Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File:                     _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier:          2rJzahDkAzpWbAK25fxAXV0c8IcGZ9yQEuXBRR5nDA0=
Subject key identifier:   82:9A:A7:F2:C6:41:37:B8:5B:AE:00:EA:19:C6:E6:F6:0B:F1:01:DE
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer:       /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number:          75
Signing time:             Sun 25 Oct 2026 08:13:32 +0000
Manifest this update:     Sun 25 Oct 2026 08:13:31 +0000
Manifest next update:     Sun 01 Nov 2026 08:13:31 +0000
Files and hashes:         1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: p0xTJaIPJCCw0bcE8apx5LYYC7yPiRgE7w6s3ifIv0w=)
                          2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
        Validity
            Not Before: Oct 25 08:13:31 2026 GMT
            Not After : Nov  1 08:13:31 2026 GMT
        Subject: CN=6addba2b-bbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:3c:ba:37:20:da:77:1f:54:a7:39:e1:55:
                    f8:35:ab:f9:e7:7c:fb:53:63:38:67:d3:46:ff:af:
                    f1:3c:2c:d3:4a:a3:50:c7:5f:d1:61:2d:aa:a1:49:
                    3a:44:3a:e7:e8:f2:5c:94:c7:b8:95:2c:5d:2c:57:
                    8f:a4:5b:de:c1:8a:58:cb:6f:13:57:26:40:79:4f:
                    b3:0c:bb:79:9a:ca:1e:3e:a4:10:73:b5:b4:9e:39:
                    85:00:c6:b8:83:32:8a:45:ce:8e:c0:56:87:f9:55:
                    75:d9:a3:d4:e2:83:92:83:d3:60:27:f5:93:7a:1e:
                    92:45:8e:2b:a3:d0:bc:17:40:8e:c9:2b:08:e4:43:
                    b0:3e:0c:ab:66:9f:71:4e:94:b3:1d:fa:46:b6:55:
                    0d:96:80:a1:70:55:2b:41:fd:d2:9c:0a:24:54:97:
                    d7:e7:57:11:e3:d3:cb:6c:a0:b9:b7:9f:1a:c8:a7:
                    91:6b:8a:35:5f:5d:cc:a7:52:9a:3f:23:e3:9f:2e:
                    25:d8:7c:93:70:33:b7:87:bd:bb:8e:0e:5d:86:4f:
                    1b:69:20:09:6e:c7:74:a1:a2:c2:0d:72:aa:5d:68:
                    44:e7:6d:51:ab:f8:cc:87:89:25:0f:4d:55:c3:4b:
                    96:3d:db:80:69:83:6e:12:ce:db:82:a9:4b:b1:13:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:A7:F2:C6:41:37:B8:5B:AE:00:EA:19:C6:E6:F6:0B:F1:01:DE
            X509v3 Authority Key Identifier:
                keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:16:7c:8d:86:c5:9f:1a:4a:75:ef:fb:a5:41:14:b8:25:
         d3:49:fb:5d:6b:73:80:39:52:34:df:d4:51:c5:dc:75:a1:b4:
         58:a2:e2:b5:0c:d5:4f:12:04:17:ba:11:9c:52:2f:35:cc:51:
         d5:29:39:4c:22:5d:f9:c7:e5:51:b7:28:24:1e:5b:81:41:75:
         52:78:80:e7:54:0a:e0:5a:93:ef:36:f5:57:d3:97:99:7e:8d:
         b5:ec:d6:34:f7:89:1b:aa:ac:41:57:5f:27:b2:09:f6:ce:31:
         a7:46:2a:fe:f0:39:d3:cd:1a:bb:41:5e:fd:95:bb:58:41:5c:
         a8:f7:20:3c:0c:97:6b:72:fc:92:96:8e:0e:e8:f1:48:8b:a3:
         d5:6b:f9:27:26:1d:5d:d6:f2:c2:f7:3d:ad:04:61:8e:53:26:
         89:1d:a9:46:24:e2:a6:07:be:32:7f:67:bf:ee:4e:f4:8f:85:
         e5:58:89:e9:07:89:a0:d4:14:d5:13:cd:80:f3:d1:84:75:ba:
         40:85:f3:68:cd:75:04:0a:05:13:4c:21:00:f8:ba:7c:f7:55:
         4c:60:11:ab:92:91:6f:fb:58:2b:36:29:e7:84:84:cc:d3:9a:
         41:ff:c5:fb:b2:e3:34:62:7f:17:62:c0:d3:92:1a:d1:f3:60:
         89:1d:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:47:29 2026 by rpki-client