Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          9ciKyFvpCkqo17VZu6aNbWuKVfwZUkKZQUVrO78Xr34=
Subject key identifier:   92:91:1C:7B:DC:B5:79:46:D7:34:41:51:4E:69:8F:C3:20:B6:C1:CF
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          018C
Signing time:             Sat 31 Oct 2026 05:04:19 +0000
Manifest this update:     Sat 31 Oct 2026 05:04:18 +0000
Manifest next update:     Sat 07 Nov 2026 05:04:18 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: Fm21leTzAhmRtxY6UG4rI3OPZL6MAicaS+KqaFzPG1g=)
                          2: 900E2938699411F19844B5108747A888.roa (hash: jizyqkTyH+zkwQWvqzJaFbEht/vGvHvuFyzL4PcRYxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 05:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Oct 31 05:04:18 2026 GMT
            Not After : Nov  7 05:04:18 2026 GMT
        Subject: CN=6ae576d3-54c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ff:fe:61:43:77:e4:82:2a:0a:4b:01:4a:1e:
                    84:49:94:6a:7d:60:13:13:77:18:84:28:ac:2d:9e:
                    2a:bd:1c:63:34:27:54:6e:bb:7b:43:51:d0:1e:69:
                    f8:a8:d3:db:29:e2:4c:dd:c8:15:50:ca:8f:34:f2:
                    93:d4:52:45:36:67:29:9d:ee:e3:98:7e:55:93:74:
                    ba:8e:ca:d2:1f:7f:e3:41:7a:ff:99:fd:ca:46:b1:
                    34:0c:7c:0b:f3:b8:d0:41:6c:a5:c3:2e:f5:5a:4a:
                    4f:10:db:c6:3d:51:57:62:af:45:a2:ce:3f:0b:aa:
                    80:3b:d3:57:b0:cb:6a:65:4a:2b:c3:90:2b:0f:2a:
                    00:fd:61:20:8e:3f:a6:f7:40:56:0b:bc:db:50:0b:
                    46:6b:fe:56:c3:3e:b5:16:51:0a:99:d1:41:f4:a3:
                    97:81:e9:a6:58:b6:f7:38:d5:71:0d:ed:b6:c9:c5:
                    52:e2:a0:73:10:9b:0a:a1:bd:7f:f4:fb:e0:42:3d:
                    40:d6:55:1b:70:e4:cb:9e:9d:15:f9:e9:b3:00:4e:
                    96:9a:df:6c:bf:b7:df:f8:58:f5:30:60:a6:f3:6b:
                    f6:c7:65:02:8b:92:1f:3e:3b:3b:22:88:c0:a5:19:
                    3f:de:9b:3f:9c:d3:ae:47:db:12:da:d3:7d:03:0e:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:1C:7B:DC:B5:79:46:D7:34:41:51:4E:69:8F:C3:20:B6:C1:CF
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:16:87:09:4b:da:d7:88:84:70:09:50:f4:d2:71:d8:9f:6d:
         3e:2d:cd:84:92:c7:ac:70:a6:f8:bc:08:0e:71:ae:45:d1:20:
         09:e7:7c:b2:1a:12:f4:fe:ab:ba:01:c6:4a:29:f9:c3:d9:9c:
         e0:73:0c:13:37:f9:f7:86:41:a9:bd:45:cb:db:b1:94:88:d8:
         64:7d:e3:c2:ea:c6:7b:73:04:2a:fe:ea:b8:32:8a:57:90:bf:
         34:4b:f5:81:1b:8a:b3:72:72:f4:cb:54:d3:e3:77:f0:1f:81:
         87:d5:b1:31:b2:5b:a1:e1:81:33:91:ce:14:00:1c:97:06:9c:
         90:86:58:76:cd:8a:16:90:bf:57:99:5a:56:41:2f:52:db:df:
         1c:ab:1c:bd:f8:78:5d:17:9b:2a:68:84:ad:41:b4:ed:50:6c:
         fe:12:1b:c1:05:2d:d4:84:e4:0f:15:f8:df:22:69:82:7a:18:
         b0:5e:c7:4c:96:62:eb:2d:00:fe:c9:80:b4:8f:92:2e:06:c8:
         66:80:c5:5c:4e:32:c1:4e:99:67:25:55:b0:3f:af:df:99:49:
         63:de:65:cb:58:32:42:83:5d:17:08:6c:ac:c7:25:7f:1c:f4:
         57:92:b1:2d:db:ab:7e:4c:13:5a:f5:25:92:4d:4e:e6:43:e5:
         fc:ad:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:16:40 2026 by rpki-client