Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File:                     v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier:          4TORpq2qELTEEXkYVK02VCrcWPa1v4MrUmTLodbi36E=
Subject key identifier:   7E:16:D5:34:95:B0:86:E4:75:C8:59:E4:C8:B8:25:DD:83:96:18:DD
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer:       /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial:       0756
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number:          072B
Signing time:             Wed 28 Oct 2026 22:20:32 +0000
Manifest this update:     Wed 28 Oct 2026 22:20:32 +0000
Manifest next update:     Wed 04 Nov 2026 22:20:32 +0000
Files and hashes:         1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: lFtuYtnUVsS0toIajicBI5jE1v21Bof+xSrUQ62mYnU=)
                          2: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: S0fZW2dgUJeGAm9ytfhirRt94xu3NkvG3zNOfvuS6tg=)
                          3: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: w3+aZlQ2RBmGjxz4SlkYvG+q8BQVGDzpFhvPTfzKDVY=)
                          4: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: Wf0tkeHPs4IB8mfGOri8fMJK0QaqR5URQJU73Sfpr+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
                          rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 22:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
        Validity
            Not Before: Oct 28 22:20:32 2026 GMT
            Not After : Nov  4 22:20:32 2026 GMT
        Subject: CN=6ae27530-ecd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:ce:a2:ec:19:05:a3:b4:3a:e6:c8:7a:26:
                    d2:c0:15:fb:dd:aa:c5:66:d8:65:b6:7d:09:e3:29:
                    78:ea:19:45:bc:9c:96:95:a5:d5:55:d7:8e:57:18:
                    9b:77:c0:6b:79:85:48:04:51:94:b0:df:94:42:58:
                    76:95:ef:55:1f:c9:5a:bd:3a:f7:69:02:7c:0f:cc:
                    12:7a:e5:7e:8d:38:1a:d6:a2:cb:bd:09:87:c1:9b:
                    6e:bc:6a:02:9b:43:f1:b1:07:8d:7f:b8:86:6c:df:
                    8a:7b:91:1c:df:72:4f:36:6b:3b:4f:fd:74:d1:bf:
                    bd:f3:c4:04:53:88:cd:8b:ef:a9:c7:1b:a3:69:2a:
                    c9:1f:d7:30:e2:e0:4b:70:6b:1a:1a:dd:ae:92:de:
                    53:ee:ee:77:68:5a:9d:eb:79:a8:22:7b:16:18:cc:
                    55:75:a1:a8:80:8c:c1:4e:6b:16:13:36:9e:ef:70:
                    21:0c:e6:24:04:bd:ff:8d:fb:01:31:6f:b9:00:53:
                    eb:e6:ec:da:32:47:3e:9d:fb:a2:4b:7f:3d:61:49:
                    92:d7:14:d5:07:b7:1a:82:00:f8:91:09:98:1e:e0:
                    38:25:c4:12:3b:7b:1e:66:71:6f:41:8b:4c:0d:5c:
                    6b:fb:7b:6e:7e:1f:9f:dd:02:18:ae:40:58:1d:9b:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:D5:34:95:B0:86:E4:75:C8:59:E4:C8:B8:25:DD:83:96:18:DD
            X509v3 Authority Key Identifier:
                keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:13:d1:ba:52:41:51:2c:8c:9e:f8:b0:d9:2b:90:f9:b7:
         db:f4:cf:18:0b:01:4b:e3:c7:c5:f1:22:46:bb:b8:62:18:24:
         02:67:48:0b:f2:b5:0e:a3:e1:1b:8f:41:8d:e2:79:55:4f:e4:
         4d:ac:33:dd:ba:93:d3:1b:09:36:a6:f7:bc:4e:9f:4c:5b:8f:
         2f:34:d1:56:90:0c:b7:80:7b:e3:6b:69:18:02:c2:3b:ca:a8:
         37:cc:39:77:a4:72:7a:f8:21:17:57:07:fb:33:71:82:3e:75:
         8a:eb:7f:77:8f:27:08:85:39:c1:f4:b0:7d:81:ac:25:3d:33:
         4b:e0:86:6e:46:62:e3:14:94:a3:24:ce:86:86:f1:31:5b:14:
         ae:0f:55:3f:7c:2e:96:de:32:e8:1c:ad:30:b5:ba:b8:22:c4:
         a1:03:7c:35:f3:7b:f4:ee:2b:47:a9:ea:06:53:7a:58:94:e4:
         a3:f8:f2:29:21:b9:01:5b:ab:33:b4:22:72:85:f5:43:fd:6f:
         b2:6f:84:bd:aa:43:16:83:18:58:62:24:5a:b8:e4:9c:1c:a6:
         f6:e3:73:f2:f7:08:f5:e5:ed:eb:9d:95:59:a1:28:bc:76:e9:
         0e:36:3a:19:7f:14:a0:ab:f0:23:b3:e6:92:6f:a5:28:1d:56:
         2d:a0:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:47:03 2026 by rpki-client