Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
File:                     4kseiTWUfEbxEc4paFpZGaGEgWI.mft (raw, json)
Hash identifier:          8momopg4/GbgA9+JchzqHUpnVhSiqDkviko9d8z4GD4=
Subject key identifier:   74:A9:1D:AE:38:96:46:BA:AB:CC:12:8A:F6:0E:F3:9C:0B:81:AB:87
Authority key identifier: E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
Certificate issuer:       /CN=A91AC757/serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
Manifest number:          1F
Signing time:             Tue 13 Oct 2026 09:41:29 +0000
Manifest this update:     Tue 13 Oct 2026 09:41:29 +0000
Manifest next update:     Tue 20 Oct 2026 09:41:29 +0000
Files and hashes:         1: 4kseiTWUfEbxEc4paFpZGaGEgWI.crl (hash: OmyJ/jGCXjah/UYtmKjlrZ7C5ash6qTIaD9y23QrFuY=)
                          2: F930E2AE9A0211F18F8C777D4D11F970.roa (hash: g0HTZkRvVAAIsmTQpLZEGBxeJYJHzsZAyNCmFjkA0Pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl
                          rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC757, serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
        Validity
            Not Before: Oct 13 09:41:29 2026 GMT
            Not After : Oct 20 09:41:29 2026 GMT
        Subject: CN=6acdfcc9-9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:ef:48:f6:59:c6:17:b1:52:62:2e:3e:72:
                    48:c1:b8:ae:02:3c:58:71:e6:a3:6d:50:2e:c6:87:
                    a8:5c:da:b6:8c:f1:50:cb:c1:3c:ea:f9:99:38:b8:
                    c1:10:69:ff:d6:15:e9:a3:c0:4b:e4:9f:eb:ab:a4:
                    fd:1f:58:69:f9:a7:f8:36:0b:87:25:0a:75:52:2f:
                    27:e3:94:95:7b:93:1a:40:b0:bd:9f:b9:6b:4b:16:
                    54:6a:fe:d4:67:06:52:a0:d7:3c:d9:be:55:cb:20:
                    58:6b:12:b0:55:5f:9f:2a:ff:57:07:36:d2:cb:84:
                    7f:20:32:3f:00:b0:1a:7e:f1:5e:ec:9a:3c:0f:ef:
                    02:ad:57:91:df:bc:c1:8a:86:64:4f:8a:a5:6b:40:
                    36:87:4a:32:ba:e5:e9:21:d1:8f:3d:fd:97:fc:29:
                    46:7a:42:f3:ff:a8:67:d8:65:4c:a6:6f:ce:fb:d1:
                    f6:a3:d6:cb:20:bf:6a:48:b0:4f:52:19:5d:d3:22:
                    00:a7:d5:20:77:5e:cd:82:11:90:d5:61:45:57:cc:
                    51:ed:4b:b9:e5:c3:af:03:a9:5f:e7:6c:7b:f5:14:
                    ce:7a:93:41:e0:a5:14:bd:41:f2:21:8a:6a:d4:04:
                    6d:a8:b2:1a:10:32:52:7e:e6:46:8b:ad:9c:f1:b0:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A9:1D:AE:38:96:46:BA:AB:CC:12:8A:F6:0E:F3:9C:0B:81:AB:87
            X509v3 Authority Key Identifier:
                keyid:E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:7b:0c:2c:4e:4f:b9:08:23:87:20:2d:29:f0:24:bd:20:
         ef:8b:ca:e6:df:4c:a7:7e:63:3a:ce:26:a8:8e:02:bf:a2:3b:
         da:4b:f9:a0:dc:af:4e:e2:f0:af:3e:1b:c0:57:1e:5d:53:5e:
         39:c1:d0:b5:b4:c8:b5:5d:ff:71:ea:bc:52:db:33:04:ff:f4:
         f4:5b:88:9b:21:1b:2c:a6:15:21:67:08:70:92:8f:9d:f9:61:
         48:45:19:c7:9d:18:50:01:f9:68:84:e4:a6:d2:23:28:dd:ee:
         78:ea:9c:39:ac:ef:64:cc:1c:ee:ce:d7:54:1a:99:af:7c:19:
         b9:7f:d2:0e:93:07:63:4d:cb:6a:d2:69:76:61:9e:46:f2:c0:
         1a:83:47:b3:e6:94:94:b5:4a:cb:23:bb:b1:57:33:37:33:83:
         0a:c6:41:35:e2:b8:94:5d:ce:39:d2:c0:02:d7:df:fd:31:3b:
         ac:61:2a:29:40:f8:47:79:3b:0a:38:a1:b8:68:0e:87:30:ad:
         e9:6d:d0:61:56:93:fc:ae:69:65:cc:1c:50:60:53:32:de:fc:
         25:62:c8:72:06:77:72:2a:0f:f7:95:46:b5:a0:e1:b3:2e:ab:
         73:d5:57:46:44:5f:f6:aa:15:ce:49:18:2e:32:98:26:cf:9e:
         85:28:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:06:11 2026 by rpki-client