Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File:                     RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier:          RVzqlDto//Mh+z+2t7W2kId8lREJRqXSDD0uFViBiLI=
Subject key identifier:   A8:C9:1A:57:7C:C2:DE:D0:6B:47:CB:E7:40:5F:99:3D:A1:8F:CC:FC
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer:       /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number:          0187
Signing time:             Tue 13 Oct 2026 05:10:20 +0000
Manifest this update:     Tue 13 Oct 2026 05:10:19 +0000
Manifest next update:     Tue 20 Oct 2026 05:10:19 +0000
Files and hashes:         1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: dLPXOSLNPxUJyG830ccDZFqMi0TB+rZNO6IsOQ11neg=)
                          2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: IInDuG92MgBM/R/1sWNASwByUg/xqTFX5MGgVtF2hko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 05:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
        Validity
            Not Before: Oct 13 05:10:19 2026 GMT
            Not After : Oct 20 05:10:19 2026 GMT
        Subject: CN=6acdbd3b-7acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:9c:cb:0f:39:33:53:18:46:6d:19:61:51:
                    5f:47:9d:d2:97:fb:6b:41:c0:a6:fe:73:65:66:1f:
                    64:7d:23:aa:24:ea:ca:70:ed:27:27:79:53:c8:6c:
                    f3:14:e9:10:d9:00:fb:58:c2:7f:61:a2:00:13:b2:
                    cb:38:e0:4f:5b:d5:cf:14:92:0b:4d:34:69:b7:b9:
                    da:8b:e3:16:27:c7:38:4a:98:49:a8:1a:04:d6:68:
                    2b:7b:a9:64:3d:5b:59:85:01:ef:d8:3c:a8:01:5c:
                    a7:2b:5d:59:da:3e:f4:91:31:15:a4:78:7a:19:a0:
                    b4:dd:73:d7:50:69:93:c5:cd:30:01:05:cb:fb:04:
                    e0:c5:97:77:b2:ea:bc:b1:16:e8:4d:f9:2e:1d:99:
                    bb:9e:09:b9:9c:86:94:d7:d0:a4:5d:5a:e7:37:4f:
                    40:48:49:50:aa:31:72:d2:61:49:e6:23:8f:06:83:
                    41:af:63:33:1c:23:7f:89:9f:46:57:2c:e0:0a:1b:
                    df:13:b0:84:77:6b:1d:aa:a0:e0:48:bb:7c:19:33:
                    6e:65:23:e8:46:b2:f8:d6:a6:7a:cb:a2:f0:22:01:
                    c6:e0:a9:82:38:99:72:04:0e:ed:8b:cc:5a:d5:ba:
                    08:28:b0:2a:33:ea:e5:de:2c:d6:c1:e8:13:22:ce:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C9:1A:57:7C:C2:DE:D0:6B:47:CB:E7:40:5F:99:3D:A1:8F:CC:FC
            X509v3 Authority Key Identifier:
                keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:66:8d:38:8b:23:c4:95:e2:8e:b8:90:ac:f3:23:c8:5f:b4:
         e0:a8:c6:92:10:46:85:a0:7a:76:a7:51:73:d2:13:f6:dd:9a:
         0c:01:fc:7f:17:0f:4e:89:94:ed:2a:9e:be:a5:5b:9f:61:ff:
         e7:f0:0b:8c:05:56:29:0a:21:22:34:33:91:5f:3a:5d:d7:9e:
         49:e8:a9:a4:16:0e:4a:76:fc:1b:d1:b1:81:df:87:97:7e:9b:
         a3:d2:fe:21:59:93:44:35:1a:e0:69:f5:31:f0:c4:fd:df:fe:
         09:c2:55:86:64:14:9b:32:4d:91:04:35:54:aa:ae:6b:f4:cd:
         46:5d:1c:88:ee:06:69:a7:80:16:a7:13:f1:5a:af:12:08:ed:
         3c:84:b4:9b:52:d1:b5:3e:24:54:b3:54:63:d4:32:24:7f:0e:
         79:55:81:a2:c9:d6:b2:67:11:f6:6d:a8:dc:b3:dc:48:7b:b1:
         1c:e9:1f:03:35:e9:93:fa:7d:e5:5e:bf:f3:6f:c6:e4:b6:97:
         bf:ab:39:53:0f:61:21:33:ed:6a:35:1e:9c:d2:4e:f1:85:c8:
         b4:15:4a:83:8c:43:31:47:a0:a7:85:15:49:ac:28:16:78:38:
         e6:fe:bc:89:08:e7:d8:70:ec:02:36:fb:5b:1f:88:41:0e:df:
         36:53:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:07:39 2026 by rpki-client