Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          HTtPISOM2MYPXCqUwr8zQQ0nNq+Y7A+CZx2rc5yQCfA=
Subject key identifier:   20:BD:C5:42:67:D3:FD:DF:07:53:16:A7:E2:D9:2D:A7:D1:58:E6:56
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       02FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          02DF
Signing time:             Sun 11 Oct 2026 01:42:02 +0000
Manifest this update:     Sun 11 Oct 2026 01:42:01 +0000
Manifest next update:     Sun 18 Oct 2026 01:42:01 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: nbanscD67tJ4EzUnVxDlm3bmYF4oY3Becb8EK94y8RI=)
                          2: o-Sj-H8a3T_Xvk0R_FCyCrdRMvE.asa (hash: y3EFp6J5onJ0tD3nTztBMeEPywK5QBWrYlx3jpacAK8=)
                          3: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: HngBFWxCeGdGGI7K1NehqNXwpSksJGC331CYSdk3V3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Oct 11 01:42:01 2026 GMT
            Not After : Oct 18 01:42:01 2026 GMT
        Subject: CN=6acae96a-3120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5c:5a:1b:2b:7f:4c:97:62:27:53:57:50:20:
                    55:df:24:c5:e6:de:15:00:da:66:42:ee:e5:4f:56:
                    27:f8:97:7c:e4:8c:a8:ba:3e:46:e7:32:a5:29:1b:
                    0c:f9:d9:15:d7:01:53:53:cd:53:4a:8d:83:f8:6c:
                    de:27:b0:20:67:33:29:0d:86:b8:6d:ff:8a:d1:f1:
                    d2:4e:e1:b2:f5:3c:ff:95:52:a1:3d:61:00:99:13:
                    1a:e7:12:cc:4c:c4:c1:91:77:ea:d1:c6:3a:78:0f:
                    16:d7:6a:b6:65:07:8d:26:f4:1a:af:a2:21:50:68:
                    00:96:bc:6a:b2:fd:9e:1d:86:4b:f4:99:ab:22:03:
                    c8:87:9b:87:56:c1:fd:e7:30:91:9e:03:58:81:19:
                    fd:c5:53:0b:bb:ea:f7:2a:8b:91:39:3e:14:fb:3b:
                    83:31:9d:3f:f8:25:3d:e6:b8:88:60:b3:17:40:ba:
                    0a:ea:e9:d5:f3:69:ca:41:18:59:e4:6a:80:b6:85:
                    29:58:5c:d2:0a:17:c2:96:43:a0:17:30:41:d0:70:
                    c4:93:df:2d:6f:6b:7f:48:74:62:cb:b2:a9:b2:97:
                    20:a3:ac:17:a2:23:73:26:54:1f:20:57:ea:dd:ab:
                    ac:03:84:a5:01:9b:34:ca:87:e6:a4:f9:6f:68:f1:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:C5:42:67:D3:FD:DF:07:53:16:A7:E2:D9:2D:A7:D1:58:E6:56
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:c1:52:b6:4d:d5:d3:c2:30:ff:3e:ee:72:a8:2a:cb:77:
         0b:12:5d:2e:a4:8f:b7:63:bc:b0:04:9f:9e:bb:39:ac:2a:2c:
         06:4d:8e:b9:df:98:4a:a8:55:42:68:97:ca:87:c7:71:cc:e7:
         a3:36:1e:23:47:2f:68:89:b5:d1:78:7f:74:f1:28:69:79:97:
         7d:81:a9:b3:a2:b8:b5:1a:ca:c6:46:b6:07:47:8b:29:b0:96:
         c7:2c:49:8c:58:a0:76:97:bd:10:2a:fa:42:be:45:ca:9d:aa:
         b4:26:b0:28:f7:93:ad:f7:e3:fa:30:d3:5e:d4:18:e4:0d:f6:
         c8:dd:cc:18:d7:de:a4:24:50:c7:5a:71:9b:bd:33:1e:c7:a5:
         5f:5f:9f:56:d0:28:65:75:61:59:07:54:3e:02:ac:79:dd:63:
         45:62:e2:7e:65:c0:9b:2f:a6:f4:d3:fd:d7:18:92:62:3e:3d:
         77:58:c1:bd:ab:10:ac:df:5d:61:ea:a1:b1:bd:6e:e9:b6:9a:
         48:3e:9e:73:6e:7a:7a:f4:bf:ee:53:ae:bc:cc:03:db:32:92:
         30:c4:9c:11:94:87:c5:29:e3:17:21:76:61:84:c4:46:7c:c7:
         46:be:e8:dc:23:6c:29:6f:43:17:e8:dc:56:aa:a3:ab:09:f9:
         49:5b:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:59:25 2026 by rpki-client