Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
File:                     pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json)
Hash identifier:          iLPlF6H+qvYgdKY7G5oGgQyz0FIBJwdgF+aKlSR4v4Q=
Subject key identifier:   45:1E:F4:68:5D:26:80:9B:7A:C7:19:AB:1A:64:21:47:DA:9D:96:45
Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
Certificate issuer:       /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
Manifest number:          45
Signing time:             Tue 13 Oct 2026 09:15:45 +0000
Manifest this update:     Tue 13 Oct 2026 09:15:45 +0000
Manifest next update:     Tue 20 Oct 2026 09:15:45 +0000
Files and hashes:         1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: 5iV0s7xNr3wGGAcV9n0F5n9M7e/NZ7LMf+XuEvMavQ0=)
                          2: 694EC58664AE11F189DF701D9347A888.roa (hash: Mz6Te07lf/TFttYs/5xZ/WVJKDZVoMpf6rbwNPc0WGA=)
                          3: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: VxBq9ev4olTZHWXFb/0pr2uIN1FLk3ZIw2Udkr1ORSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
        Validity
            Not Before: Oct 13 09:15:45 2026 GMT
            Not After : Oct 20 09:15:45 2026 GMT
        Subject: CN=6acdf6c1-e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:e6:23:33:01:57:1d:26:ee:70:73:ac:40:
                    38:2b:e7:0d:71:dc:f5:5d:f5:10:42:1d:07:a4:e6:
                    5c:03:1f:40:62:8c:fa:4b:70:ea:2d:a8:db:b2:f1:
                    8c:24:67:c0:6d:d2:7a:14:39:d1:f2:26:0f:72:46:
                    13:46:f9:13:63:3d:de:09:fe:7c:8d:51:01:e6:d7:
                    7c:27:73:ee:7b:97:ae:1f:00:46:94:a5:5a:44:16:
                    1c:54:dc:06:37:6a:fa:db:d6:2a:70:63:55:f6:05:
                    97:89:b5:ed:9e:5f:d8:eb:f7:8a:60:a1:12:26:cc:
                    37:3c:14:31:f5:be:71:cf:04:06:45:33:3f:3c:7e:
                    b6:77:dc:f8:ab:c2:3c:88:33:b3:4f:3b:42:4d:02:
                    7d:68:c8:32:53:b7:00:77:06:d7:83:60:4a:b9:5c:
                    e2:b4:89:19:98:9b:ec:1e:89:43:42:0f:72:f6:7c:
                    86:fb:56:75:72:11:d4:ad:a8:d5:be:d4:67:77:46:
                    a8:27:1a:90:85:1e:7a:84:b2:ad:3c:ac:f5:59:0a:
                    82:4f:17:8a:59:09:3c:37:e5:8c:0d:31:cb:2d:2f:
                    31:a1:95:40:8c:3b:72:1f:29:e2:d7:5c:e2:71:1c:
                    42:b9:8a:ff:36:36:24:18:e3:07:b3:ce:60:65:b5:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:F4:68:5D:26:80:9B:7A:C7:19:AB:1A:64:21:47:DA:9D:96:45
            X509v3 Authority Key Identifier:
                keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:08:75:94:62:d2:4a:71:91:30:a9:e5:1f:6f:f4:52:4a:7f:
         27:77:77:ce:56:71:94:b9:b5:fc:51:fc:90:49:69:45:e7:c0:
         0f:31:7e:bb:e7:6d:4b:a0:28:56:a3:80:dc:02:77:1c:82:8f:
         0b:f7:a2:67:1e:fa:c8:22:dc:c6:ca:77:27:13:d6:98:66:2d:
         7d:41:53:7a:1d:a6:bd:d7:6b:42:ec:56:17:f1:1c:0d:8b:96:
         12:0f:7b:2b:f4:f0:4a:59:51:39:df:12:86:48:82:a2:4a:d4:
         f4:e7:30:21:10:49:80:43:18:fc:ec:28:97:fe:65:3a:a1:ac:
         64:23:28:dd:15:c0:6d:86:43:09:ca:ad:25:77:58:14:d9:f8:
         02:0c:ee:6b:08:ca:fb:93:69:79:61:a7:dd:59:8a:1e:84:12:
         e5:f0:8a:db:3a:62:44:df:e7:8c:63:8a:b9:48:f0:90:12:94:
         c5:28:c8:08:d9:6d:50:75:ea:55:be:84:a6:c0:d4:e3:69:48:
         cd:0e:22:f0:7d:26:ac:cb:e9:7e:4d:80:e7:3a:d9:c3:8a:e5:
         7d:2f:00:0d:d5:6a:05:02:0c:1e:a0:74:41:1e:d5:e1:c4:05:
         a1:f3:c7:fa:f1:19:90:3e:42:3a:98:4c:2c:90:11:d9:10:2e:
         40:61:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:36:34 2026 by rpki-client