Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File:                     1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier:          iVv4d8js6Yi6g8RG1HEV4S0fB0BVLYB9Q6DNlPYBKuQ=
Subject key identifier:   42:B0:70:D8:F6:B7:CB:E5:2D:24:41:3A:52:BB:F0:40:81:01:9C:F1
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer:       /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial:       0688
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number:          0681
Signing time:             Tue 06 Oct 2026 22:40:10 +0000
Manifest this update:     Tue 06 Oct 2026 22:40:09 +0000
Manifest next update:     Tue 13 Oct 2026 22:40:09 +0000
Files and hashes:         1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: Hrs7kMNN4jl7t8HLRFEGxcetq4VAAEauChWaWa0JjOM=)
                          2: C23617A8581011F1A51D608BA0833773.roa (hash: sCsgKLK+hoKhomlVo1jhxD2dTFhjbsrP7RzMdHZeDKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
        Validity
            Not Before: Oct  6 22:40:09 2026 GMT
            Not After : Oct 13 22:40:09 2026 GMT
        Subject: CN=6ac578ca-faef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:dc:0e:91:8c:a2:0d:81:15:b2:20:64:78:
                    5e:26:0f:73:48:ae:ee:68:9e:87:3d:ca:6c:74:9e:
                    bd:80:3d:d6:37:f0:45:e8:c4:37:bf:19:a9:d3:72:
                    46:12:d7:45:f8:f8:82:75:ab:87:29:27:5b:fa:b8:
                    fe:78:17:99:d6:9c:59:63:cf:fe:2a:94:d4:da:52:
                    b1:5a:bb:fc:8a:e8:c2:f2:40:0b:e5:0a:d6:9c:ee:
                    c9:6c:3e:69:7b:f3:49:1b:91:9d:47:ed:9f:96:7c:
                    e5:09:85:4a:38:29:1c:70:03:6c:be:b4:8a:24:b4:
                    7c:e4:8c:e9:15:46:6d:03:ee:0b:84:69:83:6d:0c:
                    6a:4b:7f:0f:10:7a:41:86:44:60:b7:8f:0f:a6:5a:
                    eb:65:bc:9f:0c:d3:41:0d:ab:e5:a4:4f:cb:9e:9f:
                    60:3e:90:d0:a6:b8:83:c5:a2:33:6e:03:1e:9f:7b:
                    91:ea:42:8d:09:5b:2b:fd:9c:fb:e7:a8:17:b7:5e:
                    e9:6b:83:f0:e3:03:91:6a:d0:93:cb:79:4f:cb:63:
                    10:e5:fd:e5:8d:36:b9:90:13:d8:97:ee:86:a8:19:
                    f6:3a:0c:e0:44:43:f8:4b:c0:34:06:8d:9c:83:48:
                    ef:cb:fa:1c:1d:e5:53:e9:c4:a1:6e:2e:17:4e:c6:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:70:D8:F6:B7:CB:E5:2D:24:41:3A:52:BB:F0:40:81:01:9C:F1
            X509v3 Authority Key Identifier:
                keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f5:4f:df:ed:20:78:15:46:56:2f:35:33:7d:aa:67:00:90:
         18:ed:44:f6:81:33:9a:01:4d:da:19:0b:04:9b:c1:e3:eb:f3:
         2c:4f:57:f4:16:9b:df:f3:64:72:97:9a:e3:ee:f9:ed:a6:e8:
         4c:bf:99:26:d2:f4:95:d3:fb:f0:19:c1:c3:be:0f:27:81:68:
         cd:99:37:10:d0:10:06:34:d9:0c:31:c6:a4:f3:bd:2b:8e:f4:
         c6:bb:82:54:2f:8a:b9:3c:96:e2:37:b0:5d:14:19:a5:87:03:
         c4:fd:99:d3:91:93:ba:ce:bf:ca:14:e6:46:85:f3:10:be:7f:
         96:cc:49:56:4d:02:84:a0:83:b0:0c:dc:3b:20:23:a5:3f:88:
         d8:26:dd:ff:df:fe:3b:cd:f2:d3:d6:c3:e0:e9:51:c0:ca:b5:
         0a:12:ed:1a:ed:b0:4e:6b:7d:eb:23:ac:c4:54:13:9e:a0:96:
         0d:61:50:8e:6e:ab:a5:f9:73:9c:77:ad:a1:bf:42:8c:53:03:
         55:6b:15:c6:cf:57:ca:9e:b9:7d:bf:d1:da:32:18:76:6e:26:
         83:9f:40:e4:da:83:5a:61:e7:d8:39:8e:41:3e:55:2f:e2:4c:
         6a:40:e6:52:64:b7:b5:21:ab:ad:cb:ec:ba:c7:36:84:d4:87:
         c4:ba:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:16:14 2026 by rpki-client