Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
File:                     aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json)
Hash identifier:          +dgxtGK8NVxNuEnCl5dHAHc+rew4SMrotRuNJtlyypI=
Subject key identifier:   3A:75:67:95:26:C6:B0:A3:4A:85:23:22:F0:DD:C9:99:07:9B:C0:0C
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Certificate issuer:       /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
Manifest number:          94
Signing time:             Sat 03 Oct 2026 08:10:16 +0000
Manifest this update:     Sat 03 Oct 2026 08:10:15 +0000
Manifest next update:     Sat 10 Oct 2026 08:10:15 +0000
Files and hashes:         1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: he9y0gzblbjnc6zPrgbiwe6K1++dD2W+CWro++Kwl8s=)
                          2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
                          rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
        Validity
            Not Before: Oct  3 08:10:15 2026 GMT
            Not After : Oct 10 08:10:15 2026 GMT
        Subject: CN=6ac0b868-1092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:04:58:87:57:7b:44:c8:fd:a6:2e:20:54:
                    6e:a2:38:09:be:39:f6:52:4c:6c:d1:00:7b:e5:25:
                    00:1d:08:f2:56:18:b2:86:40:99:58:88:16:72:64:
                    8b:c0:bf:4f:ce:60:c5:25:6e:c3:5b:52:c5:09:b0:
                    a4:57:87:7b:a9:17:3b:8f:eb:a6:b7:8b:ab:c6:5d:
                    2e:bd:e4:af:ed:f9:1a:f0:71:d7:86:ac:6d:a1:6f:
                    71:63:7a:8d:00:8c:a8:77:23:7c:9c:11:9f:7f:02:
                    82:f9:e4:cb:f6:b7:2b:41:e0:f7:c3:b3:2e:04:71:
                    4c:30:a3:34:4e:88:62:25:1a:a6:e3:45:ee:cc:a7:
                    d9:77:fb:f1:5f:72:56:e1:49:ef:cb:ee:15:ea:1d:
                    71:93:ae:43:00:15:63:7a:81:4a:53:ba:98:f2:d2:
                    72:27:40:3e:a0:1b:6c:b9:4c:9e:9a:50:76:8a:54:
                    a5:d9:c6:99:ba:05:8c:db:70:c7:7b:4c:9c:97:d7:
                    e3:10:1b:1c:4b:fb:13:98:e0:87:1a:b1:a1:f3:ee:
                    10:0a:0e:07:a6:cf:f4:ce:64:36:95:06:4d:cf:3d:
                    77:cb:f3:6e:74:13:b1:80:e8:10:47:87:90:e2:df:
                    ea:d5:80:e4:b3:06:fc:0e:71:9c:46:f8:68:68:84:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:75:67:95:26:C6:B0:A3:4A:85:23:22:F0:DD:C9:99:07:9B:C0:0C
            X509v3 Authority Key Identifier:
                keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:f8:8f:ac:37:10:20:b5:c9:23:1d:25:1e:31:72:fc:be:
         8b:fc:88:18:45:6c:25:32:e7:c3:bc:20:33:6f:95:45:f4:21:
         86:fa:1a:16:fd:45:1d:86:30:16:0d:43:d2:fc:ed:66:cb:0c:
         cc:d7:47:fa:49:b2:a8:76:fe:ec:f9:21:de:df:b2:16:de:bf:
         4f:9c:5f:dc:ed:88:5a:f0:74:39:ba:53:3e:63:4a:b3:54:20:
         37:39:f2:af:52:68:3b:42:77:1b:84:75:a2:29:6b:28:8b:1d:
         14:49:d3:ca:fa:a4:9a:cf:f8:8f:c5:05:7b:db:cb:39:b9:12:
         38:e7:4b:2c:fd:68:ce:90:73:e6:2d:ae:3c:4f:48:46:b1:cb:
         82:4a:7c:d9:68:51:8d:a2:74:83:54:5e:57:46:4c:e2:ea:79:
         93:50:ff:97:22:c5:89:2e:c3:68:66:5e:21:99:6e:be:90:91:
         80:29:13:47:0e:69:78:45:4b:04:07:44:2d:53:95:23:fb:27:
         09:71:29:48:7c:da:7c:e5:3d:59:1d:c9:b2:6e:81:cd:7c:59:
         52:9d:a2:da:bd:29:c2:6a:9f:e7:0b:f7:75:8f:c2:02:5c:cf:
         c0:a5:36:79:fc:13:5c:3e:cb:34:47:77:99:cb:ea:a2:ad:95:
         4c:4d:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:14 2026 by rpki-client