Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
File:                     mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json)
Hash identifier:          XhJNqMyyMQzwsrGnH9P4OZfEVxkqHdyWPMc6Gm0Qgnc=
Subject key identifier:   A3:A8:4D:57:99:4D:E3:39:42:2F:C2:56:4B:25:E7:1C:21:3E:A1:6B
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Certificate issuer:       /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial:       059C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
Manifest number:          0588
Signing time:             Tue 06 Oct 2026 23:25:39 +0000
Manifest this update:     Tue 06 Oct 2026 23:25:39 +0000
Manifest next update:     Tue 13 Oct 2026 23:25:39 +0000
Files and hashes:         1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: hCZPkh7K4+Pjp6FEZqV/3vtPEhzcXHjqlrcu12pgtuw=)
                          2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=)
                          3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
                          rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
        Validity
            Not Before: Oct  6 23:25:39 2026 GMT
            Not After : Oct 13 23:25:39 2026 GMT
        Subject: CN=6ac58373-3be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:30:98:13:70:5c:c3:65:5a:50:81:95:6d:
                    6b:af:c5:2d:14:fa:71:14:e8:91:65:7f:cc:2d:78:
                    60:53:40:f7:8c:db:ab:2c:12:14:6b:40:c9:66:46:
                    4a:49:f6:6e:5a:9a:94:08:df:c3:f7:d2:e2:3a:22:
                    8c:c3:82:72:94:e9:8f:19:e8:11:ed:c7:fe:fb:52:
                    60:85:36:63:01:5e:7d:b8:cc:16:ed:36:3b:12:dc:
                    a7:8c:11:6e:bc:af:c2:54:02:f1:06:5c:c4:b5:9d:
                    9a:9a:88:1c:f6:35:2d:78:08:85:88:8f:67:8e:6c:
                    04:59:d9:7e:15:c3:a6:16:b2:04:7e:e1:a0:26:38:
                    7f:b2:11:3e:a0:5d:91:a1:ed:d8:3a:5d:98:48:ec:
                    38:70:25:be:3d:ad:bf:08:21:f5:7c:d2:cc:60:e4:
                    f5:a9:b7:b0:01:a6:7d:8a:30:65:0e:84:fa:ab:74:
                    51:97:0f:5d:b5:aa:6a:0e:3d:49:ab:3b:9d:de:0e:
                    f7:de:b0:69:a6:85:c6:cb:df:99:60:3e:dd:54:bc:
                    12:51:b8:a4:58:64:8d:3f:3f:67:8e:90:67:55:80:
                    f1:27:ca:a3:30:3a:7e:2d:56:53:e1:d2:52:08:61:
                    82:ae:23:0b:73:0d:08:02:8e:72:cb:0d:fb:91:77:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A8:4D:57:99:4D:E3:39:42:2F:C2:56:4B:25:E7:1C:21:3E:A1:6B
            X509v3 Authority Key Identifier:
                keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:00:ed:e7:1f:33:88:03:cd:46:b6:2b:7d:97:49:26:7f:
         6a:c9:1e:8c:61:2a:62:3e:6a:86:ed:1b:cb:35:b6:56:eb:e9:
         00:96:63:b5:06:79:06:13:56:28:13:b0:f2:8a:06:31:02:ed:
         12:cf:b1:a3:c7:0b:0d:f3:65:5a:b2:33:47:20:bc:14:eb:50:
         58:ea:48:7f:bc:63:30:69:d7:a1:3e:e7:03:f5:54:29:26:fc:
         83:54:6f:8a:65:c8:cb:a6:61:05:db:c0:04:ec:37:ad:e7:0a:
         43:0d:ef:75:36:be:26:0c:ae:70:8d:42:85:0b:1e:28:34:fc:
         50:5a:0a:e6:8e:56:65:c1:5c:22:9e:98:90:0f:b3:50:4c:94:
         d9:fe:06:64:e3:50:a9:cd:16:06:9c:31:1e:e1:13:5c:66:e4:
         d0:99:b3:9b:15:cf:01:22:54:5d:32:f2:d9:b3:89:7e:e7:17:
         24:f8:2c:f7:b0:68:8b:28:a7:e4:02:b9:52:37:eb:e7:f4:db:
         26:7f:d0:ec:32:9a:0a:ee:9a:e0:75:a1:0f:72:5c:43:65:9c:
         60:15:cc:16:c9:03:b4:65:7b:50:74:38:3e:df:cd:52:92:7a:
         96:9f:88:83:14:7d:11:4b:af:c7:c3:80:47:a7:f4:b1:00:53:
         4d:81:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:53:32 2026 by rpki-client