Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File:                     UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier:          lsGO3Ownr1BnJcpihv8WSB7TRDhfn1ii6PO3mJN6wN0=
Subject key identifier:   1D:3C:3D:1E:D0:7A:2F:91:04:2A:2F:68:7E:48:72:2C:D2:8E:E6:21
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number:          06FC
Signing time:             Wed 04 Nov 2026 22:33:50 +0000
Manifest this update:     Wed 04 Nov 2026 22:33:50 +0000
Manifest next update:     Wed 11 Nov 2026 22:33:50 +0000
Files and hashes:         1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: Dr6m8Gb5H7RnimPhVqGfVuyT1cyagc558TatxjUZiME=)
                          2: CA2056AEA5F911F1863AFD4E4011F970.roa (hash: itjkc0sV7heJhjpLLMb7teKe82pbw3263Tb2aZzAyS8=)
                          3: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
                          4: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
                          5: 03A116B2A53111F1AEF72B144211F970.roa (hash: KNz8Cr2ZY2lOPgvrxVkMGeRTemwZCfXtM04vURqUd9M=)
                          6: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
                          7: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
                          8: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 22:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: Nov  4 22:33:50 2026 GMT
            Not After : Nov 11 22:33:50 2026 GMT
        Subject: CN=6aebb2ce-e3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:bd:c4:3e:de:00:ae:46:21:7b:06:06:ec:
                    27:e8:ab:c6:0d:e9:68:14:df:89:d0:dc:21:84:7c:
                    54:ce:30:1e:cf:71:64:87:4c:01:c4:a2:5f:85:fa:
                    9e:1b:fa:4b:12:e7:6f:a5:48:14:de:aa:0d:3a:6a:
                    90:eb:c8:c6:c2:2a:ce:a8:6e:31:20:e4:3e:32:79:
                    b6:7d:5a:da:51:63:dc:f5:04:fb:ad:45:ee:8d:ba:
                    05:22:a5:da:71:20:d5:da:2f:6d:ce:c2:78:29:0b:
                    e8:4a:47:6c:95:57:39:6b:53:7b:c0:6c:0a:84:da:
                    5e:d4:de:9e:a6:86:fb:89:c3:03:6c:e4:21:04:c1:
                    c2:80:f5:6b:0f:67:f2:4e:94:31:6e:0d:46:7e:d2:
                    11:ee:9c:de:22:2f:44:11:97:8c:9b:65:b9:57:54:
                    c3:55:9a:7b:d5:d5:f7:33:b2:4d:85:cf:01:aa:b1:
                    58:fe:9a:e6:13:22:05:c8:e3:80:71:f4:d7:5b:0b:
                    67:3c:a6:21:dd:99:5a:d6:5e:7f:b7:c0:69:ce:d9:
                    54:e4:b2:b7:bd:a9:65:d5:ba:1b:f0:c7:91:38:3e:
                    94:a8:ee:3d:2e:aa:f9:38:04:c4:fa:12:f5:c5:f9:
                    ee:25:f5:86:e1:a6:a5:d2:7f:a7:93:9a:54:f6:46:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:3D:1E:D0:7A:2F:91:04:2A:2F:68:7E:48:72:2C:D2:8E:E6:21
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:6c:0c:a3:96:6b:f1:b5:6b:30:20:e4:13:3a:f4:be:10:
         79:93:84:76:95:33:2f:a7:c9:51:9a:48:ba:35:81:a7:1b:86:
         ee:73:bb:87:f5:d8:4e:d6:1a:88:a9:14:bf:b2:39:82:61:57:
         7a:3b:21:9d:c8:8e:84:a4:b1:8d:e2:d7:6b:7e:7a:c3:44:46:
         44:5b:79:30:9b:ca:89:f6:96:9e:b9:79:b4:9b:88:8a:57:8b:
         41:87:54:4a:ff:ec:25:81:5e:8a:14:a6:ef:3e:67:6e:ab:9d:
         1f:98:ba:11:76:7a:44:26:cd:60:8e:13:6b:d3:b7:4d:57:a2:
         78:09:c9:db:db:04:20:b4:4f:be:23:71:d9:23:f1:4d:71:c2:
         46:15:58:b8:40:7c:2d:fc:21:19:75:46:66:e9:56:69:d0:29:
         1e:4e:b7:c4:b2:a4:ba:c2:cd:d5:ac:d5:67:ce:e5:56:b0:36:
         ab:a4:81:8f:c7:e3:1b:04:d6:49:f9:a6:ed:df:05:20:ab:c3:
         c2:0c:2c:87:2f:01:8a:d5:9e:af:dd:f8:1e:27:67:0d:f2:00:
         5f:40:41:aa:05:db:4e:16:4b:4e:7a:bd:e7:c0:28:01:94:5d:
         55:ce:19:2e:cb:f8:a6:88:13:a7:d0:14:d9:21:bd:b6:37:28:
         34:83:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:41:13 2026 by rpki-client