Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File:                     mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier:          LiylaMlTEF7Lh5s3JLcPLvm0TmU67yf9CzENPjjKbZk=
Subject key identifier:   7D:C8:B9:CE:9B:C6:88:BD:3C:A2:3E:C6:C3:A6:5B:F5:CE:62:DD:CD
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer:       /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number:          07D2
Signing time:             Mon 26 Oct 2026 21:22:24 +0000
Manifest this update:     Mon 26 Oct 2026 21:22:23 +0000
Manifest next update:     Mon 02 Nov 2026 21:22:23 +0000
Files and hashes:         1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: L12N5VvQKajbEg5sXnR7Max+VY/gqjvRd9+wboXE2+c=)
                          2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: 5xNVHk4wIhIdCo+Ow4cjaHsYyMmygLTqKV9KNFswWUk=)
                          3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: f7F6UHzDTrASali7JHnSCIgFltnmeNlt+tPm36SJfeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 21:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
        Validity
            Not Before: Oct 26 21:22:23 2026 GMT
            Not After : Nov  2 21:22:23 2026 GMT
        Subject: CN=6adfc490-6bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:d4:8c:eb:6c:f9:f7:83:72:73:ca:7c:fe:
                    92:4b:25:04:72:28:9f:84:86:de:c0:30:3d:15:45:
                    44:81:f6:2d:e2:77:fa:28:1a:91:56:a2:be:df:e9:
                    68:f0:f4:d5:18:2d:e5:34:08:93:cf:ce:95:76:f9:
                    55:e2:63:8e:7b:90:95:0d:82:5b:72:6b:90:17:4c:
                    5f:c3:bc:80:39:fd:60:42:39:97:cb:71:27:3e:cd:
                    86:81:79:c1:8d:51:93:be:3e:b5:3d:26:f9:b6:9f:
                    0b:c6:30:11:93:3e:0c:0e:66:b2:e9:ce:ff:f5:90:
                    62:f8:ec:c9:eb:08:f3:46:23:dd:fe:97:09:2e:df:
                    53:ca:6a:8f:db:fb:e8:ef:ef:fe:1f:e5:94:23:5c:
                    54:ac:1d:d8:21:94:2b:44:16:93:be:9a:ae:d3:cb:
                    87:09:7b:f3:c2:34:3d:63:5d:d5:07:59:50:b4:0f:
                    45:39:74:89:63:27:59:9c:1c:b9:9d:62:e3:f2:b5:
                    70:07:09:36:b8:75:60:4e:e0:c1:ab:72:0f:57:6a:
                    70:86:35:0d:e1:0e:c9:2d:02:71:3f:cf:95:da:a3:
                    0a:07:c9:24:b7:b7:9d:df:c0:74:8c:a0:c3:14:47:
                    9c:81:2d:ce:50:a2:24:a7:94:23:93:f8:59:58:fd:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:B9:CE:9B:C6:88:BD:3C:A2:3E:C6:C3:A6:5B:F5:CE:62:DD:CD
            X509v3 Authority Key Identifier:
                keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:47:37:90:f6:23:af:ca:38:19:9b:67:27:37:1c:b4:cb:
         cc:83:f8:8e:e2:a0:e9:ff:ad:48:5f:8d:17:0c:d6:89:bf:eb:
         72:82:47:64:3a:8b:1e:eb:6c:d4:65:71:02:a7:51:16:19:82:
         16:e3:93:90:42:6a:f0:d0:b5:8e:a0:f8:f6:a1:8b:21:a7:c5:
         0e:e2:2f:c6:7e:13:2e:97:7d:b1:31:75:bf:a0:7d:0c:e8:86:
         58:d4:30:97:be:12:f9:ba:96:3a:52:b5:3c:ab:d0:f6:05:e8:
         ca:61:c1:e7:07:d1:e9:11:05:89:60:15:b6:35:2c:c3:84:b5:
         e7:8e:1a:5e:ed:d5:d5:37:07:99:1e:dd:ed:38:c1:d2:5b:ee:
         23:12:0b:6c:56:d5:e6:d3:9a:11:27:fd:5d:42:aa:9b:0f:16:
         fe:b1:fb:28:fa:48:f0:a6:ac:40:1b:75:95:45:b3:73:b1:26:
         a2:7e:73:0f:f6:79:5e:09:44:4f:65:cd:17:6e:57:e6:9e:f8:
         13:f0:f2:a0:1f:9f:d0:63:83:01:a3:37:bb:b4:02:be:61:c0:
         b8:bb:5e:a5:77:8c:43:78:a1:8e:ed:7d:a3:40:09:d8:a2:f8:
         c8:be:de:68:be:f6:77:5b:d8:24:60:91:25:6b:e3:b3:b5:0e:
         4a:8f:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:40:43 2026 by rpki-client