Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          nvxA3Il+E8L5DfoJVNMDM5+EjSGp8ykijCiEO/eLhdU=
Subject key identifier:   04:FB:43:56:A5:6F:42:6B:C9:FF:18:B6:81:BB:63:26:AB:D3:5B:D3
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          0236
Signing time:             Mon 05 Oct 2026 02:56:53 +0000
Manifest this update:     Mon 05 Oct 2026 02:56:53 +0000
Manifest next update:     Mon 12 Oct 2026 02:56:53 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: GfW4N4d9SSgLqb5rZHz/FRusfdWbCPKqL6p/EIMmUHQ=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: ikPMKuaPv3O9li0UmdRfo3QhOBtyL4n4r3spbr+lypM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Oct  5 02:56:53 2026 GMT
            Not After : Oct 12 02:56:53 2026 GMT
        Subject: CN=6ac311f5-fb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:4d:68:59:03:57:7a:a2:47:76:a3:f2:25:
                    da:18:68:fe:80:95:e8:d0:f3:d7:34:eb:7d:6e:a7:
                    04:8d:d7:64:8e:f9:4e:01:64:9b:35:85:02:82:34:
                    10:2a:c3:41:4e:d6:87:f4:ee:f4:a7:e0:d8:45:46:
                    a7:58:ee:e2:bb:10:18:b6:a9:ac:29:77:b6:49:a1:
                    77:53:b7:bd:49:39:f5:80:67:44:2d:7e:51:67:b3:
                    07:2b:81:3b:9d:e3:c9:27:20:63:18:ca:c2:d5:15:
                    24:7a:64:2e:49:67:7f:e7:ab:dc:aa:d3:3b:0c:3f:
                    50:14:3d:08:c6:5a:0f:2e:e3:d7:38:a2:75:91:24:
                    6e:da:7a:83:cf:e4:b1:6f:13:59:e3:15:03:a1:10:
                    36:c2:41:d6:e3:e6:3a:d2:71:de:82:31:ce:6e:a3:
                    12:8c:b8:0c:40:50:a9:2f:ec:d8:10:a0:b6:36:10:
                    aa:2a:69:65:34:26:60:0c:22:85:d9:4b:c2:b2:46:
                    e0:78:7d:6a:36:65:77:73:0b:d1:79:fc:6b:86:2f:
                    27:a5:a7:5f:63:1d:70:16:ab:bf:11:9a:2e:f3:88:
                    dc:2d:ea:16:6a:7e:b8:d8:42:40:9a:a0:fd:28:91:
                    65:8c:ce:20:11:60:4a:29:db:9c:a4:8c:f4:10:e3:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FB:43:56:A5:6F:42:6B:C9:FF:18:B6:81:BB:63:26:AB:D3:5B:D3
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:90:ad:e1:30:0a:6f:00:f5:a9:6d:a7:2a:10:13:53:6f:aa:
         86:ec:c3:4f:1b:0e:d7:34:57:ab:d3:8b:65:24:75:f7:5d:cd:
         33:8f:83:c2:b0:b9:55:75:2c:82:97:da:af:c3:81:70:7b:b6:
         47:26:4d:7c:f2:62:3b:e2:7d:f5:a9:97:26:12:52:e9:81:1a:
         a2:3a:78:60:f9:3f:29:5d:be:c2:22:58:54:3d:b0:75:41:92:
         67:54:b1:23:25:33:9e:73:1a:3d:19:b4:52:ed:ae:52:f7:29:
         41:f2:c2:94:e1:90:46:5a:8d:1d:d5:da:c8:5e:6d:2d:c0:2e:
         0b:8a:90:6f:24:c3:a5:e2:e3:63:b5:20:90:81:03:e4:6c:aa:
         2c:ce:d9:0f:1b:84:8e:a1:cd:7f:f5:f2:fb:4b:7d:e4:ce:21:
         55:73:b8:d2:ce:fe:75:a6:fa:60:f2:a4:1b:fe:86:83:69:83:
         1b:24:5b:9b:aa:1d:54:65:b6:08:d3:79:51:e6:74:d7:40:af:
         61:63:ad:d2:7c:44:07:95:dc:89:6c:95:14:4d:a7:53:ea:27:
         f0:8f:91:dc:4c:15:4f:7f:76:df:20:bf:d6:07:ac:76:e1:38:
         7c:86:10:43:3e:a4:a0:d2:18:b0:d3:d1:3d:7d:0b:f7:8e:64:
         b3:c2:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:26:14 2026 by rpki-client