Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File:                     szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier:          JLS0+uwxbHAmbMROHWQFrhvyZv04JpHF9crGmxdqWeM=
Subject key identifier:   E3:16:16:5E:C8:5F:7A:E5:F8:7E:0A:7B:D1:62:C1:FE:09:50:87:D7
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer:       /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number:          8F
Signing time:             Sat 03 Oct 2026 08:12:17 +0000
Manifest this update:     Sat 03 Oct 2026 08:12:17 +0000
Manifest next update:     Sat 10 Oct 2026 08:12:17 +0000
Files and hashes:         1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: dNhk3Cn3y1UD6NIdGAJui0mR+G9oakjdzf6UbIvLjF8=)
                          2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
        Validity
            Not Before: Oct  3 08:12:17 2026 GMT
            Not After : Oct 10 08:12:17 2026 GMT
        Subject: CN=6ac0b8e1-e902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:94:1e:62:8c:4b:a0:58:6a:b4:ad:ef:55:
                    11:63:14:8e:18:fa:51:1f:dc:20:67:f4:2a:d6:c9:
                    71:39:14:27:64:88:ce:b1:de:ce:13:84:2c:ed:e5:
                    66:41:e0:e3:17:da:11:9f:cc:95:b8:ec:7b:38:55:
                    7a:c6:65:48:35:28:b6:79:4e:5f:2f:2f:41:04:ec:
                    78:bb:d0:ee:80:c3:dc:cb:24:44:ca:2d:eb:61:a4:
                    e2:da:f2:57:14:4b:69:90:53:b7:37:02:91:41:a6:
                    99:63:6c:22:3e:45:cd:98:ca:a2:f6:00:cb:4a:90:
                    ce:0b:df:1b:a7:7f:a4:3c:94:e0:e3:ac:7e:90:45:
                    bd:a1:7c:46:67:fe:cb:a3:48:a4:0b:92:1d:21:7c:
                    60:75:22:e5:55:ae:b6:17:83:2b:95:c9:3b:11:0a:
                    28:0b:2b:49:92:31:51:29:18:b1:82:c3:e6:72:28:
                    0a:4c:79:0b:f4:9a:6f:be:7b:2b:3f:89:ec:4f:10:
                    92:5f:2d:14:e9:21:cd:a6:67:08:0b:5c:f0:c1:4c:
                    95:3a:4f:2a:4e:ec:12:7f:0c:69:e7:f6:53:58:d0:
                    2c:35:84:95:ed:46:0e:80:e4:72:fe:2e:51:85:13:
                    84:73:c5:26:8f:98:3e:88:16:9f:4a:de:25:fb:3b:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:16:5E:C8:5F:7A:E5:F8:7E:0A:7B:D1:62:C1:FE:09:50:87:D7
            X509v3 Authority Key Identifier:
                keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:b7:3e:c2:d1:8f:60:a8:3a:42:4a:d0:2b:f7:e0:13:06:
         9a:58:c7:1f:bf:96:87:83:f3:ec:7d:1a:2f:5e:5a:ce:2f:d4:
         b5:da:44:8c:36:eb:36:6d:cf:9c:44:45:51:b5:2d:13:9f:59:
         73:b3:cc:b1:30:e4:d2:fb:a5:81:3c:71:cd:87:c9:3e:b2:81:
         ff:77:0a:3d:b1:01:03:65:7d:89:70:db:43:e9:64:7d:5d:e3:
         89:ce:06:1e:4e:80:09:44:02:ee:d5:04:ed:08:17:f6:09:6d:
         9a:43:4d:8a:c4:0a:74:d5:5d:71:95:ee:5a:16:2b:ee:6d:b6:
         e3:35:80:80:fa:3b:80:92:c5:1a:47:42:e3:3e:1f:ea:79:47:
         29:0f:22:32:75:41:6e:f6:d8:db:24:7f:71:37:f1:d9:32:78:
         dd:37:02:be:dc:65:d4:52:6f:95:0c:02:87:bd:d5:1d:88:26:
         c5:84:73:ee:74:5f:be:04:ba:0f:f4:7e:ec:b8:82:49:9b:70:
         a4:65:07:74:38:d4:78:94:13:80:64:fb:30:cd:20:d3:50:9e:
         24:55:0a:76:94:9f:d9:55:27:8e:fa:94:06:b3:0e:b1:ab:d8:
         e4:79:d8:8e:8c:26:dd:b8:f3:4c:88:81:b7:62:4b:61:ee:d7:
         4e:0a:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:53 2026 by rpki-client