Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File:                     fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier:          vRUUW0ZqLlI8qCENzJDoRm/b4Cy2fEFzbrrRobst5qw=
Subject key identifier:   2E:93:27:78:35:38:81:E4:5D:6A:43:9D:02:A3:58:C3:AA:A3:95:05
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number:          0436
Signing time:             Tue 27 Oct 2026 00:08:36 +0000
Manifest this update:     Tue 27 Oct 2026 00:08:35 +0000
Manifest next update:     Tue 03 Nov 2026 00:08:35 +0000
Files and hashes:         1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: qJ3KqAWjj+IUUoj+tykIX0AAu3hxKmofacoA2YSl9Dw=)
                          2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: 5qVS8yAP9geafMCui47y2bneVvGFNSs25MQvHFvL3Q0=)
                          3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: gLOFNsHejik+yQKsEBrjAw7cANoRp3jJQV4pA0a+JR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 00:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Oct 27 00:08:35 2026 GMT
            Not After : Nov  3 00:08:35 2026 GMT
        Subject: CN=6adfeb84-bc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:ee:20:28:b5:e3:a2:04:ab:e4:4f:47:56:
                    16:55:4b:c9:0f:77:3e:11:2a:0f:05:be:fe:90:9f:
                    52:15:af:44:1b:6e:12:9a:73:73:c5:e1:17:c4:75:
                    7d:28:11:be:65:88:71:02:e5:9f:93:9b:46:a5:70:
                    22:c8:65:fa:39:7e:fb:71:76:a0:08:1f:e2:ae:30:
                    41:f3:f2:cf:e4:25:fe:1b:4c:67:50:cc:2e:7b:18:
                    27:2c:11:a0:e0:70:db:6c:9e:de:22:83:b9:0e:77:
                    d7:7b:7c:80:e1:a6:16:df:9e:3b:d6:47:eb:4f:56:
                    a3:91:38:ee:d9:73:0e:35:d4:ba:44:fa:8c:04:f8:
                    4e:29:e0:b7:94:55:62:c9:33:f9:de:f3:79:c2:b6:
                    20:3a:90:e6:6a:11:f8:d3:af:b6:67:43:63:da:20:
                    81:5a:d0:58:98:e6:8c:79:cc:d1:33:75:35:50:8d:
                    31:55:0a:41:fa:ca:43:53:a4:43:ac:bb:b4:00:bb:
                    6d:a6:03:ce:12:c8:b5:eb:aa:54:06:62:78:ca:d0:
                    2f:b3:19:73:ae:ca:50:9f:c3:bf:e6:81:ee:37:1e:
                    e3:b3:ed:8b:ea:0d:3d:d6:98:07:2c:0a:ba:66:54:
                    f9:c0:7c:cc:04:ca:b2:2e:7d:a5:5a:de:22:c9:73:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:27:78:35:38:81:E4:5D:6A:43:9D:02:A3:58:C3:AA:A3:95:05
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:fb:96:52:cc:c7:58:74:73:2e:a2:22:87:b8:d8:6c:2e:
         d7:75:6e:fe:60:85:62:f8:02:8c:9a:2a:90:a9:b9:10:63:3f:
         8f:64:cc:76:9e:06:7a:9d:c1:c0:a3:01:df:bc:e7:46:ad:20:
         24:90:60:73:3f:32:7a:1a:d5:a2:1a:5b:5a:a8:3f:d1:15:3b:
         34:87:3d:a7:06:5b:1b:c0:82:8c:c1:4b:d7:35:59:08:90:0d:
         8b:a8:35:2f:57:a3:2a:f1:1b:e3:40:51:65:69:f5:96:70:4d:
         67:66:0b:a0:a5:d8:e0:10:10:8d:3b:4e:20:a1:bd:1f:4f:cd:
         d1:d0:c4:08:f0:8e:be:2a:41:12:bd:d9:b3:6c:fa:d7:31:91:
         d1:79:46:ed:3f:ca:88:0e:ac:05:f2:d7:71:23:29:b4:01:0c:
         37:6a:0e:eb:22:09:e4:51:ae:1f:7d:2b:d9:77:9e:3d:f9:7a:
         96:bb:be:a6:7b:1a:6a:61:8e:f0:b6:4c:4a:82:8f:52:cc:5b:
         be:8e:a1:ae:29:8b:2f:cd:37:86:2b:8e:aa:6f:ae:d2:5e:dd:
         ac:4a:90:f6:94:20:75:8b:51:47:64:38:c5:f6:5a:4c:75:04:
         7a:11:27:06:8e:40:d8:32:9c:eb:7c:27:89:fe:75:9c:a6:98:
         9c:20:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:47:29 2026 by rpki-client