Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File:                     aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier:          0pxw1VbyrQJF/hRJYqHIyqK547bVPhx8n7hshoap8aI=
Subject key identifier:   7D:C8:C9:F6:DB:45:A4:B9:A5:3C:0F:B1:FE:61:66:E5:3A:FD:9F:EB
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       3621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number:          35C7
Signing time:             Tue 06 Oct 2026 14:17:40 +0000
Manifest this update:     Tue 06 Oct 2026 14:17:39 +0000
Manifest next update:     Tue 13 Oct 2026 14:17:39 +0000
Files and hashes:         1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: +PlP8NgbLsrZS2a6IMfqWr2ffBXhszuLUvUgM/YoIfM=)
                          2: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=)
                          3: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=)
                          4: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=)
                          5: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=)
                          6: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=)
                          7: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=)
                          8: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=)
                          9: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13857 (0x3621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Oct  6 14:17:39 2026 GMT
            Not After : Oct 13 14:17:39 2026 GMT
        Subject: CN=6ac50304-effb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:b0:c4:4b:b8:d2:d9:8a:cb:2d:d3:e5:4a:
                    ec:60:d3:cf:1f:16:7e:b1:32:41:28:a0:1b:01:f0:
                    45:e8:c5:94:e4:84:27:8a:3e:39:1a:14:49:1a:f4:
                    a0:bf:3c:8f:30:f0:ab:6f:14:fe:c0:8c:9c:23:3c:
                    85:bb:8c:66:f1:13:a8:0c:67:37:e1:5a:52:de:cf:
                    89:11:ee:15:13:e4:48:be:35:c2:50:9e:d0:c4:0e:
                    8b:77:76:bc:40:f6:7b:8d:75:9d:69:17:7a:a4:67:
                    b5:98:3d:c8:4a:41:18:93:2e:9d:ad:e2:21:3c:44:
                    b3:1a:3c:12:ac:a7:39:6f:a6:4d:36:79:c3:a8:d0:
                    87:c5:7b:9a:c3:78:1a:cf:1a:4d:0f:7f:54:12:c7:
                    80:a0:b2:2f:62:9a:80:c2:38:9a:91:41:35:a6:fa:
                    ae:02:e9:6c:db:b2:17:ee:63:9e:9f:b5:94:42:87:
                    65:25:04:6b:5a:e7:59:8c:61:b9:c6:93:2f:1e:9c:
                    78:6e:ae:44:32:12:0c:77:80:1b:cd:43:37:ed:77:
                    8f:4a:a9:af:25:f6:60:40:d3:91:37:f1:e7:4a:fc:
                    cf:ec:02:47:2a:a9:06:90:73:32:76:73:e2:42:03:
                    a2:60:db:dd:49:49:9d:9b:49:05:0c:c9:f1:a3:5b:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:C9:F6:DB:45:A4:B9:A5:3C:0F:B1:FE:61:66:E5:3A:FD:9F:EB
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:78:cc:81:6d:95:77:50:66:a6:b4:19:be:ce:26:ff:d0:36:
         93:9c:1b:bb:5a:21:e5:5d:b6:44:ee:27:4c:58:19:8c:3f:d4:
         7d:8c:e5:a4:91:e6:b7:b8:5a:fb:08:d4:fe:1f:a4:bc:d1:78:
         17:35:0d:c0:d7:c7:46:ab:4d:4f:85:7b:17:83:b7:8e:dc:ad:
         bf:92:88:bf:61:3f:85:2e:2f:29:09:87:fd:a7:58:07:9a:63:
         92:c1:f7:ba:8a:cc:1e:2a:1d:4f:74:79:60:bd:9a:b8:11:d3:
         09:79:c5:7a:87:db:a4:72:4f:91:ac:a8:1b:ed:27:34:ef:2c:
         59:63:cf:e4:ff:80:1b:dd:8f:80:ae:1c:3b:cf:6a:65:c8:10:
         42:ba:53:60:e5:98:8a:64:8b:e7:2e:9d:85:23:01:4c:54:0a:
         e9:1e:27:51:87:6e:d4:8f:24:40:77:49:8b:c2:04:9e:ae:75:
         8e:b6:7a:f2:66:8a:9d:75:65:49:87:22:b4:37:75:06:b3:fd:
         4b:c9:93:d9:db:25:82:62:24:e9:08:a6:54:4c:7a:14:ea:c2:
         77:75:08:45:6e:a5:56:29:68:de:fa:ee:38:3c:3c:8b:b2:f5:
         d1:c9:4f:3a:35:42:8a:b8:32:de:04:a2:33:09:43:5e:de:c8:
         0f:73:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:58:37 2026 by rpki-client