Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File:                     aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier:          6hOCaTZ+E03aVFi7UPBW8t+fvLTM1T6i/M8QPUDdRc0=
Subject key identifier:   C1:20:A3:B1:E3:F1:B2:3C:9F:15:AE:D8:9E:50:CC:3C:7E:8C:87:58
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer:       /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial:       0D0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number:          0CFB
Signing time:             Mon 12 Oct 2026 18:31:25 +0000
Manifest this update:     Mon 12 Oct 2026 18:31:25 +0000
Manifest next update:     Mon 19 Oct 2026 18:31:25 +0000
Files and hashes:         1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: 14ZIxmbfznJQs7ZEpTvyMxnK1j8BBkbDWWkxhwPAzkg=)
                          2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: r7Y9fnCxdSyyH2A4hgDRG+pQ+bI6QrGfxRhy4uVO9qQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
                          rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3338 (0xd0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
        Validity
            Not Before: Oct 12 18:31:25 2026 GMT
            Not After : Oct 19 18:31:25 2026 GMT
        Subject: CN=6acd277d-1976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:a3:9b:66:ff:0e:57:4e:5d:88:1f:4f:f9:
                    b2:af:84:bf:28:12:96:67:2c:c4:bf:c2:9b:fa:b3:
                    b1:fc:56:06:f5:c0:c3:3a:4b:31:e7:1e:af:a9:c9:
                    83:45:80:05:31:39:c4:ff:52:8e:55:89:8d:3f:31:
                    89:be:07:13:aa:b5:b7:40:39:3e:48:fa:f3:56:41:
                    3d:57:35:38:e2:9c:86:66:b6:08:74:3e:78:49:cc:
                    9b:c3:2b:35:4f:59:8b:78:9f:e0:19:2c:29:e8:0c:
                    a8:ff:b0:41:5d:0e:9a:03:15:e0:4d:84:2a:83:02:
                    4b:35:1d:14:02:c9:53:10:bc:d1:e5:49:5a:54:0f:
                    21:0a:62:d5:05:aa:67:e2:f6:e7:17:26:16:8c:4b:
                    59:19:d2:d0:ce:1a:42:fc:a3:c5:5d:59:dd:6d:3f:
                    4f:98:35:79:2f:f5:8f:33:fc:31:16:27:12:58:22:
                    a3:30:79:42:eb:20:b4:1b:96:f9:7d:92:2c:d7:d2:
                    aa:ef:2a:51:54:cc:06:4f:2f:cd:09:6d:7b:bf:0c:
                    50:85:a6:76:ee:13:e2:70:d8:b3:63:36:0f:66:fe:
                    1f:d5:66:60:c5:8a:db:bd:01:f4:12:14:ef:9f:a7:
                    54:bf:f2:7a:2e:59:98:9a:aa:fd:1e:43:87:57:70:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:A3:B1:E3:F1:B2:3C:9F:15:AE:D8:9E:50:CC:3C:7E:8C:87:58
            X509v3 Authority Key Identifier:
                keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:a9:4c:07:3f:1d:dd:46:fc:d0:89:49:ed:6b:30:48:f5:
         82:81:d6:6c:df:4f:d3:96:08:b6:52:54:2a:c2:0d:fc:1e:17:
         9f:15:22:d2:2a:0d:bd:12:19:51:d3:61:15:c5:b0:0f:06:b3:
         b9:8d:b7:41:5e:3d:2a:35:2d:10:1a:06:58:50:0f:09:2d:54:
         4b:06:69:1d:35:9a:09:1b:d8:1c:5b:b5:15:b9:c8:26:83:da:
         cf:41:e5:ef:d7:00:f8:53:db:6d:73:c9:2a:81:47:5f:bc:42:
         d6:62:a0:ba:5e:5d:cb:45:fe:cd:5d:ff:9a:53:13:01:48:a4:
         89:eb:47:b2:48:0e:3e:49:24:ed:73:25:22:91:a6:04:1a:5f:
         21:f3:32:72:74:74:0c:c0:11:c8:4a:6e:98:56:ff:5b:44:2a:
         65:33:27:f4:b5:0d:80:95:21:30:31:ac:40:68:ab:92:70:a4:
         ef:4f:74:86:16:81:76:65:ea:fb:0f:e7:40:d3:bf:ab:c1:cc:
         5d:05:df:ca:0a:fb:b9:94:36:0b:53:be:ea:11:35:81:56:73:
         55:59:d0:82:62:a5:51:b5:9d:6d:ea:96:41:ad:bb:8f:3c:9d:
         ee:9e:71:38:1d:d6:50:99:33:ef:01:bc:15:88:9e:31:43:bf:
         75:c4:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:45:15 2026 by rpki-client