Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
File:                     4vp6LLwyeRiAQsNBPdniSXzUndI.mft (raw, json)
Hash identifier:          /kRlrpA5F81/DaNvE3r7tRlMO+5qQ8fumvLndh81mO8=
Subject key identifier:   E3:B0:F7:DD:B0:6A:F6:25:CD:AA:80:6F:97:E0:2C:2D:00:91:68:01
Authority key identifier: E2:FA:7A:2C:BC:32:79:18:80:42:C3:41:3D:D9:E2:49:7C:D4:9D:D2
Certificate issuer:       /CN=A91D2B4A/serialNumber=E2FA7A2CBC3279188042C3413DD9E2497CD49DD2
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
Manifest number:          2A
Signing time:             Fri 09 Oct 2026 09:33:18 +0000
Manifest this update:     Fri 09 Oct 2026 09:33:18 +0000
Manifest next update:     Fri 16 Oct 2026 09:33:18 +0000
Files and hashes:         1: 4vp6LLwyeRiAQsNBPdniSXzUndI.crl (hash: Fe56idlEK8dZGWYqvi9+GZV5APj5BVmdDe2Tlql4ltU=)
                          2: BD6C0B8A868011F1865E2E2167A30FBC.roa (hash: R++XQHgwrrHwUQ5zUbzG8m/3mR3SUeHymJ6MUMUg2fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B4A, serialNumber=E2FA7A2CBC3279188042C3413DD9E2497CD49DD2
        Validity
            Not Before: Oct  9 09:33:18 2026 GMT
            Not After : Oct 16 09:33:18 2026 GMT
        Subject: CN=6ac8b4de-830d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:c1:d1:a9:3e:83:8a:03:a1:58:07:db:3b:
                    e6:b5:c9:d3:93:aa:de:b3:2a:6a:9e:ad:b6:35:3f:
                    61:44:2b:b3:35:e8:04:f5:2a:b5:c1:f7:0e:7f:14:
                    1a:80:2c:99:2d:47:a2:92:8a:de:62:65:6b:05:e0:
                    41:68:b4:49:fa:bc:e9:48:4a:74:94:13:af:c1:ae:
                    97:57:44:ee:a0:a6:9f:b2:bf:3e:5d:7d:5f:14:ec:
                    be:d9:e1:45:0a:8f:44:14:31:db:9d:41:22:9e:5d:
                    bb:0d:7f:e4:82:eb:34:31:6f:ad:5d:f9:0c:f3:85:
                    d9:62:e8:1f:aa:23:ee:95:c4:2f:8e:ce:44:91:c0:
                    6e:6d:86:1e:81:90:72:50:7e:ee:34:d2:fb:f5:a2:
                    8a:61:c3:55:be:47:e5:97:37:5e:6d:81:f6:42:f6:
                    26:1c:b6:b3:ec:6f:af:59:0a:c6:9b:73:2e:52:01:
                    a2:ad:98:d4:6e:32:ec:fe:24:ec:f5:23:a2:a9:9f:
                    e2:68:e5:e7:70:dd:91:d9:55:d4:50:81:76:95:a4:
                    1b:df:bf:96:bc:d8:a6:79:4b:37:cd:d4:70:c2:74:
                    a9:68:f5:ba:60:82:5e:1d:c2:78:20:66:87:2e:8d:
                    68:2d:81:bc:72:6c:36:17:16:07:ff:a9:c0:9f:fe:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B0:F7:DD:B0:6A:F6:25:CD:AA:80:6F:97:E0:2C:2D:00:91:68:01
            X509v3 Authority Key Identifier:
                keyid:E2:FA:7A:2C:BC:32:79:18:80:42:C3:41:3D:D9:E2:49:7C:D4:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vp6LLwyeRiAQsNBPdniSXzUndI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/62165D9E868011F19D1E7A5F66A30FBC/4vp6LLwyeRiAQsNBPdniSXzUndI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b4:6e:7e:da:e3:89:4d:da:4c:bc:b2:94:77:bd:de:36:a3:
         b2:fd:9d:88:a9:df:75:a1:cb:3c:0a:62:46:15:97:1e:14:31:
         32:5d:74:7c:1e:7b:8b:01:69:79:5c:8e:98:53:a5:8d:71:2c:
         42:8f:ad:dd:db:e4:5d:d3:77:7b:24:54:fc:9e:0e:4f:94:9f:
         d3:16:76:02:e5:cf:e4:c6:3b:fe:cd:00:b1:d9:1c:4c:9e:f2:
         1e:bf:98:4c:c5:c1:4c:3a:0d:02:1b:4a:4c:ff:5c:08:b6:4a:
         5f:cd:3c:dd:6c:ad:8a:a1:c4:cf:37:30:55:95:42:ca:66:37:
         37:d0:b3:38:e4:fd:af:0f:27:be:10:bc:f2:ef:59:4e:24:2c:
         12:c9:88:cc:3a:14:e8:68:33:a0:c7:04:d0:97:13:0f:0f:80:
         bd:50:6d:8e:15:d1:1d:4d:ea:1c:7d:80:ca:d8:5e:2b:8a:d5:
         2d:bc:38:e4:9a:f8:07:fb:d0:c8:fa:06:b5:ce:f0:05:4a:98:
         51:0b:1e:4f:83:8a:c8:ce:71:6d:30:43:b4:bd:05:94:67:08:
         be:28:7f:c8:bd:94:29:ce:3c:83:b4:3d:0a:bb:e6:1b:44:99:
         86:33:89:dc:ee:35:b1:35:61:1d:b4:75:d0:8e:95:9e:4f:ed:
         a1:f1:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:46:31 2026 by rpki-client