Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          4WnRkS23cLF3lPjEjaupMBMWZ2wId8L15E6WMTGrShg=
Subject key identifier:   FF:5A:85:94:71:48:FF:5B:71:29:7B:F7:E3:6C:48:D7:07:32:F9:62
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       07E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          07DC
Signing time:             Fri 16 Oct 2026 21:42:10 +0000
Manifest this update:     Fri 16 Oct 2026 21:42:10 +0000
Manifest next update:     Fri 23 Oct 2026 21:42:10 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: +V0u0YlAIwdZbnUkf6CP2+PQPUflIBS/0qQXPfIoSrk=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: c0e2tlJchU2AjbFnzbzjNcFPIjMaQfq8EAU3TvKF4ZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 21:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021 (0x7e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: Oct 16 21:42:10 2026 GMT
            Not After : Oct 23 21:42:10 2026 GMT
        Subject: CN=6ad29a32-c076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:b1:12:46:b5:4d:e4:a3:a9:6d:ec:10:17:
                    27:7f:d7:41:0a:4b:9d:7d:51:c9:71:04:5f:dc:63:
                    4f:79:f2:0e:32:38:a4:76:38:02:dc:d7:c9:b6:3a:
                    64:91:7f:cd:f9:35:d1:79:6f:ed:3c:0d:f1:07:8a:
                    59:e7:91:b4:08:02:18:93:2b:49:59:88:0e:37:8b:
                    24:83:45:03:0b:80:fd:4c:3a:53:ff:25:5c:01:c4:
                    b3:e2:bc:6c:17:73:2b:2e:3d:56:46:c6:9b:d5:94:
                    4d:9b:ff:51:08:a7:8e:bd:b9:e5:2a:3d:d6:ef:6b:
                    87:a5:a6:d0:16:ca:14:6f:0f:6a:4b:72:f9:ce:d1:
                    83:49:ac:f2:10:10:df:10:44:4f:2d:43:6e:6c:a4:
                    d9:1f:54:ae:94:af:9b:71:3d:ae:eb:84:d3:b2:f3:
                    97:d4:77:ae:a0:96:ab:97:8f:b2:e4:37:bc:47:9f:
                    de:43:8e:d5:eb:e9:ef:b2:ba:ab:1f:b0:17:78:2f:
                    e0:f1:e4:89:7f:30:3a:c0:8b:d8:b0:e0:f5:f2:f9:
                    e3:51:46:f2:32:bb:43:9a:5d:3e:cc:55:b3:d8:de:
                    d7:c4:32:27:f8:89:b3:61:a8:ca:fd:3e:a6:0c:47:
                    e9:16:f3:06:cf:5f:4e:02:2e:0c:81:96:da:ec:52:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5A:85:94:71:48:FF:5B:71:29:7B:F7:E3:6C:48:D7:07:32:F9:62
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:eb:92:55:4f:56:79:60:64:62:09:20:ef:6d:40:01:67:
         08:a1:42:1d:44:60:34:ba:13:b8:16:2e:b6:30:a2:3b:1c:ec:
         e4:e1:ab:54:91:bf:c3:8e:7c:e4:29:5b:8b:e9:ab:8e:df:ee:
         de:9d:92:58:9e:c2:12:79:45:fd:1f:73:13:b0:10:6f:c6:d1:
         cb:e2:0d:53:d1:aa:70:b6:b2:4e:62:1a:04:7a:74:2d:3b:4b:
         b6:2d:16:fe:51:1f:3b:ea:d2:07:2b:09:91:a4:9a:43:02:ee:
         86:d0:58:65:cc:71:e0:8a:c3:c7:e0:42:91:37:f2:78:36:cc:
         10:82:5e:9f:53:d5:79:19:3d:59:46:f7:83:57:2a:b6:ea:ce:
         b7:00:6e:eb:85:01:dd:f7:86:3a:2e:2d:ec:fd:43:2a:97:a3:
         32:dd:0c:2b:b7:f9:a1:e9:dc:4e:45:2f:5e:40:8d:74:cb:cf:
         ee:ef:fe:0a:c8:eb:f2:e3:81:b4:56:d5:d9:1a:0b:8f:ed:21:
         79:15:73:30:0c:7d:2b:ac:c5:79:9b:88:99:d8:93:a6:f7:6a:
         ee:91:48:10:2b:d4:a1:5c:3c:23:fa:cf:15:bb:67:cf:f0:d7:
         d4:f4:bc:68:79:c6:e2:ce:07:cb:79:ff:60:76:93:f8:4c:c0:
         3a:c0:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:58:34 2026 by rpki-client