Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
File:                     oYVUdv79oHy8rTr5lUhEq6B7dyw.mft (raw, json)
Hash identifier:          p0ko1C9VhSgO+xXNOtWFhhb+frjiyDAPh4U89BtxU50=
Subject key identifier:   15:BE:EB:AE:87:3E:18:3A:51:8D:F7:9C:8A:39:17:6A:53:38:93:A4
Authority key identifier: A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C
Certificate issuer:       /CN=A91C909E/serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
Manifest number:          50
Signing time:             Tue 13 Oct 2026 09:03:40 +0000
Manifest this update:     Tue 13 Oct 2026 09:03:40 +0000
Manifest next update:     Tue 20 Oct 2026 09:03:40 +0000
Files and hashes:         1: oYVUdv79oHy8rTr5lUhEq6B7dyw.crl (hash: 59jPVKGDPVK8EptMWOmvcRIK1PKAehMSb0/AbSGW/Yg=)
                          2: 377E5F464B5C11F1B3CC4A0AAE833773.roa (hash: l+MmjZZ7vb/FC3MXzcOXQHG/MQgYHBCADLYpYIgUX8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl
                          rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C909E, serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
        Validity
            Not Before: Oct 13 09:03:40 2026 GMT
            Not After : Oct 20 09:03:40 2026 GMT
        Subject: CN=6acdf3ec-f39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:da:5e:71:7d:d6:03:1f:88:98:90:74:74:5c:
                    34:1e:96:c2:8e:0a:c0:5c:16:3f:b6:8a:c1:2d:f0:
                    72:10:3f:66:3c:66:66:25:ce:10:bb:32:f2:31:ca:
                    e5:84:ce:d0:c3:f4:b3:4f:d1:d3:31:cb:5a:ee:e6:
                    15:17:91:be:33:2b:a6:1f:19:33:c8:e8:f0:68:84:
                    44:0c:d0:20:31:24:9c:0b:75:af:3b:fd:60:f8:51:
                    ea:a8:30:bd:36:3e:b8:a0:c2:de:48:98:8c:ce:d6:
                    8d:2b:73:e9:0b:7a:ad:8e:12:b3:e7:ff:f3:e0:b6:
                    92:e1:7e:1d:bf:39:ee:d8:d7:02:36:89:52:b4:c3:
                    31:83:ad:3d:ac:6b:9d:64:1e:b0:5f:00:f8:4c:1b:
                    78:78:6a:92:81:e1:f1:e5:18:ed:3d:0a:a9:0b:04:
                    98:cc:9d:97:46:28:3f:af:6a:8c:db:8b:4d:00:cb:
                    f8:76:51:f8:3e:3c:95:46:4e:f9:fe:17:09:07:28:
                    de:dc:8f:14:4d:8a:fa:fe:0d:c9:3c:fb:3b:bf:b5:
                    a5:4c:34:38:1e:9d:eb:da:e6:b0:6a:1d:1b:ba:e6:
                    5c:3c:70:d7:7e:ce:22:f8:28:ed:3f:48:56:1c:93:
                    7e:5a:17:90:38:ea:ca:2c:e4:2d:0b:16:6d:dd:e1:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:EB:AE:87:3E:18:3A:51:8D:F7:9C:8A:39:17:6A:53:38:93:A4
            X509v3 Authority Key Identifier:
                keyid:A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:b2:6b:5f:86:7b:b1:ec:25:da:65:3d:fe:16:74:76:67:
         2b:1d:53:6f:57:ce:b6:f4:18:81:06:ac:f6:9b:22:f9:53:4a:
         d6:76:4d:a9:40:b9:01:33:28:23:fb:69:74:16:6d:1b:e4:d0:
         1c:54:10:10:ac:84:2b:35:21:f3:05:38:93:7d:fd:b9:7a:28:
         37:2d:c1:fb:d7:75:1a:19:f0:87:3b:4c:38:74:23:01:de:3b:
         c5:0e:be:6f:6b:df:43:54:30:5c:b0:ce:8e:df:ca:ff:07:3f:
         a7:e8:be:e3:bb:90:48:a8:56:82:86:25:18:3e:86:e6:00:51:
         61:2e:08:ef:84:2e:1b:a4:f6:f5:ec:24:d3:b9:a7:8e:6b:41:
         9d:51:31:16:7e:a2:77:8a:3a:d7:99:4e:d9:28:38:ee:e2:4c:
         cd:6c:4e:a4:ea:9a:6e:f5:67:12:5d:e5:f4:f3:9e:5e:66:ff:
         ed:f5:51:38:cb:d6:c7:db:2a:78:1e:b8:34:3c:91:85:dd:da:
         2d:27:83:10:0d:af:24:14:0a:31:96:96:ce:49:61:3f:9e:0e:
         66:34:7d:87:43:41:44:2f:fa:08:32:f7:f4:27:bf:c7:cc:b7:
         45:e8:e0:4e:4f:eb:21:49:ff:39:6a:c6:cc:b0:c9:09:78:ec:
         f9:55:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:06:24 2026 by rpki-client