Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File:                     pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier:          fNhMIilw7zkTSNDTxY8UgH9rkSd18IQdgNnhkRMiV74=
Subject key identifier:   CE:CB:44:D7:F2:BB:CE:77:E5:95:9E:BC:53:4D:11:8C:26:EE:51:C1
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer:       /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number:          0131
Signing time:             Sun 11 Oct 2026 06:16:25 +0000
Manifest this update:     Sun 11 Oct 2026 06:16:25 +0000
Manifest next update:     Sun 18 Oct 2026 06:16:25 +0000
Files and hashes:         1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: AjOCWdFbS1PmoE6eYzdL9rrBb44ER5q5vz3V7xNE5L8=)
                          2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VaEKIuiVVa+34T0EyOyaQnSXrGSJwgYFoH12QYWKH4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
        Validity
            Not Before: Oct 11 06:16:25 2026 GMT
            Not After : Oct 18 06:16:25 2026 GMT
        Subject: CN=6acb29b9-e7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:e3:f7:cc:d7:11:14:b1:6f:79:6e:72:e5:
                    fc:28:06:ea:87:d2:af:02:50:0f:05:0c:ea:b4:e9:
                    cf:d9:a4:46:91:f2:45:5f:42:84:93:ed:e5:c5:f4:
                    85:d4:91:32:ea:7c:7a:d1:ec:c7:68:88:48:f3:2c:
                    53:d7:62:00:40:34:48:70:b3:04:5d:99:df:cc:65:
                    38:a5:51:59:fa:5a:de:0c:18:bd:4d:64:5b:65:2d:
                    be:5d:e0:6b:83:42:21:e9:0b:23:ad:19:30:7e:bf:
                    c7:19:e1:c3:58:04:99:64:ab:ba:d4:1c:45:c7:b8:
                    39:47:e3:ef:f7:fe:2d:02:c6:83:2f:15:26:bd:f8:
                    ea:1a:e6:d9:3a:e2:24:78:ce:d0:1c:19:48:3f:b0:
                    1d:1f:42:5d:52:29:1d:a3:27:20:8a:4c:2f:57:d4:
                    d6:3a:a4:99:72:8f:9f:96:ee:f3:c0:6e:cd:6a:56:
                    d9:d8:41:ea:80:41:e7:f3:d1:23:c0:f7:05:9b:3c:
                    00:49:53:0e:76:35:01:68:d7:0f:d3:54:85:33:c4:
                    9e:a1:d0:10:8e:a3:07:87:45:35:e1:8b:3d:33:6d:
                    ce:41:ff:7c:1d:16:59:52:bd:bf:38:cd:e2:a9:bd:
                    42:c4:d8:89:21:0a:4d:b3:f8:d8:36:1a:90:7b:4e:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CB:44:D7:F2:BB:CE:77:E5:95:9E:BC:53:4D:11:8C:26:EE:51:C1
            X509v3 Authority Key Identifier:
                keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:27:58:de:0b:15:3e:dc:eb:03:57:48:af:11:f8:0a:b7:87:
         9f:4f:88:24:33:11:5d:c4:eb:f5:22:86:98:0a:1a:f7:33:dd:
         18:95:db:b7:f7:9b:1e:7b:8e:cb:b3:9d:72:1b:71:45:9a:c2:
         c3:d3:4b:0f:39:c2:e8:41:f8:b8:85:08:01:88:e2:8a:93:cc:
         32:f7:31:c6:dd:a2:ad:97:05:5c:4d:5f:5e:f1:3a:18:e4:93:
         7c:9c:f1:07:53:23:c8:f0:f7:3b:d1:7e:e0:cb:17:d3:bb:a2:
         e9:43:f1:26:3e:15:12:3a:9e:ff:d3:8c:99:ac:82:68:fe:a4:
         3b:a1:38:ef:eb:2c:4b:ea:44:8a:01:e9:44:d6:7b:bc:dd:1e:
         70:9d:41:a2:00:46:e8:96:e8:5b:30:5f:85:a2:6e:d1:64:41:
         cf:fc:12:8c:90:ef:50:6f:9e:eb:ef:68:ab:9c:9a:b2:88:3c:
         22:6d:39:2b:72:f3:93:11:a9:dc:8e:95:b6:25:97:08:e4:25:
         4a:26:af:9c:7d:62:d6:68:a6:94:b8:3e:09:1f:38:a9:58:69:
         e0:72:67:7d:0c:ac:de:1b:8f:f2:6d:07:a0:aa:92:f2:b9:69:
         bc:37:29:73:32:f6:5d:0f:bf:a8:61:2a:ff:18:e9:c7:dd:75:
         94:9b:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:03:36 2026 by rpki-client