Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File:                     mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier:          38r99N4bowOXSQ+37p1FqhkRWuRuW4crzzm1q3k/YYs=
Subject key identifier:   C3:0E:BB:6F:9D:62:3F:78:4C:74:09:B0:11:A0:B9:77:0E:28:90:02
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer:       /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number:          010A
Signing time:             Mon 21 Sep 2026 06:03:38 +0000
Manifest this update:     Mon 21 Sep 2026 06:03:37 +0000
Manifest next update:     Mon 28 Sep 2026 06:03:37 +0000
Files and hashes:         1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: Y/SY3OcQ7LRFO3+zF/SJRv2kZ0gFBJU6ZtorSFwxr6Y=)
                          2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: q15h8naITCmlNDgt0fcVFaL5Jg+soxRTIhbvGiyXn00=)
                          3: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: nKq89mFtdPAm1UALvKV17Saig4Y05tURAwcO6cCh6zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
        Validity
            Not Before: Sep 21 06:03:37 2026 GMT
            Not After : Sep 28 06:03:37 2026 GMT
        Subject: CN=6ab0c8ba-c15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:8b:04:0a:ce:ba:79:dc:93:51:fd:09:a1:
                    71:0e:d9:49:02:b6:67:10:b7:f0:cd:af:d8:1c:f4:
                    fd:20:7e:97:6f:b6:4c:84:20:0e:81:de:08:15:10:
                    5c:fd:bf:e1:1f:9b:ea:19:a6:2d:2e:6f:c3:89:c6:
                    67:68:15:15:2f:64:84:94:97:d2:7e:4b:26:99:ff:
                    c8:56:a6:9a:3c:e3:5a:da:8d:2f:02:fc:4d:b5:a4:
                    8b:fd:ce:ca:63:54:80:4c:e1:aa:28:9c:53:33:4b:
                    2a:ea:62:1e:b2:4e:7c:e0:ba:c9:36:a3:6b:0c:bf:
                    28:64:6e:3c:f3:da:1a:b1:3e:47:37:ec:c8:0c:5c:
                    4a:e2:15:e1:82:7c:6b:7f:96:05:6d:2f:d7:87:b9:
                    ba:f1:0d:60:d8:f2:33:ab:f1:dd:de:14:eb:28:e2:
                    e2:a5:28:bf:6f:9a:9c:52:b9:5d:7a:a4:c2:d4:98:
                    0d:c5:5f:68:80:07:93:6d:9c:cf:78:16:c4:04:83:
                    09:22:2f:cd:0e:0a:45:cf:bd:d9:5b:38:1b:4f:93:
                    1d:1d:a1:bf:17:2f:1d:27:8e:4c:34:44:f5:95:7b:
                    d6:87:50:14:a9:02:13:30:83:e0:89:30:e7:0f:46:
                    15:56:5c:32:06:be:bd:39:78:de:78:16:cd:8e:d0:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:BB:6F:9D:62:3F:78:4C:74:09:B0:11:A0:B9:77:0E:28:90:02
            X509v3 Authority Key Identifier:
                keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:92:51:97:bd:5f:29:69:3d:4d:ff:ed:81:22:b2:ea:60:
         85:c4:04:52:f4:fa:83:98:7c:38:dd:92:ab:17:b0:45:3e:c7:
         fc:96:13:92:bf:03:c1:bf:7c:13:89:76:43:5c:12:c5:1a:e4:
         00:5f:80:51:49:d5:50:90:be:b7:17:6e:7e:87:3f:e2:a5:ad:
         54:1e:db:da:38:2d:ad:7b:a6:01:cd:1d:f6:c7:4a:af:55:c5:
         39:f8:6c:16:e9:ec:2e:fe:91:13:30:d3:b6:78:65:2e:0d:88:
         f4:fe:26:36:4e:e4:f6:ea:d8:32:b0:0e:b4:c4:88:8b:3d:fc:
         c7:20:b8:90:b7:48:31:ed:8b:9b:73:cc:45:57:a6:62:94:a3:
         9e:4a:69:8f:a3:2d:a0:ed:20:d2:54:64:c0:81:11:87:5f:f4:
         c3:74:fc:60:bb:c1:92:d9:ab:19:0a:76:30:a2:e8:85:76:11:
         a1:28:7e:5f:39:4f:9f:61:76:47:91:1b:3b:73:c6:67:79:e2:
         a8:8d:a5:4b:57:04:cc:9b:83:17:fa:ea:bd:53:81:0d:e6:98:
         ba:e6:1b:c4:7a:6a:c1:47:83:4c:52:03:50:d1:a3:bb:03:92:
         8f:07:89:1c:21:62:8b:72:60:39:fc:db:ab:fd:c8:2c:c4:d7:
         0e:d0:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:24:30 2026 by rpki-client