Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC19D/F2A1F66E88F811F1B019AE114711F970/dgiZfWg1Bz40q-2llrUowLP_BZI.mft
File:                     dgiZfWg1Bz40q-2llrUowLP_BZI.mft (raw, json)
Hash identifier:          rOk9f6Vg9Z104gZ6e9ACkkLkciar6uHsdvx9MSCrkFQ=
Subject key identifier:   82:EF:EC:88:28:E5:FC:F3:2F:45:B1:45:9D:3C:15:E4:A1:36:EB:D6
Authority key identifier: 76:08:99:7D:68:35:07:3E:34:AB:ED:A5:96:B5:28:C0:B3:FF:05:92
Certificate issuer:       /CN=A91FC19D/serialNumber=7608997D6835073E34ABEDA596B528C0B3FF0592
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dgiZfWg1Bz40q-2llrUowLP_BZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC19D/F2A1F66E88F811F1B019AE114711F970/dgiZfWg1Bz40q-2llrUowLP_BZI.mft
Manifest number:          2A
Signing time:             Fri 09 Oct 2026 09:33:51 +0000
Manifest this update:     Fri 09 Oct 2026 09:33:51 +0000
Manifest next update:     Fri 16 Oct 2026 09:33:51 +0000
Files and hashes:         1: dgiZfWg1Bz40q-2llrUowLP_BZI.crl (hash: 2D0C9+SYX7yXUDTPkl8hfOCp5bT9YgLEIHVl9KDUBTQ=)
                          2: 2758A23A88FF11F1BFED971F4A11F970.roa (hash: iu7yeotGOnGFYbJ9g277ohhZQKyUfGKmPMJARkmuqRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC19D/F2A1F66E88F811F1B019AE114711F970/dgiZfWg1Bz40q-2llrUowLP_BZI.crl
                          rsync://rpki.apnic.net/member_repository/A91FC19D/F2A1F66E88F811F1B019AE114711F970/dgiZfWg1Bz40q-2llrUowLP_BZI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dgiZfWg1Bz40q-2llrUowLP_BZI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC19D, serialNumber=7608997D6835073E34ABEDA596B528C0B3FF0592
        Validity
            Not Before: Oct  9 09:33:51 2026 GMT
            Not After : Oct 16 09:33:51 2026 GMT
        Subject: CN=6ac8b4ff-30b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:b8:87:c3:04:40:0b:cb:fe:32:0f:7d:4f:
                    90:ca:ec:74:cd:59:d9:f5:bc:9d:84:c2:46:a8:30:
                    32:dc:9e:6a:2a:9e:fe:96:d0:d7:75:92:93:fd:59:
                    4b:3a:e5:16:77:54:e4:af:ef:20:f5:43:bb:4b:48:
                    5b:a2:ac:a6:c2:9e:bd:66:69:7c:08:03:e8:c4:5e:
                    50:c9:e4:84:2f:a6:6a:ef:64:3d:fc:64:43:41:04:
                    3f:f6:80:7e:59:67:7d:e2:7e:01:57:ce:0e:7b:b2:
                    a6:ca:33:d1:34:fd:87:0d:47:3b:c1:05:70:f4:d1:
                    3b:a3:df:79:e1:e6:ed:98:b8:c2:c5:5e:45:a2:aa:
                    2e:84:2a:07:58:71:49:ec:33:b5:f8:bd:c4:3d:52:
                    1d:35:2f:05:da:2e:b7:a9:66:51:74:78:39:c8:42:
                    ce:b2:2e:78:ea:52:95:ee:b2:f3:82:9a:a9:71:04:
                    6c:03:c8:1d:ea:ca:f5:a1:44:8f:bf:40:69:bc:c6:
                    c6:28:e7:dc:93:02:3f:dd:10:19:3c:a0:85:dd:bf:
                    98:ec:44:de:68:e2:b5:9a:84:42:e0:16:08:13:47:
                    a9:74:e2:c9:f8:eb:71:6f:ab:ed:89:fa:5f:bf:0b:
                    09:e0:f9:73:c8:88:70:25:4d:72:ae:92:5c:e0:99:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:EC:88:28:E5:FC:F3:2F:45:B1:45:9D:3C:15:E4:A1:36:EB:D6
            X509v3 Authority Key Identifier:
                keyid:76:08:99:7D:68:35:07:3E:34:AB:ED:A5:96:B5:28:C0:B3:FF:05:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC19D/F2A1F66E88F811F1B019AE114711F970/dgiZfWg1Bz40q-2llrUowLP_BZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dgiZfWg1Bz40q-2llrUowLP_BZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/F2A1F66E88F811F1B019AE114711F970/dgiZfWg1Bz40q-2llrUowLP_BZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:11:03:6a:b9:12:46:ea:ec:ee:92:f1:d8:fd:2e:81:af:
         20:e8:3d:cb:53:61:aa:14:86:69:42:8f:7a:a9:e3:f3:74:9b:
         ca:38:54:34:36:81:f6:df:6c:d1:f8:cd:f8:81:3d:44:26:be:
         27:6b:e4:21:ff:15:e3:42:57:5f:b8:7b:e7:33:6b:5f:0d:73:
         ef:05:35:0b:52:5f:42:93:8e:a7:2e:0e:9f:bc:96:ab:f0:e4:
         c1:b3:8e:40:7e:af:3f:3d:bb:a7:11:61:c1:8e:5b:fe:75:ec:
         44:55:db:a3:b2:7d:88:94:59:f6:cf:58:07:25:c5:da:01:52:
         a3:ed:b2:04:bc:58:b9:95:e1:95:c2:c4:65:19:6e:b0:53:bd:
         0a:4f:3d:2c:10:e7:05:cf:ae:f1:6c:0f:52:ac:b2:b3:f5:3a:
         c2:86:67:b8:46:dd:66:27:7c:6e:77:57:64:a1:2d:83:7c:a4:
         3f:52:f1:2a:19:58:24:7b:29:89:de:2b:11:65:83:19:6e:8f:
         8a:b0:76:a1:7a:d9:bd:bd:12:fa:35:0e:cd:db:63:ed:df:dc:
         ff:3d:66:47:13:cc:a6:5f:b8:15:36:81:79:aa:b4:7a:df:72:
         5e:3a:01:89:82:4e:34:38:30:04:60:56:05:5d:3a:26:38:11:
         2f:6c:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:15:38 2026 by rpki-client