Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File:                     rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier:          KKYu8cDThmdMVKxYd5EJOR0YxdsYsj032Rf9ADIpUVg=
Subject key identifier:   DA:31:D0:17:93:CA:AE:79:12:A5:38:23:27:36:15:F4:0C:31:4D:5A
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number:          0DDA
Signing time:             Fri 04 Sep 2026 18:53:27 +0000
Manifest this update:     Fri 04 Sep 2026 18:53:26 +0000
Manifest next update:     Fri 11 Sep 2026 18:53:26 +0000
Files and hashes:         1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: /VfidzD+G1HvYu7OS8eKk79pDm1jkIUpORXEgC+/e2A=)
                          2: 1CD09CEA9E2C11F18953E4265611F970.roa (hash: GTgRufRrOY/9upf/2CDbblL7ACUEaUL581JiW4Jmg80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: Sep  4 18:53:26 2026 GMT
            Not After : Sep 11 18:53:26 2026 GMT
        Subject: CN=6a9b13a6-c69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:cb:73:3b:c2:26:0f:ba:20:e6:d6:50:02:
                    c7:fc:3f:07:59:5a:c9:24:8e:76:c2:69:9f:6b:7c:
                    2f:f3:94:d0:d6:e2:f6:1d:f7:b1:e4:e5:f3:c1:34:
                    90:3c:06:ad:c0:e0:39:b2:0f:27:d8:93:d5:6a:a9:
                    e7:0a:28:f8:24:45:88:20:8f:91:a2:14:8e:95:ba:
                    74:a3:10:8c:58:c1:2f:44:70:a9:0b:b5:9a:a6:5d:
                    e7:a5:77:61:9d:db:5d:01:99:83:38:5e:d7:0f:c3:
                    3a:20:a4:ad:3f:5a:5b:cf:7f:67:2f:38:52:6c:c9:
                    7e:f0:c1:40:dc:3f:4d:17:a7:30:44:bc:b3:43:d8:
                    bd:ff:20:e4:fc:80:01:a4:4d:fe:74:63:96:2d:2e:
                    bc:73:1e:02:ab:66:e1:38:6b:c1:2d:c8:fe:06:88:
                    81:c5:38:53:65:8c:8c:b1:1a:b8:45:9f:17:48:89:
                    a1:63:75:09:90:97:af:4d:b7:32:de:99:fc:df:4e:
                    27:de:f7:2b:b1:22:35:27:45:5c:b9:d5:26:5e:8d:
                    78:fa:0b:78:44:2f:83:05:16:dc:56:bb:50:f1:2e:
                    fa:89:44:9c:d5:e3:0d:01:e9:b0:15:f4:08:22:c9:
                    c2:fa:46:18:5b:58:18:53:83:f2:cf:5f:5a:90:de:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:D0:17:93:CA:AE:79:12:A5:38:23:27:36:15:F4:0C:31:4D:5A
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:84:3d:2d:c7:a8:f7:39:0d:ab:cf:d4:42:d8:06:d5:34:9e:
         e7:1b:c6:f9:fc:4d:4e:e1:a9:d2:4e:1d:da:d7:63:d0:80:45:
         46:c5:0f:85:49:eb:26:3c:4b:6c:8a:d9:ef:f1:4c:a0:d5:f7:
         0e:6d:e6:22:ce:71:73:c0:85:44:91:33:b7:ba:f0:14:1e:1e:
         43:5b:b8:31:61:07:e3:0c:5a:24:a9:2a:15:47:ec:30:34:f6:
         2f:15:91:97:cd:c6:ba:b3:11:93:f2:34:dd:37:07:6a:4a:42:
         1b:4d:e1:94:4c:ca:eb:6e:d7:cb:ad:96:c1:fb:47:13:e4:dd:
         9c:95:81:34:9b:4d:fd:84:03:cc:ee:f3:45:7b:41:f4:b2:5a:
         e8:a8:01:98:c8:2b:32:34:1c:49:9c:9c:00:67:c3:79:37:73:
         56:2e:f8:13:64:b7:5f:5d:69:62:50:f7:ac:49:e6:50:bf:ec:
         6f:7f:df:d8:54:5f:4e:ad:83:29:c3:bd:ed:77:06:42:9c:07:
         ee:f1:30:8b:bf:30:6e:f8:fa:3d:07:7b:f1:cb:fb:3d:01:e4:
         97:2b:bf:9a:16:7c:10:0e:9b:bc:a1:db:3f:f2:d2:b3:4a:ef:
         53:07:f1:a7:a6:a5:fd:9d:60:3b:30:1c:4b:7e:b4:90:77:e2:
         04:f0:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:20:25 2026 by rpki-client