Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          QJvXMTCGDHxCGZ8WYDaRGr10EQrcQHdqdDuPidmcw6c=
Subject key identifier:   E6:E0:5C:F4:E6:5C:76:0D:33:68:62:77:CA:31:40:2D:B4:31:1E:59
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          AB
Signing time:             Fri 09 Oct 2026 07:46:50 +0000
Manifest this update:     Fri 09 Oct 2026 07:46:49 +0000
Manifest next update:     Fri 16 Oct 2026 07:46:49 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: rTpcWUmOKqIpkWJ24Fj2nTyjJdPbbCzYT5eqaBhZWDg=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Oct  9 07:46:49 2026 GMT
            Not After : Oct 16 07:46:49 2026 GMT
        Subject: CN=6ac89bea-0973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3c:c6:fa:03:02:79:d2:bc:b3:eb:55:b1:ba:
                    e0:0a:8f:73:14:5f:d9:c2:98:63:80:75:72:cf:e0:
                    bd:f7:4f:39:0e:01:32:14:19:32:37:8e:66:14:4c:
                    0e:12:67:52:7c:e0:7e:e2:d4:42:a9:83:44:cd:4f:
                    19:b4:07:01:19:ad:45:44:02:d6:f1:9d:e6:4d:70:
                    b0:08:7d:ca:40:12:b5:b1:29:4b:fe:7a:9f:01:59:
                    0b:64:a5:bf:be:26:07:0d:3c:07:12:68:d9:59:d6:
                    77:e7:73:56:31:32:f9:5a:bc:44:2b:e3:04:9c:9f:
                    17:1d:f9:74:3d:03:00:c9:03:f3:3b:ed:d0:21:1f:
                    1c:ba:40:78:ca:0f:c3:1b:54:35:cd:9b:01:48:51:
                    f1:63:a4:bb:fd:00:c0:ff:ad:7f:7c:53:31:3c:a6:
                    bd:17:14:d3:b4:c2:51:7c:40:59:c5:df:c0:3d:c5:
                    45:08:8a:ce:00:61:23:20:c1:ee:d5:13:66:fa:0b:
                    dd:7d:94:eb:80:87:29:2e:68:99:1f:b0:26:10:73:
                    ad:01:1b:5d:c4:6e:99:ce:21:04:2e:72:c2:71:57:
                    44:0b:07:05:98:c1:2b:55:4d:d0:82:6f:91:5c:69:
                    7e:b9:d3:6d:23:6c:5a:3c:34:86:3b:8c:c8:03:6e:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:5C:F4:E6:5C:76:0D:33:68:62:77:CA:31:40:2D:B4:31:1E:59
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:08:fe:ff:b6:b2:82:19:3e:b7:12:47:bc:4e:5c:38:18:
         1f:a0:df:6d:6a:cc:c5:aa:2d:3a:1f:95:56:4e:97:e5:4b:6c:
         ed:39:f0:66:d9:2f:9a:70:3b:df:92:ba:ff:52:ec:94:e9:b2:
         28:99:7b:c5:38:91:8a:e4:f7:38:72:95:d1:21:b2:07:af:07:
         ba:ab:0d:4e:64:47:22:fe:00:24:15:34:26:ea:a4:87:12:34:
         dd:44:0d:bc:ef:e5:5c:a1:2d:2e:5f:db:c5:c4:fa:eb:cd:a8:
         23:21:d4:9c:95:43:40:f8:98:27:e2:a2:be:a3:00:a1:1e:a8:
         df:2e:f1:fd:fe:6c:b3:30:02:8b:90:5b:53:10:f6:ee:9e:0b:
         7d:3c:d3:a9:1e:d9:4b:70:6b:a7:97:78:bf:ce:cc:b6:f6:06:
         b2:55:c5:d4:af:42:24:45:1e:fa:51:1a:37:62:c1:6b:66:c1:
         04:a9:d7:25:72:3d:04:32:67:d6:7c:9d:0f:b3:40:e6:0e:08:
         0a:53:ae:a0:27:15:8e:49:bb:65:3d:57:e4:29:ac:90:a6:dc:
         b0:07:ed:36:0d:5a:85:f3:2e:46:f5:05:27:ba:c6:c0:7b:72:
         7b:ea:fc:36:fd:ca:be:a7:98:37:0d:ed:4a:fd:14:c9:9c:f9:
         31:ad:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:22:48 2026 by rpki-client