Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File:                     CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier:          6N5FLv4IhZKcVcsqiGSJk4xvxIqyIhYzifxqjrIDe8c=
Subject key identifier:   C5:79:9A:E9:A0:29:FF:F8:0D:DD:D8:F9:19:7C:42:C8:11:FE:27:4C
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer:       /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial:       0BD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number:          0BC1
Signing time:             Mon 31 Aug 2026 19:01:43 +0000
Manifest this update:     Mon 31 Aug 2026 19:01:42 +0000
Manifest next update:     Mon 07 Sep 2026 19:01:42 +0000
Files and hashes:         1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: YZaViuJb8WnRChqQP5YsBtqB/clxIl/Mvu6jhJAIa3M=)
                          2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: 4McE/O+QP2V8R9j++qZmwcXS2m87n+BBuLz8mpv2nxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 19:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
        Validity
            Not Before: Aug 31 19:01:42 2026 GMT
            Not After : Sep  7 19:01:42 2026 GMT
        Subject: CN=6a95cf97-05ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:57:cd:80:50:6a:24:80:d6:82:69:19:38:
                    ca:a1:79:a9:12:64:89:f9:f9:1d:49:80:9b:41:e8:
                    3b:b1:e3:66:a9:98:29:80:a8:90:ca:f0:2a:01:6d:
                    16:c0:27:2e:ba:4d:fb:0a:8c:17:5c:1c:df:f0:05:
                    63:dd:eb:06:fd:82:3e:3d:92:5a:26:3f:1a:dc:14:
                    13:4e:23:8d:13:69:b1:63:24:23:51:a6:e9:39:9a:
                    55:b5:18:76:c5:63:2f:67:c8:e7:65:53:e9:a3:2e:
                    64:6a:e3:1b:56:34:36:a7:75:14:eb:20:45:f1:da:
                    30:e9:94:66:d6:93:03:66:dd:c5:95:ec:1a:1e:22:
                    7b:b9:83:77:e0:cb:12:21:ab:c0:88:1f:89:85:28:
                    05:26:cc:62:15:bd:7f:0f:a3:43:71:56:40:13:9d:
                    b9:5a:a9:d4:b4:e9:a3:bf:73:b0:e2:a7:a2:c0:23:
                    5f:eb:c4:dd:7b:a0:99:75:de:ab:95:4e:26:06:60:
                    c7:43:3b:e4:9c:b5:26:8b:90:ce:5d:02:85:7f:de:
                    9c:dd:60:30:a9:5c:a0:0e:38:31:95:1c:ee:f9:36:
                    c1:9b:24:16:6e:77:a3:43:d3:57:df:ce:64:44:ba:
                    0c:bf:6c:0b:89:95:51:b5:b0:96:7b:3f:4f:f2:34:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:79:9A:E9:A0:29:FF:F8:0D:DD:D8:F9:19:7C:42:C8:11:FE:27:4C
            X509v3 Authority Key Identifier:
                keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d6:1d:6c:a7:ce:cf:e2:42:15:8a:27:6c:16:27:61:60:09:
         a4:9f:6e:13:96:cf:87:bb:8f:f4:16:93:4c:3c:0b:1d:b6:1f:
         86:d4:54:a6:95:30:39:17:ca:76:eb:a6:c6:a1:30:6d:d4:81:
         21:8f:ae:3e:33:e0:8b:bd:46:1d:ca:fe:c3:7c:2d:d8:de:87:
         4c:ee:0c:90:97:f4:b6:40:16:b6:9a:c8:b4:16:e5:57:95:32:
         61:24:05:e7:d0:e1:58:7b:c2:5f:68:44:c6:ce:e8:42:df:a5:
         8f:0a:11:66:43:45:e0:9d:44:b3:d5:ab:8f:1a:b0:2e:eb:15:
         37:67:dc:82:e4:c9:f8:19:88:70:f8:3a:1a:e2:9e:c2:1a:1c:
         24:c2:5f:81:98:06:e9:ec:dc:3d:2a:41:de:3e:8f:ca:5f:d6:
         4d:a3:4e:6f:1c:51:6b:cd:eb:c3:8d:a7:db:e5:fc:12:cc:b8:
         f8:68:31:eb:26:12:2d:9f:74:b3:da:d3:cd:f7:25:cf:95:7a:
         8a:65:88:1e:c4:cf:5d:40:73:7e:bc:a7:b2:41:b1:1c:bb:a9:
         52:5f:50:8d:fc:7a:fd:80:4e:f8:03:ae:03:91:09:f2:f7:fc:
         79:f3:47:8b:df:ea:ae:22:a1:e1:cb:9f:84:8c:30:61:e0:f7:
         2a:65:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:42:00 2026 by rpki-client