Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File:                     -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier:          qDjvjqX9rYp+v/bFMmuB3Va750xf87ixlXLJx5vtmac=
Subject key identifier:   3D:40:08:1A:80:DF:66:5C:E9:27:EF:4F:6F:64:52:89:D8:1E:2E:36
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer:       /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial:       072F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number:          0726
Signing time:             Mon 12 Oct 2026 22:11:03 +0000
Manifest this update:     Mon 12 Oct 2026 22:11:02 +0000
Manifest next update:     Mon 19 Oct 2026 22:11:02 +0000
Files and hashes:         1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: PpMPHb+x63safydPIDiYLdyGCuksmRsdokj3wE8ohhM=)
                          2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: nL3vp/CU21MSnng2C+poLgofAZHvrlCtCeZrfBZOSyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
                          rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839 (0x72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
        Validity
            Not Before: Oct 12 22:11:02 2026 GMT
            Not After : Oct 19 22:11:02 2026 GMT
        Subject: CN=6acd5af7-4f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:1b:70:17:11:f5:7d:d4:ef:11:ba:6d:ea:
                    37:7f:2a:df:1e:3f:44:ec:42:65:96:90:5a:7c:7b:
                    79:96:19:e3:ff:d2:76:ee:03:bb:0c:46:8c:d4:48:
                    d4:11:54:9b:20:85:e0:b7:7f:7b:f9:d2:c2:66:f3:
                    c4:02:57:eb:34:cf:c3:36:dd:31:df:c7:30:ff:dc:
                    05:47:19:85:aa:83:ba:4c:ee:d1:8a:9d:d4:3c:f2:
                    99:49:75:ee:f3:17:40:54:94:81:30:62:f9:9b:67:
                    fa:1d:5a:12:0e:bc:fa:6b:aa:2a:7f:e7:7e:48:6b:
                    2f:8b:e5:48:29:c4:d2:7f:ca:66:29:71:3c:6d:4f:
                    35:79:40:46:cf:59:ed:75:0f:fd:39:d8:c5:0d:e2:
                    95:1d:e1:21:71:bf:14:bf:b9:3f:21:d6:a5:d2:26:
                    1b:fc:10:c1:5d:99:e0:7d:f0:f9:65:ac:a6:ed:cd:
                    0b:55:57:bf:fc:79:3d:7f:21:96:1f:eb:5c:ff:4a:
                    59:b4:1d:1f:83:46:96:d3:97:59:da:53:94:b9:19:
                    29:25:8d:fa:d8:2f:c9:1a:af:1f:84:74:ff:6a:c3:
                    81:87:06:ea:b1:6f:c9:57:1b:ae:8d:46:84:30:6b:
                    c4:31:bf:c1:be:e5:04:a7:5f:fe:bc:69:93:2f:ab:
                    cc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:40:08:1A:80:DF:66:5C:E9:27:EF:4F:6F:64:52:89:D8:1E:2E:36
            X509v3 Authority Key Identifier:
                keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:5b:0f:f9:47:af:9e:05:f3:77:7e:14:e3:2f:5d:e3:fa:
         27:74:23:8f:bb:7f:1b:dc:3d:bf:f6:6f:cb:df:e5:cb:18:2a:
         3c:8a:90:9d:47:90:7d:c9:2e:76:af:2b:0e:1b:f4:ce:b5:d4:
         3a:1a:04:4d:70:29:cb:6d:67:aa:f2:93:39:ad:f2:fc:01:81:
         d5:4d:49:b9:28:0b:93:e6:8e:fb:21:c1:8d:22:e4:a9:b3:c1:
         18:dd:9e:3f:ca:85:a6:4f:b3:d5:b2:0d:24:d5:37:16:0b:15:
         e6:86:81:a7:88:76:51:5a:65:2c:ca:d3:2c:7c:08:52:40:7e:
         84:cd:7b:dc:4d:ff:4e:33:fb:75:40:5a:66:0d:d7:14:63:b5:
         1e:3b:11:d6:39:b3:b5:69:c6:b4:bb:02:ac:48:4c:fb:0e:4c:
         9d:9d:37:61:63:8a:da:2c:e3:d8:b9:26:a8:d2:15:c1:09:9e:
         82:5c:94:37:dc:f8:74:4d:c6:73:3f:f2:b3:9d:e0:6d:37:88:
         65:71:95:b2:57:96:43:71:ed:2b:a7:29:de:7a:34:0d:a2:c0:
         80:82:47:04:3e:7d:dc:01:6d:cd:44:61:83:4e:c3:a2:1c:23:
         23:38:ce:f2:e1:c7:ff:04:c0:d1:6c:7b:be:e1:ca:a7:02:ca:
         e2:eb:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:18:58 2026 by rpki-client