Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File:                     RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier:          V6itgPDx7R5OG5/zVKLUQYqL515CtbeVMZ7OOSd0an4=
Subject key identifier:   76:D3:1E:5D:1D:AF:51:D1:4D:AC:94:55:D2:97:91:16:AF:3B:BF:E8
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer:       /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number:          0171
Signing time:             Tue 27 Oct 2026 05:04:54 +0000
Manifest this update:     Tue 27 Oct 2026 05:04:54 +0000
Manifest next update:     Tue 03 Nov 2026 05:04:54 +0000
Files and hashes:         1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: 5TeU+97d3IxUqu9SUREUh/jZIKE9b9uHUxoCXPVRCqE=)
                          2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: WvBYC5RPQBjCgKYxv8nmuukDYtwi8f7s6ddjHk+AitQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
        Validity
            Not Before: Oct 27 05:04:54 2026 GMT
            Not After : Nov  3 05:04:54 2026 GMT
        Subject: CN=6ae030f6-b540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:8b:7d:f6:31:59:92:ea:76:e8:4f:84:85:
                    e5:84:23:ba:09:6e:63:dc:f4:d4:78:9b:a8:eb:54:
                    5d:d0:1c:46:d9:f2:b8:d2:89:88:b5:70:8b:47:8f:
                    07:8d:f5:dd:f3:55:c8:85:69:0f:5d:75:f3:43:a3:
                    b3:ad:1f:fe:c7:81:72:db:0c:6c:4f:e0:91:67:ba:
                    00:43:c1:84:67:ef:8a:75:a5:ad:1c:f9:b8:cb:ef:
                    a5:01:f4:39:ad:d5:28:ce:14:ce:e4:2d:ad:d3:a0:
                    8c:af:54:f2:7b:52:c2:ba:98:14:3d:6f:f7:16:2c:
                    a4:14:2a:ca:62:63:c3:58:6a:76:5b:e3:b6:14:19:
                    fd:f5:cd:3f:d7:87:f9:e1:e9:ab:5c:41:8b:78:76:
                    34:a3:3e:1a:5d:e2:9f:e8:00:1b:1b:94:c3:d9:c9:
                    6e:c3:75:f9:15:50:a8:5f:46:38:df:a8:dd:a9:77:
                    ff:1a:5a:48:57:b6:80:ae:88:1f:8d:d4:33:5f:1f:
                    52:63:44:e5:d1:f4:99:4d:df:84:92:07:1b:38:08:
                    d4:90:97:e6:8e:37:45:df:8b:2a:64:a0:b4:c6:00:
                    0b:95:66:9f:b6:ed:46:15:6e:3d:f2:06:6f:7d:bf:
                    aa:5e:25:35:dc:7f:79:69:34:42:7d:be:af:67:01:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:1E:5D:1D:AF:51:D1:4D:AC:94:55:D2:97:91:16:AF:3B:BF:E8
            X509v3 Authority Key Identifier:
                keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:38:d2:50:2c:ca:dd:f9:73:39:5f:d6:db:01:00:9b:17:9a:
         d7:74:1e:6c:23:9f:30:b8:01:23:dc:63:04:76:c1:54:f3:99:
         07:4f:f4:ca:9b:9f:06:a8:38:05:96:b1:fe:9d:a1:be:e4:c5:
         26:e5:3c:ba:b2:92:fc:b4:26:9d:18:60:88:7b:4a:eb:45:d3:
         bc:94:47:cc:5a:e3:84:6a:84:76:07:05:e4:c8:7d:8f:e3:36:
         03:54:7e:c0:99:48:02:5c:59:15:22:3d:37:dd:84:69:87:5b:
         44:7b:de:2a:0c:38:05:b6:46:a1:0d:30:11:4b:fc:fd:57:e1:
         c0:b6:fa:4c:ca:3e:8d:de:9c:38:6d:7b:7b:7e:ad:9c:7c:d8:
         09:65:d1:52:79:3b:2b:c4:81:0b:f1:6f:82:93:a6:e3:72:df:
         4e:78:ba:15:ce:5c:a6:6f:d7:06:d0:c5:c8:58:d0:34:51:51:
         07:03:78:c6:53:27:a2:42:94:73:72:3b:d5:be:93:80:5b:a1:
         0c:ad:18:2f:f7:7d:39:4a:0f:31:72:ff:8b:84:1f:ba:32:8f:
         fa:e6:e8:8a:86:56:1d:90:e0:23:5e:1b:53:3f:fa:c9:f9:98:
         cc:3c:9f:8a:d6:0d:5c:4b:ec:e9:1a:28:f4:d6:2a:ff:f6:72:
         40:65:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:45:20 2026 by rpki-client