Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          B/gbIiJnwDx0xYQHgNhlxp+N89OtyrAcuMzVItDPxVo=
Subject key identifier:   CC:23:4C:58:85:B7:64:CB:F5:99:3E:F3:A6:99:0B:29:22:15:4E:E3
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          01DD
Signing time:             Thu 15 Oct 2026 04:56:15 +0000
Manifest this update:     Thu 15 Oct 2026 04:56:15 +0000
Manifest next update:     Thu 22 Oct 2026 04:56:15 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: LTsJUP9qD5zXhI0g5TIti5PpCQrgaymEGfc3Y236nGg=)
                          2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: wCGfC4BD+WaSxmo3hc+r7hIlBChOqs70L8QHRte2kxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 04:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: Oct 15 04:56:15 2026 GMT
            Not After : Oct 22 04:56:15 2026 GMT
        Subject: CN=6ad05cef-3bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d7:02:fd:02:71:5b:ff:4f:f9:89:84:f9:ae:
                    ea:f7:64:4f:05:65:45:63:aa:9c:ab:d9:9c:90:bd:
                    5a:fa:3d:64:e7:3c:7d:de:c8:1c:4a:b5:e1:55:1e:
                    ca:1f:ef:a8:60:6c:0f:ef:ef:15:42:b3:29:8d:4f:
                    9c:76:16:10:7e:49:72:5b:e0:51:1f:eb:87:88:27:
                    65:ce:d2:fb:12:5b:d5:1a:36:91:f9:fa:a6:23:05:
                    02:fd:eb:ef:d1:0c:4d:73:86:b3:2c:d2:b6:04:28:
                    1b:f5:da:25:98:24:59:a9:a0:e5:5c:97:fe:b2:74:
                    56:7c:64:65:2f:ae:fc:9b:cb:50:02:ea:d3:c1:66:
                    90:32:08:4d:c8:14:7c:b5:e3:30:19:e8:55:d5:c4:
                    06:0b:46:27:6c:66:9e:89:90:57:b7:d0:b6:ec:40:
                    5e:77:23:98:ba:74:41:a3:f0:17:4c:14:28:b3:14:
                    ab:c0:a8:2f:d7:a3:34:c6:a3:0e:30:b1:68:ee:13:
                    9f:41:03:a2:53:82:11:56:72:24:64:b2:e0:b1:f7:
                    4b:ce:d9:aa:08:58:ed:ed:92:67:27:6f:e3:f0:66:
                    b9:c8:25:8a:7d:9a:26:1a:d9:9a:a7:a8:4b:94:12:
                    25:3a:75:3d:e9:1f:6b:ea:4c:0b:2e:5f:86:8a:17:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:23:4C:58:85:B7:64:CB:F5:99:3E:F3:A6:99:0B:29:22:15:4E:E3
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a6:c2:e7:c0:d2:fa:b3:b0:34:57:66:75:ad:c6:8d:ee:49:
         02:48:85:92:2a:ec:4a:d3:e7:97:61:42:ce:fe:2d:4e:c3:46:
         77:4b:20:e8:bb:f7:7f:b4:93:be:74:a1:ed:1d:63:5e:cb:31:
         2e:3b:e3:fa:4b:6c:a5:73:ec:02:12:96:b6:68:bd:1c:e4:bb:
         bb:d4:cd:42:ed:4f:2e:4d:82:83:c6:9d:b0:ea:ce:66:0f:82:
         57:20:12:5a:40:ad:d3:cb:7c:f6:cb:73:36:a4:7b:61:3a:fc:
         3e:59:93:d8:fe:a7:c8:e9:82:cb:9d:73:2d:8f:5b:ec:f6:c0:
         68:f9:83:47:7c:af:ef:d2:b4:73:77:66:60:ca:14:74:10:89:
         e2:50:9e:2a:73:ab:ba:31:2c:c2:45:61:2c:b7:f6:64:80:c7:
         fc:24:eb:00:7c:cf:e4:ce:63:03:e3:5c:67:24:63:90:b9:19:
         0c:9c:e3:9e:24:00:75:63:ba:e8:79:73:30:5f:87:5e:66:66:
         66:29:0f:d2:c5:b7:ee:f9:dd:a5:89:61:e8:be:36:22:ba:5c:
         1a:58:0a:b0:ed:e6:e3:39:03:ae:8b:ba:d3:64:8e:42:66:56:
         2b:9f:49:72:c5:f3:51:a1:3e:9e:11:0c:0d:e5:f0:dc:d4:db:
         68:4c:a1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:11:12 2026 by rpki-client