Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
File:                     MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json)
Hash identifier:          ZU/wxSeIRLI57SQFc70mAMTtBNli3X+S+hP/dRJhj0w=
Subject key identifier:   BE:28:33:77:1B:60:A6:C3:3B:F7:9D:EF:C9:8D:25:E6:56:5C:EF:52
Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Certificate issuer:       /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
Manifest number:          01B3
Signing time:             Tue 13 Oct 2026 04:34:58 +0000
Manifest this update:     Tue 13 Oct 2026 04:34:57 +0000
Manifest next update:     Tue 20 Oct 2026 04:34:57 +0000
Files and hashes:         1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: EBQabe4kWNyu0ChxfOFPT4k9x/PgrXaRPUtUjsUDtUQ=)
                          2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: jIrHOyH1QDZvv2If2z5/HwQNB+UGwuoFURWKMIbprA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
        Validity
            Not Before: Oct 13 04:34:57 2026 GMT
            Not After : Oct 20 04:34:57 2026 GMT
        Subject: CN=6acdb4f2-5833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:a9:39:04:7b:34:f8:75:01:64:be:55:f8:
                    78:10:22:87:9a:45:75:95:88:48:59:70:7c:eb:59:
                    2a:a9:81:85:f3:24:3d:d8:b1:55:5c:05:e3:d1:b9:
                    f1:37:98:16:cf:9d:37:8b:2c:3e:1b:c7:8c:90:64:
                    f0:d4:20:4f:c6:47:1d:71:2a:6d:71:08:06:b6:50:
                    29:7b:bd:c5:82:a4:84:f5:4e:9e:0b:9b:2c:d1:83:
                    88:1b:53:d9:d2:72:d4:9f:7e:ab:ff:8b:0d:60:8e:
                    7b:0f:de:6a:9b:e5:7a:61:1f:13:34:11:64:56:35:
                    7f:33:96:b2:6d:48:8d:21:db:86:d9:88:5a:f7:4c:
                    e8:16:cb:b8:a2:7a:b9:d0:c7:08:54:73:cb:23:f8:
                    cf:72:b3:f8:fc:dc:a0:c9:0a:f2:5c:c1:63:b6:eb:
                    83:f8:65:1f:70:13:3c:43:61:52:cc:82:2e:3a:b6:
                    6a:e9:f0:ba:3b:dc:d5:36:ff:81:35:71:1d:66:72:
                    0e:5e:ec:04:ff:02:b6:08:e5:e0:c0:ff:bc:fa:c0:
                    49:a3:cf:74:80:df:50:17:30:12:7b:98:53:6e:7a:
                    24:e9:93:85:42:c5:31:39:6a:7b:d1:6a:ec:a1:ac:
                    9c:a5:05:9f:90:0f:1b:00:65:0d:d3:4d:88:39:b6:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:33:77:1B:60:A6:C3:3B:F7:9D:EF:C9:8D:25:E6:56:5C:EF:52
            X509v3 Authority Key Identifier:
                keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:09:b9:c7:83:dc:6f:e7:0b:f5:a9:32:db:8b:7d:37:a9:67:
         f7:7a:3f:31:b3:44:05:c8:35:97:d0:81:14:2c:95:52:6f:b2:
         97:19:3b:c3:10:3a:b6:0f:47:ac:31:47:a8:a3:b5:b8:03:af:
         dd:cf:f9:0f:56:5d:83:f0:de:b3:f4:ea:73:3f:00:64:bd:cc:
         94:78:9f:04:aa:86:bb:29:e2:18:78:03:5a:31:56:ab:15:9c:
         08:38:e5:f2:5a:5a:3a:69:8e:ad:ff:91:b8:ca:e7:e0:49:31:
         9c:aa:76:d4:36:fb:97:0f:28:90:71:aa:c7:24:81:5f:28:39:
         d6:5f:d3:fe:81:63:5b:f9:0f:0b:99:65:cb:36:1e:97:bf:40:
         5d:7f:34:e7:65:eb:82:da:1a:f8:4a:f9:18:05:e8:6b:43:2b:
         fd:fa:4c:ff:c8:35:59:66:90:43:29:68:74:19:9f:98:97:4f:
         45:1d:13:a5:4d:49:66:7c:82:cd:2f:71:c3:81:b2:78:ad:a0:
         1a:b2:d2:d3:4e:79:b4:be:67:f7:22:3a:44:4f:02:94:ee:81:
         54:7b:b7:e9:da:05:f7:67:86:85:9a:ef:7d:55:0c:fe:19:3b:
         7e:6f:b7:69:e7:ce:59:2e:17:c7:35:cc:df:11:4e:5e:ed:3a:
         9d:35:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:35:11 2026 by rpki-client