Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
File:                     -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json)
Hash identifier:          mIuKons3wEQqWfGfzuZo17v9jh+KYTwchqr052cLATQ=
Subject key identifier:   98:8C:AA:2A:13:2B:6C:78:FE:8B:C8:CC:F6:5D:5F:BB:F2:0E:7F:7C
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Certificate issuer:       /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial:       0788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
Manifest number:          0769
Signing time:             Fri 30 Oct 2026 21:48:44 +0000
Manifest this update:     Fri 30 Oct 2026 21:48:43 +0000
Manifest next update:     Fri 06 Nov 2026 21:48:43 +0000
Files and hashes:         1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: c23cW5jWPIW3ypvjJP7dwXb7wdyGCQtkxky22qrKjIg=)
                          2: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: qXGDfI73IfnHMAp4HxrY2CaG3uaWhC+oKVSUMLz1LFQ=)
                          3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: 48L080JyJlktjDJm5JUMWcLPjjHEK1WWZAsxDZsWQPg=)
                          4: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: n+OBMglPTvErv+P6ZUgv6kKsWJf1PaCgzoYVPi34f1Q=)
                          5: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: XoRUOC4UUdsqAWL8b8mRp3Lb8qKoXQVLqNUMMLIx7wI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
                          rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 17:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
        Validity
            Not Before: Oct 30 21:48:43 2026 GMT
            Not After : Nov  6 21:48:43 2026 GMT
        Subject: CN=6ae510bb-6d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:07:b9:29:03:18:cd:2f:6d:fa:8f:42:b5:
                    2c:f0:a7:bf:ba:f8:bb:13:d6:dd:8b:89:52:02:fd:
                    17:bb:8c:ae:48:b4:91:0f:9e:84:c6:d3:c6:7c:a4:
                    b0:95:8b:e2:66:39:ba:50:a1:49:fe:56:71:a2:8c:
                    8e:eb:2b:d8:80:32:18:4c:36:de:cc:45:6c:1e:eb:
                    1d:77:b8:52:e2:eb:61:1f:f5:0e:26:10:d6:95:71:
                    7c:4e:09:c4:5b:9e:5a:23:e3:c6:5a:cb:96:fc:6d:
                    b3:6e:de:29:a6:8e:c6:04:0e:90:2c:b8:2e:46:7f:
                    1d:d5:bc:07:9e:05:86:44:3c:96:5f:a7:66:6a:4b:
                    76:1e:6d:11:56:6b:ed:96:ab:ec:f4:8a:87:06:27:
                    77:a5:9a:05:21:83:b9:ab:37:ae:25:8d:fe:69:37:
                    ac:a2:f5:94:11:4e:6e:8a:ac:39:44:f4:45:81:bc:
                    85:35:59:bc:c1:15:51:da:be:42:5a:cc:69:f8:28:
                    20:70:de:bc:76:92:33:76:b3:e6:ca:c6:9a:35:fc:
                    fa:b5:63:fa:3b:e3:6f:77:26:2c:ea:fd:52:28:8b:
                    e7:4a:ba:4d:cc:4f:57:b1:dd:8b:c3:2b:69:40:d2:
                    c6:fc:8a:ef:4d:cc:13:ac:91:c7:df:ba:f0:83:b0:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:AA:2A:13:2B:6C:78:FE:8B:C8:CC:F6:5D:5F:BB:F2:0E:7F:7C
            X509v3 Authority Key Identifier:
                keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:34:56:a4:05:4e:16:35:e7:a5:53:aa:83:0c:ad:75:0b:
         9e:a4:98:70:60:ee:3a:d9:5e:a8:3b:a1:a5:42:53:18:e4:2b:
         5a:b1:1c:11:47:f3:c3:ef:19:9c:f2:e4:9d:8b:c1:8b:4a:ab:
         c9:4f:2a:a1:7c:9a:89:74:2d:37:e9:0e:f6:7d:a6:f2:14:4e:
         be:15:ac:2b:cb:78:d2:ab:19:61:de:c9:15:aa:f0:0f:21:42:
         f4:14:2a:a3:b1:a4:73:8c:8e:5e:e8:20:a1:a6:e6:fe:1d:7e:
         8e:4b:90:68:1d:72:a6:49:2d:50:66:a4:96:36:a3:08:7a:ae:
         89:57:47:93:94:a9:18:bd:8a:b5:be:04:53:0b:63:5d:09:aa:
         49:fd:2f:e1:ea:f4:93:72:98:3c:46:9d:f4:9a:60:24:ee:66:
         6c:ba:10:97:0a:a9:f8:1b:ea:a6:4c:0b:f9:38:7b:f0:88:57:
         ad:56:08:9f:b9:a3:1a:12:18:a0:0f:79:22:37:67:2f:be:de:
         66:df:10:8c:cd:81:fb:c0:a6:6e:7f:37:33:fb:44:cd:9d:5f:
         af:e1:e0:4e:ca:1e:68:ce:91:0c:b3:4c:44:28:c6:fd:d9:75:
         7c:18:c9:9e:58:d0:c6:a9:cc:b1:6d:5a:16:45:00:db:5a:e4:
         e9:78:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:21:48 2026 by rpki-client