Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File:                     S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier:          iQlnpfT4eamoHUfICXPVsd8k2UJYsCS+98fCD8EXeeE=
Subject key identifier:   D7:A6:B7:9E:3C:E1:41:A1:5A:7A:6D:53:00:BC:E1:B9:02:4D:14:25
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer:       /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial:       06FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number:          06E6
Signing time:             Thu 10 Sep 2026 22:10:11 +0000
Manifest this update:     Thu 10 Sep 2026 22:10:10 +0000
Manifest next update:     Thu 17 Sep 2026 22:10:10 +0000
Files and hashes:         1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: 9leQn/5myf5/Qj+qvw8nPVCduKROcd5hmOd6LnI6nRc=)
                          2: E898D0F2A57711F190C4BF715811F970.roa (hash: 9sXZijGFnIBXRK1K09OHFsr106RisC+Rzkh8g0lLCiw=)
                          3: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: Q5xlJCAiF8KCnEHIB5dc5jerjCip28+WlID9p/XyUfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
        Validity
            Not Before: Sep 10 22:10:10 2026 GMT
            Not After : Sep 17 22:10:10 2026 GMT
        Subject: CN=6aa32ac2-f0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:78:6f:23:6c:90:2f:41:e3:22:a9:4a:ff:
                    93:b0:1d:3f:e5:50:79:b5:f1:7d:de:0a:83:85:2b:
                    1f:3b:e4:5f:a1:71:74:42:3c:37:f4:ad:ff:c7:60:
                    6e:df:b9:2c:a2:38:db:14:f4:b3:bf:d3:78:7a:2f:
                    bc:6e:b5:c8:1d:49:18:bc:fe:b0:c8:80:6d:a5:10:
                    4d:92:e4:0d:c4:c4:1c:2c:72:4a:c3:c9:88:d5:2f:
                    a7:f8:c4:bf:32:e0:03:82:f7:34:04:53:90:02:77:
                    7f:38:fd:7e:e5:19:f2:a0:2a:3c:7d:da:f7:bc:bf:
                    e3:0f:35:4f:43:73:f5:1d:0a:37:67:e5:f1:40:47:
                    6a:6a:ea:99:49:5b:f7:76:c5:f7:b7:1b:30:8e:c5:
                    d8:38:e9:2e:e2:ab:08:4c:1e:be:d9:ea:60:db:38:
                    68:c9:6b:2b:39:c0:bd:a4:7a:9e:23:9b:8c:cc:62:
                    2f:59:69:81:bb:54:ca:d8:1b:b9:2b:1e:af:27:99:
                    31:67:58:6d:c4:52:cc:ce:57:b9:aa:c3:6b:e5:70:
                    19:ed:c9:54:fc:9c:73:ef:f1:48:72:ab:e2:90:ce:
                    8f:b0:71:e4:d8:12:1e:86:4e:dd:96:bf:77:97:df:
                    b4:95:31:6a:d5:b0:cc:b2:ca:4c:65:88:e1:40:31:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:B7:9E:3C:E1:41:A1:5A:7A:6D:53:00:BC:E1:B9:02:4D:14:25
            X509v3 Authority Key Identifier:
                keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:bc:59:8a:c1:b0:15:54:ad:8c:55:7b:98:73:8f:dc:8b:d6:
         dd:5c:46:21:2d:31:0d:25:cb:ff:20:c5:fa:18:a3:c6:a1:a1:
         de:1d:54:98:46:92:31:a9:f1:c5:70:87:36:a8:96:0d:ec:76:
         aa:71:19:b8:40:32:4b:d3:44:88:0b:34:e8:7c:d4:5d:8f:25:
         45:4c:14:a8:9e:45:92:ad:78:88:67:14:80:e2:d2:ea:36:85:
         0d:9d:ff:24:e7:37:a6:92:3c:49:8f:2b:3b:df:5f:71:e3:ab:
         90:89:ff:b5:b4:16:f3:fb:25:ad:ff:1d:f4:f3:6d:6e:98:f0:
         34:67:15:5a:31:50:e8:3a:40:cc:94:a7:10:fc:53:b7:0d:fd:
         f9:7a:03:3b:03:9a:9d:49:99:95:91:aa:73:1c:78:c1:b4:48:
         ea:62:4f:ad:07:dc:3a:53:b7:3e:9c:78:f2:dd:6e:7d:ec:6b:
         8d:89:61:98:22:57:d1:16:c2:3e:7f:2e:d0:d0:bf:28:ab:98:
         ca:37:c3:51:8f:5d:d7:a1:8a:94:be:33:43:8d:66:e0:8f:d9:
         44:28:6a:8c:e9:95:e2:2e:5a:89:ae:1f:9f:ba:85:a3:84:9c:
         1c:14:aa:7a:0a:a5:a7:14:b0:98:fd:dc:2d:1a:9e:f1:f7:48:
         e6:74:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:31 2026 by rpki-client