Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
File:                     dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json)
Hash identifier:          PVKoAZdZF7HpCrgpXIP4TlUIBV0aIgg/UCCZ03HOZco=
Subject key identifier:   4F:90:26:DF:90:DA:A2:39:39:C4:BC:9E:E4:BD:82:49:D8:C8:8F:A1
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Certificate issuer:       /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
Manifest number:          0266
Signing time:             Wed 07 Oct 2026 02:33:31 +0000
Manifest this update:     Wed 07 Oct 2026 02:33:31 +0000
Manifest next update:     Wed 14 Oct 2026 02:33:31 +0000
Files and hashes:         1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: 83xmlavyLFOldcMcpmwOOCifRwZpGKRXoW8Hw87eu+k=)
                          2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: Rhg21vAkH25s4wjjiTY0OCatB1Takp0n6RNptpq99Dk=)
                          3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: JUt39muYmeNv/u+aov4ihdZ44u9U8v+STPTANHBtFY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
        Validity
            Not Before: Oct  7 02:33:31 2026 GMT
            Not After : Oct 14 02:33:31 2026 GMT
        Subject: CN=6ac5af7b-e367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:72:b0:76:9e:7c:08:65:54:b4:1c:4b:3d:
                    49:b7:af:fc:de:6c:35:19:d0:f5:e2:55:77:de:53:
                    63:5a:58:50:72:86:69:68:ab:a0:93:e1:13:d8:a3:
                    22:52:a1:61:b6:2a:6b:a5:5a:7b:1d:30:cd:66:e9:
                    af:13:c7:ee:0c:b5:a7:cb:52:81:24:ba:52:ec:eb:
                    07:d5:c8:e9:2d:e4:83:35:92:be:bf:55:fc:c1:fd:
                    1b:97:26:1e:ba:79:41:07:70:a7:23:38:f7:0e:89:
                    27:39:f6:3f:2b:45:1c:fc:bb:56:85:90:0f:e1:60:
                    26:41:2b:be:60:25:ed:11:37:7e:a0:20:06:a4:a7:
                    21:d5:9e:00:31:ac:56:11:3d:1e:4d:fb:de:c8:71:
                    6a:25:26:05:6b:2c:91:93:d0:67:3c:7e:09:cd:a2:
                    8c:63:cb:c2:e2:79:6d:59:69:12:b7:a9:9f:ae:49:
                    f8:65:2c:c7:8c:6b:32:c4:5e:07:41:77:56:10:19:
                    cf:60:08:62:20:96:f8:92:56:dc:e6:ca:fb:76:90:
                    b6:9e:a9:ad:ae:80:3e:ac:d6:b8:48:f3:35:54:19:
                    49:7a:98:bb:95:9a:95:45:a1:9a:3a:18:2c:96:3c:
                    f7:d5:b2:1e:60:d0:a5:95:ec:a0:01:8d:e3:55:49:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:26:DF:90:DA:A2:39:39:C4:BC:9E:E4:BD:82:49:D8:C8:8F:A1
            X509v3 Authority Key Identifier:
                keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:5a:ee:e2:4d:af:0a:8c:aa:ac:5a:3c:69:14:45:76:60:
         8d:eb:39:68:57:b8:3f:3a:f0:7f:82:11:50:37:09:61:21:dc:
         a8:06:52:03:ba:7b:6f:db:87:06:9e:b7:98:2b:be:31:1f:75:
         2f:13:93:62:8b:d5:4f:7c:c4:80:7f:44:8e:d8:52:ac:08:c3:
         f4:01:70:12:3a:52:b2:44:b0:08:75:c1:08:7d:6b:a2:40:e6:
         ff:70:6a:a9:95:d2:b0:f0:c4:3a:ad:be:89:0c:d7:6f:19:cf:
         ac:e4:6e:18:a6:ee:12:36:90:1f:88:03:41:d7:82:15:d9:69:
         c2:a5:81:a5:ba:49:6e:8b:93:fd:89:57:9d:9e:c1:63:aa:34:
         e7:85:60:a6:3f:87:d0:4b:ac:a1:23:dd:d5:11:84:d8:fc:04:
         c2:65:ae:d8:1d:c9:3a:76:83:d4:3b:f0:d9:bc:a7:4f:59:88:
         58:d6:8f:27:39:d1:2d:d7:58:cb:ef:1a:4f:70:d4:e4:c8:aa:
         09:d6:40:02:17:bb:03:cf:98:01:7a:b5:9f:93:cc:40:2f:f4:
         39:78:23:1e:1d:ac:16:6a:a4:00:3f:64:dc:03:a6:eb:a4:10:
         5b:98:f2:f2:15:24:1b:04:ae:11:57:30:bc:f2:38:dc:2d:5f:
         b3:6e:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:39:13 2026 by rpki-client