Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File:                     5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier:          rCa2P+7OaBY4R9VT83RxLev06DflnvbizSIJ3mBH1vE=
Subject key identifier:   A9:05:F7:AD:F7:41:4A:F4:38:CC:74:EA:59:7C:A6:CC:85:24:B6:C0
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer:       /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number:          017A
Signing time:             Mon 19 Oct 2026 05:25:21 +0000
Manifest this update:     Mon 19 Oct 2026 05:25:21 +0000
Manifest next update:     Mon 26 Oct 2026 05:25:21 +0000
Files and hashes:         1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: GaKPyHnGNYeSKTkRB5tpnVv28Agln+E6daX1xnDOK88=)
                          2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: uSJSVKQ2eb5T6Rs3qb48PEQhXusBNfHf9wMlJhiue14=)
                          3: qhZ3tYlUNLx4CvsqN-C1p0jr5DI.asa (hash: wis4l1kG1hTGz1dDj73IbjwvA1kqvI9WiQ+qWwiJkF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
                          rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
        Validity
            Not Before: Oct 19 05:25:21 2026 GMT
            Not After : Oct 26 05:25:21 2026 GMT
        Subject: CN=6ad5a9c1-287d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:4e:01:13:94:e4:0c:b6:7c:d2:57:c7:2a:
                    88:ae:73:9d:f1:14:11:f5:3b:13:ca:2c:eb:25:58:
                    47:0c:1e:e5:12:24:21:d7:e4:2c:6b:1c:c8:56:15:
                    38:fd:7e:58:91:7c:a1:40:94:c6:e8:86:98:60:17:
                    6e:a5:5b:9a:53:dc:ef:ba:d0:88:1d:e1:af:7b:41:
                    f7:e8:f0:00:90:db:fa:76:8e:34:c4:5a:b9:75:88:
                    64:a5:af:39:dc:c9:20:a9:9d:81:30:ec:0c:09:b9:
                    0f:a6:3d:e8:86:6f:d3:68:e1:34:6c:0c:66:ad:77:
                    77:c0:a1:9c:14:f7:d1:c5:6f:ce:a0:45:72:e0:49:
                    04:fb:67:3e:6b:e4:80:30:cb:31:53:a4:c2:99:f1:
                    74:9f:44:5a:03:9c:6c:ac:44:b5:11:b6:c9:26:9e:
                    57:2a:7e:f2:b5:6a:c8:88:c1:fb:a6:f7:fd:0a:7f:
                    ea:e7:fa:d0:e9:71:7f:32:8a:cd:84:a4:63:f1:26:
                    53:9e:9a:c2:01:66:1d:e7:00:fe:66:30:12:88:d6:
                    c7:cf:5d:a5:af:a1:ab:51:2c:af:14:56:43:bb:f5:
                    6f:2a:86:fd:1d:df:be:a9:ec:89:e1:fa:e6:d9:a5:
                    94:b7:af:01:d1:b9:63:66:ef:a4:59:8f:6e:b4:41:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:05:F7:AD:F7:41:4A:F4:38:CC:74:EA:59:7C:A6:CC:85:24:B6:C0
            X509v3 Authority Key Identifier:
                keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:96:d5:86:ef:5d:4e:75:54:e8:67:f1:22:8f:63:83:bb:
         f9:43:92:be:71:c8:ac:e5:d3:0c:22:30:96:3f:2f:34:a0:e3:
         3e:3c:c7:2e:10:6f:a1:63:0f:a6:a8:41:a5:63:1a:42:89:15:
         54:32:88:32:3f:7b:fd:12:24:37:16:dd:e1:1d:4e:fc:df:d7:
         07:5b:86:1f:39:2e:2e:ba:27:3b:d0:38:88:74:79:1c:41:3e:
         9f:69:7d:99:b0:20:46:90:aa:4a:0f:de:25:f6:d5:fd:76:54:
         2b:a1:23:60:9d:50:00:c7:ec:c5:85:4e:bc:8c:ad:a2:d4:c5:
         5e:9c:58:57:3b:68:95:25:7b:ba:fe:d3:be:65:a1:aa:4a:56:
         0c:b1:fb:4b:d4:9d:d8:f0:db:68:9a:aa:2d:0f:34:61:ab:91:
         bf:ec:aa:fc:b0:e2:f4:89:b8:e7:71:69:ae:06:b7:31:d9:59:
         29:21:ce:c1:61:2a:e9:b3:aa:e1:46:f0:7a:52:22:c8:37:6e:
         06:f7:a4:fb:4b:a8:4a:e6:41:45:17:13:16:99:63:3c:fe:b2:
         d6:8a:7a:3f:83:55:07:81:7b:ce:58:4e:3e:85:8a:3a:e1:db:
         18:c4:d9:f4:9a:7f:9f:75:59:6b:f0:61:2e:c4:db:56:e0:1c:
         c5:72:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:18:16 2026 by rpki-client