Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File:                     T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier:          jYl/j/B734Z8vTSItlIdIaD9i1KTd16uPrk7YPXIzvc=
Subject key identifier:   D9:89:89:D7:54:B4:74:A9:D7:0F:70:9C:19:28:33:2F:22:50:70:58
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer:       /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial:       09A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number:          098E
Signing time:             Mon 26 Oct 2026 20:01:28 +0000
Manifest this update:     Mon 26 Oct 2026 20:01:27 +0000
Manifest next update:     Mon 02 Nov 2026 20:01:27 +0000
Files and hashes:         1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: Lb0PW2lcSidcjX4hP8HcN8yj9oUZakAPEKpehx18LL0=)
                          2: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=)
                          3: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464 (0x9a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
        Validity
            Not Before: Oct 26 20:01:27 2026 GMT
            Not After : Nov  2 20:01:27 2026 GMT
        Subject: CN=6adfb197-f040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:00:fe:57:b2:1c:f9:c6:6a:6a:d5:3d:ed:
                    c6:c8:c4:51:82:66:d2:0b:db:98:fd:4c:0b:bf:df:
                    9f:69:21:66:61:aa:af:fd:8c:cd:9b:6b:ca:77:bd:
                    7f:09:8d:2f:a1:a1:b6:87:41:61:46:c3:37:e8:45:
                    6d:42:9d:ab:91:c6:d5:0e:36:56:85:87:fe:e3:54:
                    2a:8f:19:40:b5:6d:dc:79:fa:c0:0c:cf:ae:87:63:
                    63:97:08:19:ec:a6:c2:16:52:61:ac:9f:2e:c0:a4:
                    0d:ca:eb:ee:b9:28:ea:d6:3d:87:41:cf:ee:bd:76:
                    62:7f:2b:3f:66:88:df:9b:44:c3:19:f1:61:9f:fe:
                    19:98:a4:de:67:73:6b:b1:5b:13:60:83:75:c9:7b:
                    85:c8:a6:a6:1c:df:c5:e0:bb:bd:f8:ae:72:1f:2f:
                    ef:c0:bf:94:eb:0c:7a:35:5a:31:f8:11:46:b4:ed:
                    40:e8:ee:df:0a:f9:4b:79:af:fa:4b:80:40:89:f4:
                    97:f2:90:52:f8:28:37:80:9c:65:d8:94:51:84:26:
                    47:00:9e:98:7a:a1:8e:c8:13:24:a4:72:80:de:49:
                    28:0d:76:c5:98:66:27:30:2e:72:dc:f8:7c:76:50:
                    90:e4:f3:44:08:06:f2:e4:da:5b:36:33:b9:64:31:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:89:89:D7:54:B4:74:A9:D7:0F:70:9C:19:28:33:2F:22:50:70:58
            X509v3 Authority Key Identifier:
                keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e6:23:9d:8e:77:51:65:35:41:16:0a:35:a6:4e:33:cd:99:
         b6:fb:20:ed:ea:9b:8d:27:d3:f6:e9:b3:8a:c7:d5:8b:3a:6f:
         1b:31:7c:e6:3a:d9:cc:43:fa:f2:bc:06:fb:59:fd:e0:b3:ef:
         3f:5b:4e:ff:8f:d5:fa:ff:30:8d:04:26:be:24:e9:44:1c:18:
         98:27:c8:10:2e:7f:00:19:cf:e1:14:a8:88:b7:1d:76:dd:82:
         e1:7d:63:e1:44:3b:e5:73:56:66:a8:e9:26:79:d0:18:39:cf:
         d3:ac:56:38:55:a4:18:34:75:64:68:d2:e1:43:15:88:3a:6a:
         67:24:2a:a8:17:1d:28:cd:00:f6:f5:30:42:ea:b5:d8:a2:6e:
         a0:1e:ad:1f:78:03:69:62:54:e9:80:38:04:b3:43:db:57:c7:
         f9:5b:3d:42:69:28:5c:ed:ea:1a:13:d4:69:54:08:6b:d6:d4:
         9b:8d:1a:9f:de:27:7c:c0:35:5e:c9:f3:4f:ce:9b:94:e0:7a:
         e4:46:ef:58:33:2b:5a:35:85:45:f3:d8:ca:0d:bd:ca:65:66:
         40:bf:73:23:5f:bb:b8:7f:2e:dd:27:8f:79:3f:dc:07:b5:71:
         d5:f9:d0:f4:53:dc:c5:ca:cd:00:74:fa:bf:e7:36:f4:a3:03:
         7a:54:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:56 2026 by rpki-client