Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File:                     Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier:          YxkaxtkVZQDUr3UlTnmQYXjhxzNkmWhyuvVE0BmTkDI=
Subject key identifier:   99:86:33:ED:95:57:E9:33:59:DB:A9:C7:9A:54:56:EE:C7:D4:7E:FB
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer:       /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number:          0162
Signing time:             Wed 07 Oct 2026 05:33:07 +0000
Manifest this update:     Wed 07 Oct 2026 05:33:06 +0000
Manifest next update:     Wed 14 Oct 2026 05:33:06 +0000
Files and hashes:         1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: mgdM5G2wKRGrz3wNh+vpHmEviyjXIH3/8pg1VgG6cVc=)
                          2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: k13/oiDM+4Sed6PAxjKJdfsAARWmsAIGq3EH0KkUFBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
                          rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
        Validity
            Not Before: Oct  7 05:33:06 2026 GMT
            Not After : Oct 14 05:33:06 2026 GMT
        Subject: CN=6ac5d993-8a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:f4:93:90:93:36:46:9f:e1:2b:61:e8:ed:
                    1a:40:da:1a:4f:2a:8d:ec:cd:32:40:70:dd:b5:cf:
                    c4:88:ff:67:fd:ec:22:2c:ec:d3:e0:3a:49:ac:19:
                    93:f3:8e:cc:e3:d9:1f:15:89:b3:4c:99:69:18:ce:
                    7f:36:d9:a9:89:68:83:f5:ce:6e:92:68:7f:a2:e3:
                    b1:e2:fd:c9:a6:da:b6:90:cc:1b:1d:4f:a7:e9:19:
                    dc:1a:29:d2:7f:ca:8a:22:44:50:af:07:74:11:48:
                    78:32:cc:73:ce:45:09:cc:9a:07:29:a7:fd:f4:b5:
                    27:b7:d7:0f:6f:be:74:4d:6b:2d:09:51:a7:d6:ea:
                    90:51:6f:32:8b:32:f2:32:ca:78:a5:4a:4b:d3:1c:
                    b8:60:1f:59:c4:07:c3:6f:88:e5:a8:1b:9e:aa:1d:
                    0e:05:3a:80:d8:35:50:66:9e:f1:6d:66:98:21:db:
                    49:be:db:7a:d5:b4:a1:94:fd:66:cb:1f:5d:5c:05:
                    8b:dc:82:10:2a:94:ff:26:79:89:5c:d0:c5:3b:fc:
                    3b:59:47:ed:6a:2a:14:c9:6c:12:5a:0b:ba:42:2b:
                    42:8a:d8:b0:13:cf:b3:bd:0c:51:6b:1a:bd:09:20:
                    60:51:ad:0a:37:29:7d:39:f8:ea:9d:b5:d0:9a:ed:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:86:33:ED:95:57:E9:33:59:DB:A9:C7:9A:54:56:EE:C7:D4:7E:FB
            X509v3 Authority Key Identifier:
                keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:80:66:d4:51:25:ae:31:c0:10:d4:85:78:e5:34:7d:69:09:
         f8:ae:06:f3:f7:02:08:c3:89:a9:16:37:19:92:bd:d9:eb:9b:
         99:f5:27:65:01:88:69:ae:bd:98:cc:f9:e7:bd:66:96:3b:17:
         35:fc:1b:2e:b0:6f:29:67:e5:77:d6:1a:98:25:a4:ae:cf:20:
         94:29:07:ef:ba:26:67:01:3d:69:9a:16:92:7b:8c:9f:b5:99:
         74:07:06:06:46:18:8f:c1:9d:36:1c:36:2f:cb:91:a0:63:58:
         eb:f7:37:2f:dc:4e:50:55:5f:75:5b:e6:ef:dc:3b:b4:56:bf:
         ca:fb:fe:38:31:26:47:38:c4:b5:a4:92:c7:8a:f9:67:3e:36:
         ba:db:73:2e:7e:36:52:e7:2e:d6:0f:06:03:79:42:5a:e1:55:
         68:dd:41:81:63:00:ef:2b:fb:9a:4f:9e:ad:43:82:38:52:2d:
         f3:66:3c:79:0c:a9:72:2d:e5:fc:cf:ec:f2:94:0d:48:b9:7a:
         6b:8c:5f:2f:dc:5e:7c:3d:26:52:6a:ee:4a:7d:1a:af:16:4f:
         82:e8:1b:d3:aa:07:4e:91:72:a7:0b:58:9a:e5:27:cf:12:b4:
         a2:04:12:f3:b2:c2:f2:35:9e:44:0c:4c:93:e7:9b:d2:db:28:
         51:57:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:28:12 2026 by rpki-client