Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File:                     8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier:          XOyG6o1nahylWYbSWkAi5IjvpZMg/8KZ6XSKHQlQoM0=
Subject key identifier:   03:39:EC:7A:43:8C:88:BF:82:3A:8B:8F:5F:4F:E2:56:54:1A:2E:F5
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer:       /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number:          84
Signing time:             Sat 31 Oct 2026 08:09:11 +0000
Manifest this update:     Sat 31 Oct 2026 08:09:10 +0000
Manifest next update:     Sat 07 Nov 2026 08:09:10 +0000
Files and hashes:         1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: au0KPjAh7O1er5Dvhc60kRVbJ+RJ2X2G/2QwqNT/CTk=)
                          2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 08:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
        Validity
            Not Before: Oct 31 08:09:10 2026 GMT
            Not After : Nov  7 08:09:10 2026 GMT
        Subject: CN=6ae5a226-bf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:32:e5:1f:50:17:5c:4a:6a:49:d8:b7:59:
                    94:af:90:6f:40:f7:55:85:7c:5d:ab:1b:db:63:bf:
                    8e:6d:c2:fb:a9:41:48:9d:3e:da:66:bc:17:e0:4a:
                    a6:a4:c7:f0:7f:5d:46:0a:2e:66:f0:ba:fd:88:70:
                    3d:ea:41:84:d9:71:b1:5e:3d:05:f0:98:4c:34:80:
                    1c:32:a5:df:2a:c3:20:55:8a:b1:ac:33:4e:ad:bb:
                    13:d8:38:2f:ac:8d:80:98:83:b4:66:9e:6e:1f:12:
                    02:af:49:7b:59:15:86:e8:37:29:a3:5c:9f:dc:ab:
                    62:cb:f7:aa:40:55:87:dc:fe:8a:1e:43:cc:69:3c:
                    ce:a2:6d:18:b7:bb:81:d9:91:5d:f2:57:c9:a1:78:
                    66:0b:de:4e:fe:34:2b:52:10:07:a1:b5:04:c9:06:
                    59:0d:ae:ec:1c:70:ac:92:0e:e2:71:6c:8f:e7:47:
                    46:6b:0e:2d:58:7c:32:ff:ee:5b:eb:e6:9c:d7:28:
                    ee:22:c5:0c:13:15:be:89:ba:77:3f:12:8d:43:72:
                    77:9b:9e:98:d5:b5:10:f1:c5:1f:7c:7c:5d:10:d4:
                    4b:73:f4:b3:14:47:8b:1a:31:fc:50:47:b0:95:02:
                    87:80:fe:6b:5f:40:a6:43:14:c8:32:dc:d0:17:ec:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:EC:7A:43:8C:88:BF:82:3A:8B:8F:5F:4F:E2:56:54:1A:2E:F5
            X509v3 Authority Key Identifier:
                keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:84:9d:9b:91:35:f2:4e:f3:1f:12:3e:24:6e:c3:28:aa:75:
         73:51:99:87:d7:df:e5:bd:df:63:a1:c8:8f:21:c2:9d:05:a6:
         74:ed:8f:02:08:03:2b:d3:45:a2:73:71:c1:2c:84:42:dd:a1:
         e8:99:9a:1e:63:00:7a:32:04:ac:17:93:09:e6:e5:86:0b:6f:
         bc:38:90:b0:54:b5:d8:40:e6:c9:f4:20:21:d9:59:88:1d:9f:
         1d:9b:fa:cc:ee:29:b7:41:84:86:a4:bd:11:5c:80:6d:eb:41:
         a6:c6:09:a4:fa:d8:07:ed:ce:2e:e9:6d:be:a5:ad:ba:87:23:
         b6:79:76:03:c2:43:6d:fc:2a:60:13:6c:41:d5:9a:1d:e0:f1:
         e6:bd:e9:0b:18:99:20:77:92:d8:86:b3:b3:43:f5:b8:2b:ec:
         9b:c7:c7:95:fc:1f:86:12:30:cb:4b:30:33:87:6b:50:7d:45:
         81:fa:11:a9:16:50:86:3e:7e:00:9e:60:1d:c2:e2:ab:f8:b7:
         07:40:d9:ec:50:60:ec:12:57:75:a8:93:3c:37:53:5f:76:a1:
         fd:2d:52:02:58:ed:e1:24:ea:41:e1:88:8d:2e:26:6a:29:9b:
         cd:88:22:10:ed:4b:cb:fc:18:dd:e8:ea:58:5e:2b:55:de:8c:
         69:9b:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:28:01 2026 by rpki-client