Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File:                     ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier:          pcnh7U+TszcEVXYfqA5uS+KipdUpWde7bS1rwRJm8aQ=
Subject key identifier:   10:D6:77:59:10:95:A3:0F:74:93:EC:F1:EC:C3:B7:5B:7D:86:9C:31
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number:          016A
Signing time:             Mon 19 Oct 2026 05:36:44 +0000
Manifest this update:     Mon 19 Oct 2026 05:36:43 +0000
Manifest next update:     Mon 26 Oct 2026 05:36:43 +0000
Files and hashes:         1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: 0Vy4kmVKX0cqFY6d+qUg4J+3GQWDTXpGvn9iDI9+Fx4=)
                          2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: ANjzdpRTnZYnb2IgP9uL0uuWKgG+fxMLmh0yV+GGQqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: Oct 19 05:36:43 2026 GMT
            Not After : Oct 26 05:36:43 2026 GMT
        Subject: CN=6ad5ac6b-b653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:a5:af:2e:94:40:03:be:3d:11:88:3a:b1:
                    41:ff:73:40:2e:17:26:32:1e:cf:80:e6:b0:a9:98:
                    4b:17:a9:72:aa:77:d6:49:49:ca:4a:1f:0c:75:3c:
                    ad:05:49:ae:d3:ec:2b:c7:36:b8:20:81:94:29:f4:
                    da:62:84:3b:cb:62:2b:de:5f:33:8a:b1:42:ac:4f:
                    d0:74:63:ad:cc:9d:68:b1:78:7c:ee:0a:3f:61:7c:
                    9c:ba:42:8d:69:63:c5:78:d3:71:d4:3b:a4:d0:65:
                    6e:f7:51:34:9d:2b:9c:7e:87:34:1a:af:2c:be:a8:
                    67:e2:15:dc:1b:70:be:ad:2d:07:23:1d:de:b1:2d:
                    bf:f5:37:27:62:db:82:e2:a8:51:ac:09:45:74:a3:
                    28:3d:aa:8a:29:21:d7:62:1f:57:76:37:68:10:02:
                    8e:28:77:71:3d:17:62:03:fe:fc:f1:6e:2d:cd:02:
                    f0:da:d7:43:c1:8e:1c:61:75:68:df:05:1d:aa:c9:
                    8e:58:a9:b3:36:0e:a8:28:52:a7:53:3f:75:e7:52:
                    ca:27:41:e5:78:aa:ac:80:b8:5b:60:4b:72:24:74:
                    e2:60:e1:13:88:74:66:bc:e9:22:83:b1:c7:1c:74:
                    20:2d:e0:3e:6a:a3:7f:55:b5:89:43:bc:74:4b:4d:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D6:77:59:10:95:A3:0F:74:93:EC:F1:EC:C3:B7:5B:7D:86:9C:31
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:54:10:7a:1f:3e:6b:23:a7:ad:d0:d1:a9:ea:19:96:b3:e6:
         a0:c5:e9:8e:5e:1f:01:87:a7:d6:67:00:46:05:62:1a:5a:5e:
         98:56:5f:c2:da:c3:d9:49:64:6a:85:e5:fb:03:b5:fa:ae:40:
         49:43:7a:b5:c5:c7:51:35:1a:4b:a4:9e:d5:84:77:d0:44:71:
         6b:6a:2a:6b:f5:aa:99:95:74:f2:0c:9e:2a:31:ab:b9:55:53:
         95:a8:e4:74:ed:3d:ca:b3:f3:af:48:4e:2b:3e:1a:e5:60:f4:
         98:ad:f1:07:dc:6b:6c:a0:8e:54:44:f6:7a:44:5a:9a:6f:d0:
         ae:49:f8:55:5b:bf:89:5c:c0:21:5c:d2:76:99:30:03:68:e2:
         b9:1c:26:a2:60:94:c2:19:a3:08:f7:93:a3:b2:78:86:66:57:
         c6:37:43:cd:16:63:18:95:97:1a:c0:5a:64:14:48:6b:f1:96:
         5e:2f:24:45:95:0e:0f:b0:be:95:af:76:74:ac:ad:eb:de:f9:
         75:a9:a7:39:2a:47:c5:bf:96:e3:56:40:a9:05:5f:d2:c0:05:
         d1:29:51:a1:34:10:4d:95:04:91:3b:8f:f6:8d:17:e7:be:73:
         2a:2a:c7:e0:62:dd:1b:5e:dd:d2:cd:ba:4b:f4:d8:3b:2a:c8:
         b6:d3:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 17:17:42 2026 by rpki-client