Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File:                     2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier:          ghdQqJw+ry+d1ftP4BsxEV+gRYA8qiKa/H47wvTposw=
Subject key identifier:   A2:66:AC:2D:1F:3D:F8:A2:94:D2:BE:9C:EE:76:2F:7B:8F:0F:0D:23
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number:          6D
Signing time:             Mon 26 Oct 2026 20:15:07 +0000
Manifest this update:     Mon 26 Oct 2026 20:15:06 +0000
Manifest next update:     Mon 02 Nov 2026 20:15:06 +0000
Files and hashes:         1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: G98zyQizT7QpqPTrjMjMko/lM5VOeEv0J2UJk3mBRsA=)
                          2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: XSk8TRLnQcnajyyzxwmOeH2VC1E5ZNDxh6cE4PqtTW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: Oct 26 20:15:06 2026 GMT
            Not After : Nov  2 20:15:06 2026 GMT
        Subject: CN=6adfb4ca-198a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:87:3d:5d:23:1f:e2:46:1e:60:fe:39:52:
                    72:f2:77:a2:f2:11:91:74:5b:91:8b:9c:2b:bc:51:
                    9a:a4:77:41:fe:37:85:e4:3c:b0:0a:35:66:56:b8:
                    30:65:93:26:30:d8:85:30:c2:bc:17:c4:89:1e:58:
                    e9:82:6c:87:b0:c3:bb:74:b3:51:c7:cd:a3:ce:86:
                    a1:4a:30:c1:5a:ab:4d:d6:32:04:e7:59:8b:17:e2:
                    0f:6d:1f:2b:7a:4d:e9:da:c2:af:15:16:cc:6f:1f:
                    b7:7c:72:2b:96:71:90:a4:a6:6c:9b:f0:7b:9a:b8:
                    f8:fa:a2:21:cc:29:d0:5d:32:a8:95:16:85:d2:7d:
                    63:4b:14:52:9f:6f:43:60:36:0e:c2:0f:a5:f1:42:
                    6b:81:44:66:98:cf:ad:f9:b0:27:da:fa:85:13:ae:
                    35:5f:75:7d:22:1a:c2:aa:ef:27:27:93:46:d2:d3:
                    2a:fa:12:2d:83:78:cb:61:16:c9:e6:0e:3a:60:69:
                    b4:fd:f7:bc:20:8f:f4:1a:2f:64:95:7e:db:70:2f:
                    02:a7:2f:ff:ac:07:d7:37:f1:ab:a4:0e:e0:31:e6:
                    cd:9f:57:7b:45:19:78:5b:27:bf:65:e8:94:12:e8:
                    81:34:75:33:21:5a:f3:05:f9:58:c9:65:65:ba:6f:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:AC:2D:1F:3D:F8:A2:94:D2:BE:9C:EE:76:2F:7B:8F:0F:0D:23
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:9c:3f:c3:7d:29:49:a2:28:1e:04:ae:33:5b:06:ac:7f:
         61:d2:3e:c5:70:17:31:a5:d8:90:2b:8f:48:c1:97:e3:81:98:
         07:60:94:40:fb:9f:65:e6:e0:5e:58:c1:7a:57:69:3e:e8:f1:
         14:11:e0:13:e6:fc:ce:86:1f:f9:76:85:7b:3f:d7:b0:62:47:
         58:0d:59:dd:4a:05:e9:87:8e:ce:d1:75:69:01:75:73:d3:3f:
         21:0f:b6:a3:ea:39:a7:ce:90:74:c4:4e:0c:f6:28:c1:a6:cb:
         27:80:72:f6:0a:69:9f:7f:09:88:70:b6:21:ec:32:a3:9c:0b:
         07:06:11:61:b8:5c:6b:fb:8d:f6:d0:2b:5b:b4:b8:10:60:cd:
         7c:55:03:af:94:be:14:9f:3b:54:18:d8:6c:3d:e3:3d:bf:a1:
         55:95:f9:27:89:c8:84:29:7a:40:c7:20:6c:d2:29:03:5d:ed:
         18:fa:84:ee:dd:6f:1b:38:8d:30:72:c6:5f:90:2a:76:dd:fe:
         47:86:23:4d:bf:4e:63:8b:3d:c7:62:1a:0e:5c:78:9e:02:9b:
         c7:f3:ac:47:44:2d:ae:e7:12:cc:16:8b:23:1a:b5:e3:39:38:
         4d:54:7a:45:91:77:0c:ee:4f:52:d7:8e:ed:d1:bf:23:51:25:
         09:39:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:12 2026 by rpki-client