Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File:                     FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier:          7qYvxvV9wVM0ilqbebYZRqDABOLRYbgt7ZC7LxLPXFU=
Subject key identifier:   64:AA:B7:B9:3B:41:37:D2:45:2A:03:35:E1:92:42:78:FE:ED:48:71
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer:       /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number:          078B
Signing time:             Wed 28 Oct 2026 21:47:14 +0000
Manifest this update:     Wed 28 Oct 2026 21:47:14 +0000
Manifest next update:     Wed 04 Nov 2026 21:47:14 +0000
Files and hashes:         1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: J65VYGtpojHlnyevbXkZUjhdxds16seRa6QvleUc0IU=)
                          2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
                          3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
                          rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 21:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
        Validity
            Not Before: Oct 28 21:47:14 2026 GMT
            Not After : Nov  4 21:47:14 2026 GMT
        Subject: CN=6ae26d62-17b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:8e:cb:ea:c2:ef:af:95:ae:64:35:8f:e8:
                    43:fc:57:e6:f5:1c:dc:61:82:00:b0:d4:26:63:aa:
                    c7:1f:fc:8e:64:3c:34:98:71:0a:bc:f6:16:6c:5e:
                    a1:ca:35:2d:7e:71:45:fe:3b:43:b3:2d:b6:30:c5:
                    85:21:7a:5d:6a:86:c7:95:71:7d:72:fc:74:e4:9e:
                    1b:5d:81:c6:5b:25:1f:05:9a:35:51:20:cc:bc:81:
                    55:6f:7c:dd:ff:5b:aa:12:43:5a:93:0c:da:0c:44:
                    63:60:a2:ba:4b:a7:18:62:59:ba:18:d0:a8:f3:15:
                    78:27:30:71:79:15:59:10:75:9c:c7:96:93:ba:dc:
                    88:1e:18:b5:d8:14:65:f6:f2:d9:8f:59:09:b7:23:
                    d9:f1:32:c6:cd:d0:d6:4e:f6:aa:b3:48:cc:88:c3:
                    41:9f:d8:89:1f:d6:79:95:b0:72:c0:af:e2:e3:61:
                    ca:bf:9d:30:a8:d6:b1:74:a1:82:49:8a:37:46:ba:
                    14:22:d3:e7:f0:cb:a6:13:ab:b0:2b:9e:d5:e2:bd:
                    f8:92:c5:61:be:41:a1:bf:3a:30:a3:a2:ca:5e:ac:
                    3e:44:ed:bb:97:89:37:90:e0:23:df:92:9d:4a:66:
                    bd:c6:e0:fe:bd:68:74:10:93:c6:ff:f8:ae:d2:0d:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AA:B7:B9:3B:41:37:D2:45:2A:03:35:E1:92:42:78:FE:ED:48:71
            X509v3 Authority Key Identifier:
                keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:9d:5c:e7:a4:60:c9:79:9d:da:64:a7:5a:6a:91:49:7b:
         24:90:ee:9f:7f:d5:87:53:fe:db:e0:ca:ea:51:7d:d1:0f:4e:
         25:26:e3:42:b6:ec:f1:24:3e:8c:cd:e8:80:17:96:d1:d5:b8:
         69:49:16:16:50:3a:4c:b2:03:22:40:f3:74:bb:f6:41:98:1c:
         f5:9a:95:cb:0b:c4:ce:4a:5b:02:eb:28:dc:d6:cb:f3:b8:75:
         76:22:90:4f:2e:a3:9b:d2:37:c1:54:c8:b0:da:ee:70:51:45:
         36:df:99:4e:10:22:ee:70:82:f6:74:0e:fe:6c:26:e0:ba:71:
         86:51:3d:3d:2c:72:40:87:8a:89:e2:5d:19:3c:63:0e:72:65:
         e7:9b:e3:b9:dd:5d:81:f2:2d:46:90:04:69:22:66:10:a9:98:
         dd:92:ef:b2:3e:16:59:20:8a:a2:dd:6e:f0:4c:05:e1:3d:9c:
         b9:01:3e:c1:9d:33:26:4d:e3:2c:dc:88:12:8e:42:e0:a3:04:
         47:0a:93:ec:e8:83:a5:15:04:f0:15:14:16:60:09:fb:da:e2:
         d9:a7:07:46:7d:1d:94:07:f3:7c:f8:80:97:02:ff:84:05:42:
         ba:2b:2f:e1:53:e0:84:90:9a:97:8e:52:ac:fe:3e:cb:82:e9:
         35:fd:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:08:28 2026 by rpki-client