Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
File:                     mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json)
Hash identifier:          3O9TBay+ATamV4Uk4CmfJt4Xl54OA0LCNYcXiirxB2M=
Subject key identifier:   9D:73:F0:5B:E8:07:C2:56:2C:23:8C:67:6E:3E:DB:07:01:0C:99:1B
Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
Certificate issuer:       /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Certificate serial:       02B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
Manifest number:          02A8
Signing time:             Sun 11 Oct 2026 01:59:57 +0000
Manifest this update:     Sun 11 Oct 2026 01:59:57 +0000
Manifest next update:     Sun 18 Oct 2026 01:59:57 +0000
Files and hashes:         1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: tGLf9DFpa0gAlFV7pJnCi5DcpUfefzhoL0QZhdGwgkg=)
                          2: 8186A634879311F196D38C895411F970.roa (hash: J1kY9xoNQfqvhMZxfn/qW5nnqxY8gupzwRhsyrrKayE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
                          rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
        Validity
            Not Before: Oct 11 01:59:57 2026 GMT
            Not After : Oct 18 01:59:57 2026 GMT
        Subject: CN=6acaed9d-6fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:95:23:ce:25:9a:b4:04:cf:be:5d:02:88:
                    6f:aa:3a:88:78:4c:ac:b2:36:43:ba:2b:2d:8f:f8:
                    2f:52:0d:72:49:97:c9:72:74:d3:6a:69:65:c7:07:
                    47:b2:86:ef:c4:70:60:6c:fa:7f:ff:f4:9e:f9:02:
                    82:2a:5b:d5:58:d5:d3:b8:1a:30:2c:23:1f:7a:91:
                    7d:f5:72:b3:b6:ed:fe:3f:29:8d:32:83:37:7e:15:
                    fa:51:81:7d:8c:d4:2d:28:a3:8d:61:65:08:6f:fd:
                    b2:4b:a6:12:79:aa:52:5d:40:82:f5:c5:45:d7:24:
                    08:89:d9:66:26:f5:3b:3b:f2:20:2c:b7:4d:b5:04:
                    64:67:dc:3a:f4:0f:77:ce:13:8e:9d:27:db:c7:6f:
                    b0:88:26:8b:2f:f8:b6:ad:f9:51:73:06:58:f4:40:
                    4a:ef:23:d5:41:ab:2a:99:22:84:c9:07:84:04:3f:
                    f4:c6:5b:23:cc:2e:c5:dc:fe:ca:ec:3f:02:24:3b:
                    47:ee:46:30:4e:e8:d9:fc:b7:db:ef:c2:15:3d:37:
                    e2:a1:6e:30:03:38:4b:54:22:6f:de:dc:fd:18:9b:
                    b0:4d:8f:89:fd:e5:b4:43:c9:6f:b1:9b:22:10:2e:
                    7e:f2:c0:84:3d:bd:19:69:1f:f3:67:a8:d3:4b:ff:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:F0:5B:E8:07:C2:56:2C:23:8C:67:6E:3E:DB:07:01:0C:99:1B
            X509v3 Authority Key Identifier:
                keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:c1:11:15:e9:28:71:15:b4:7f:56:cd:b4:d6:56:19:6c:
         e1:ea:71:4f:e0:48:18:1e:56:de:92:ef:f6:25:1e:ca:86:89:
         13:33:e0:86:b2:83:4a:52:b4:0c:0f:c6:0c:63:dc:4b:e6:3a:
         6f:f2:e3:bb:b1:db:48:dc:d1:80:16:ce:c6:1f:96:5a:f5:47:
         04:cc:b9:5e:0e:20:9a:63:c4:cf:d7:3f:82:5b:04:74:54:b5:
         ad:bb:b7:80:5e:7f:bd:00:b9:33:71:89:22:6e:38:af:37:b2:
         8b:dc:eb:6c:40:eb:cc:36:9e:d1:61:ff:d2:f7:0e:c9:2c:2b:
         60:75:9a:4e:34:4b:07:44:48:25:e1:af:04:27:54:c0:46:8a:
         cd:bf:d9:b5:d6:c5:73:5f:32:2c:fd:e6:c1:b2:6f:0a:62:a7:
         c5:68:af:cf:5a:0f:2b:66:ec:2d:97:be:8d:ea:c9:3c:e1:0a:
         13:3a:b8:3f:86:85:c0:99:87:b8:89:58:d4:99:5e:40:04:6a:
         bd:84:e2:06:72:a8:7f:69:2e:ef:c9:f7:db:07:95:2f:e1:72:
         70:29:f2:fb:1c:02:88:9b:77:c0:e5:23:28:fc:e7:01:50:22:
         b7:91:0f:84:bf:a3:ff:56:07:0c:98:96:06:e3:77:51:e1:b1:
         a9:9d:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:28:02 2026 by rpki-client