Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
File:                     Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft (raw, json)
Hash identifier:          OMg7FFqQy9793Dsc27l8sDraUJFGTDnURL1Pe2GfKBM=
Subject key identifier:   B6:D1:E7:F8:24:DC:DE:1E:46:72:21:5B:DD:C9:9F:2A:84:6E:FA:31
Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Certificate issuer:       /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
Manifest number:          3F
Signing time:             Mon 31 Aug 2026 09:02:43 +0000
Manifest this update:     Mon 31 Aug 2026 09:02:42 +0000
Manifest next update:     Mon 07 Sep 2026 09:02:42 +0000
Files and hashes:         1: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl (hash: vU8pLwaJWC10fO/U0WI0wMarTrTAbztpqm8YXOjeQI4=)
                          2: 64B446CA7EAA11F1B173303066A30FBC.roa (hash: tb/s6gLIXaYTsezXokt2OrwPKppQtIENbSawKe+uw8Y=)
                          3: 65D380F27EAA11F1B173303066A30FBC.roa (hash: 5gfdpSY7JYQ5F3wG8OEDwn4p3/ZZWjHNEFO05arQYNo=)
                          4: 763DF47E5F3611F192539E378047A888.roa (hash: Q5As8jeHYqHhZ7fSSmextS8z5wVQANqrRtBT9kjNokg=)
                          5: 653B4FA87EAA11F1B173303066A30FBC.roa (hash: EFkhWXtgulJBn3A7ClQDPUCqLh2IZisKv33Z5xFDjxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
                          rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
        Validity
            Not Before: Aug 31 09:02:42 2026 GMT
            Not After : Sep  7 09:02:42 2026 GMT
        Subject: CN=6a954332-d18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:fc:cc:c2:11:dc:56:47:4a:e1:6f:c8:07:
                    72:34:59:e4:c9:fa:8a:04:55:42:1d:08:40:20:e6:
                    f6:b9:23:62:2a:99:57:03:77:28:a2:d3:0d:fd:07:
                    d8:c5:ad:e1:31:60:1b:30:0e:35:49:f4:a9:1b:97:
                    ce:9b:45:5d:54:df:98:95:44:84:e6:62:54:d5:72:
                    1b:fa:e6:03:9c:67:23:8d:9d:2e:67:e4:5f:46:1f:
                    4b:19:3c:f3:6d:fd:b2:f8:9c:c7:71:c5:4b:47:b2:
                    13:e2:17:af:17:c0:b0:40:ea:77:05:f1:82:08:63:
                    e2:fd:d9:41:f1:d1:61:17:f4:46:e3:c2:78:04:72:
                    0a:06:f4:96:b8:e0:be:a3:97:a6:01:3d:92:3e:5a:
                    98:c3:12:12:79:94:16:bf:7a:c8:ee:c4:8d:f2:6e:
                    32:ad:29:45:a1:03:e2:40:a6:93:fb:bf:1d:5d:6a:
                    c1:74:94:11:f6:98:db:54:aa:70:29:af:82:07:25:
                    d8:0c:c2:00:1c:2a:01:1b:78:dc:0b:38:c6:a5:8b:
                    dd:cb:86:d4:b7:30:cc:2b:ad:73:fc:93:05:f9:e7:
                    be:60:7f:1a:6a:5f:46:b7:d1:97:42:84:b8:15:17:
                    1d:9d:fa:9c:49:b5:ec:6c:00:d5:03:ce:61:40:4a:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:E7:F8:24:DC:DE:1E:46:72:21:5B:DD:C9:9F:2A:84:6E:FA:31
            X509v3 Authority Key Identifier:
                keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:f1:10:37:40:1a:4e:ac:f3:95:e0:2b:9d:ce:c8:4c:89:
         06:40:65:c8:73:15:88:68:2a:d3:4c:db:c1:97:c2:66:f8:dd:
         49:fe:71:9e:30:e8:69:3f:95:90:24:24:ef:10:dd:be:c7:db:
         52:89:b5:b0:d0:9e:2d:1d:a1:4b:1d:37:44:5a:0d:06:b5:ea:
         a5:0c:91:8e:42:52:b6:c8:3b:1a:d5:08:c1:a4:92:9b:10:17:
         87:8b:2e:d5:f1:54:73:29:2f:3f:24:de:ae:1c:11:43:bb:5f:
         5f:7c:1e:57:5b:0d:3f:2c:52:f4:ab:0a:12:26:61:76:47:19:
         58:4a:a7:df:95:7d:cc:ba:1d:09:88:b6:22:c7:73:af:9f:34:
         ad:d3:70:52:d1:1f:f2:61:50:e1:fe:b7:98:d7:5c:ac:92:b2:
         0c:0d:82:ef:8f:0b:48:a9:43:e8:58:73:44:0d:28:57:ff:06:
         4b:16:8a:38:ca:38:2c:d0:f9:b1:a8:95:f8:13:85:f8:50:9b:
         3e:2c:88:79:34:2f:18:4f:77:74:c5:0e:06:0a:56:df:1a:dd:
         45:0f:09:97:e8:a2:92:39:4d:ff:b7:22:65:11:2c:92:d1:9d:
         c4:b8:11:14:2f:3e:32:4e:6b:74:1e:c5:9d:68:74:8f:c0:54:
         d8:b5:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:34 2026 by rpki-client