Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File:                     Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier:          egLh2l7L8p765NFdDPMMeBT24A2rsv0c2Tx9pjz0NnY=
Subject key identifier:   93:59:73:3C:85:C8:0A:04:D0:DF:69:0C:E2:4F:EC:01:F4:16:EE:87
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer:       /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number:          0163
Signing time:             Sat 03 Oct 2026 05:40:00 +0000
Manifest this update:     Sat 03 Oct 2026 05:40:00 +0000
Manifest next update:     Sat 10 Oct 2026 05:40:00 +0000
Files and hashes:         1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: DNNSziyw8xNhWA+sDo3ov1KHuwh50Cce9OCi9zsiiLc=)
                          2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: J9p77l9cTrTV2+cKIR/IP5JcPOecPcSAMEsYAdt8Ff0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
        Validity
            Not Before: Oct  3 05:40:00 2026 GMT
            Not After : Oct 10 05:40:00 2026 GMT
        Subject: CN=6ac09530-14d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:2d:31:e5:94:53:0e:f7:84:68:2d:d0:4e:
                    2a:b9:25:72:35:ea:12:0e:11:74:46:d2:54:39:0d:
                    3f:af:ef:2e:3b:50:34:28:9c:cb:da:ad:9e:87:f4:
                    79:96:72:b0:ad:91:54:40:31:84:37:b9:29:52:32:
                    3c:07:c6:8e:2a:d0:18:db:7d:00:cf:99:4d:01:0b:
                    ad:ee:d2:49:24:ec:63:49:c0:0f:87:78:46:cf:22:
                    c0:81:cd:b2:a9:d2:90:50:19:89:11:e9:fc:e4:ff:
                    11:af:b9:32:6d:24:25:25:1f:8f:ac:db:fd:8b:b3:
                    ad:c8:1f:a9:4f:82:80:2a:56:55:6b:a1:ef:59:ea:
                    35:1a:fa:76:3a:a9:52:1a:04:34:8e:b2:4d:e2:30:
                    6b:f8:29:0e:22:97:c0:87:2d:24:82:a0:04:6d:33:
                    81:52:b8:d1:b9:48:05:54:24:eb:02:a4:02:9b:5e:
                    77:b1:f0:e8:c5:6c:0e:86:37:ae:df:72:3d:1f:b3:
                    bf:48:00:78:da:7f:43:ef:a7:ff:f2:ee:22:5a:65:
                    fb:fd:fd:dc:0e:7f:a1:5d:73:b4:ce:49:3d:60:dd:
                    70:ef:77:8a:59:01:62:7f:66:49:7f:fb:7e:09:cb:
                    1b:24:82:a1:f2:c8:9a:e1:63:8f:92:6a:e4:ed:b4:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:73:3C:85:C8:0A:04:D0:DF:69:0C:E2:4F:EC:01:F4:16:EE:87
            X509v3 Authority Key Identifier:
                keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b3:fa:39:9f:31:74:80:92:7d:72:dd:d0:64:30:79:76:b9:
         7a:43:63:c9:6f:f8:28:20:dd:c9:f6:a9:98:e8:93:3d:5d:d9:
         c3:31:8d:aa:df:cc:6f:70:e0:b3:13:fd:c5:9d:65:2a:5c:78:
         76:b1:a7:db:0a:46:db:45:12:9f:00:84:29:c9:aa:3e:24:2f:
         25:66:ce:6e:16:dc:87:92:e0:0f:bc:e5:8d:ff:40:2f:33:98:
         76:e5:75:72:14:fc:8c:93:40:30:34:2b:d8:a7:6b:bd:5f:dc:
         bc:8f:89:f5:10:d2:5f:67:93:54:c3:fd:49:07:b3:20:be:c9:
         d3:e9:19:40:ab:05:d7:c5:06:20:5f:47:f8:49:ae:a6:cf:33:
         7d:10:91:6a:d9:80:4b:55:6d:9f:bc:c5:1a:2a:fa:a7:c9:a9:
         ad:50:a0:e9:4d:0d:17:85:38:36:3c:53:85:db:c8:ac:78:6a:
         8d:e5:e1:45:7f:ea:53:cf:96:77:00:32:0f:2f:ef:d5:ce:c2:
         c9:09:5a:7a:a4:75:5a:ab:97:09:61:40:34:d8:f8:79:db:cd:
         b9:72:37:c9:65:c0:42:18:67:5f:60:54:50:8b:e4:67:81:fa:
         65:7c:3f:2e:40:c7:69:74:86:fa:48:95:7d:04:d3:88:f8:28:
         b4:a3:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:11:11 2026 by rpki-client