7a:7c:
         ac:0d:db:cc:67:21:96:7b:4c:0c:7d:53:d8:5e:5f:3d:d2:95:
         70:01:13:ba:1f:e3:2a:d0:f4:f0:3c:78:87:b4:a4:ba:fd:d1:
         e8:d3:01:19:b9:84:09:50:ce:21:70:3e:97:00:ff:1d:1d:3e:
         04:9d:28:05:b5:2c:c8:4f:8d:fa:53:f1:25:cc:51:64:9e:04:
         9d:1f:8b:fe:0e:3f:00:5e:54:f0:80:d9:ad:12:d4:3c:14:3c:
         c1:01:3b:e2:59:54:76:43:f3:79:a7:35:be:42:d4:a6:18:a6:
         cf:f8:ff:81:f2:a7:2f:b7:4e:78:d2:4f:29:13:fd:1d:ac:ec:
         9b:ea:62:74:87:ab:27:96:60:b3:09:b7:10:5f:e4:c1:4e:c6:
         82:7b:8f:38:9a:38:2c:34:09:19:ad:5b:25:b2:e3:09:8c:9b:
         ec:11:a4:82:f5:82:b4:c6:91:04:60:37:8e:8f:fb:9b:0f:a9:
         20:b3:52:58:4b:23:15:d4:0e:0f:7e:6a:78:d0:b5:e1:3b:37:
         43:b2:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:33:49 2026 by rpki-client