Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
File:                     U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json)
Hash identifier:          f3EPP5te6sPF6konk1Xe2Golos+YUnIOUjA/7JbzY7o=
Subject key identifier:   2F:38:11:92:BF:BE:6D:AF:42:38:9B:BD:82:05:ED:38:7A:9E:72:DF
Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
Certificate issuer:       /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
Manifest number:          91
Signing time:             Wed 07 Oct 2026 08:04:27 +0000
Manifest this update:     Wed 07 Oct 2026 08:04:27 +0000
Manifest next update:     Wed 14 Oct 2026 08:04:27 +0000
Files and hashes:         1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: 6/coG79UvCvMA7gIIpXZGfNoC9rAisl69s+scLJE62I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
                          rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
        Validity
            Not Before: Oct  7 08:04:27 2026 GMT
            Not After : Oct 14 08:04:27 2026 GMT
        Subject: CN=6ac5fd0b-ab1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:46:00:34:40:b4:3b:1b:e4:c8:65:e4:96:
                    94:43:7e:b5:be:48:79:5e:09:eb:58:bb:26:f1:4e:
                    61:4a:0e:3c:3e:0d:0c:6d:9b:bf:e5:74:4c:09:f3:
                    b4:be:6b:eb:87:f7:bc:77:26:50:ea:1c:c7:c6:d5:
                    5d:b7:46:e7:bc:83:0d:41:3b:e0:3d:36:d6:46:fb:
                    3f:e7:08:16:ec:8e:a0:10:65:ab:7f:f2:df:93:8b:
                    25:1c:e5:bc:7c:38:57:24:0e:21:6c:f1:3a:b8:50:
                    5e:1b:f4:a5:a3:7b:69:50:07:96:a8:7b:6b:06:2e:
                    19:7d:1e:20:e1:37:2a:46:5c:78:9e:44:2f:25:48:
                    c0:71:a0:da:31:9f:27:fa:8a:d1:37:a0:f5:46:e2:
                    92:59:d1:81:1b:f4:45:72:d6:fc:73:66:e9:c5:fa:
                    76:91:3c:d0:00:7a:7b:b6:1c:82:28:2a:ae:25:2d:
                    e9:d0:e5:40:f7:c3:ee:db:be:6f:cd:c4:f4:bf:62:
                    9d:5e:5e:86:0e:c1:96:46:d6:8e:89:3a:c3:1c:48:
                    ab:c4:26:53:af:9c:bc:fd:23:a2:47:58:d8:d1:9e:
                    2f:34:95:1f:c6:24:ce:85:26:e8:d7:ca:c7:da:25:
                    ab:38:01:01:16:47:fd:63:17:1c:0b:f6:a4:bb:93:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:11:92:BF:BE:6D:AF:42:38:9B:BD:82:05:ED:38:7A:9E:72:DF
            X509v3 Authority Key Identifier:
                keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:5b:72:59:2d:7f:3c:59:b3:fb:85:dc:85:a7:30:ba:5d:
         53:25:29:fa:fa:7a:1f:04:47:fa:ef:f7:1f:e3:86:5f:de:11:
         94:5f:8c:9b:8c:0f:c3:99:df:80:49:2e:47:f9:92:3a:4a:f9:
         ee:75:d0:2b:75:ff:b4:32:84:d9:56:0e:c1:a4:8e:d4:ff:4e:
         ab:6e:19:05:ce:11:ea:43:35:7a:95:94:1d:73:e8:ad:e9:15:
         44:71:ca:a7:97:6f:2a:a8:13:7f:c7:a9:80:b7:8b:e2:b5:d0:
         fa:53:c8:6c:33:bd:a5:32:05:cf:f2:8d:68:81:49:92:85:0b:
         d3:22:b2:ea:6d:f7:99:3d:b2:e3:b5:63:8c:84:73:4c:1c:a2:
         da:eb:7e:ae:e8:c6:71:f9:55:8a:7a:08:ce:99:5b:fb:44:ae:
         d2:d6:41:1d:19:52:d2:d9:24:59:06:97:3b:87:55:06:f6:d6:
         0d:a9:96:18:80:09:a6:1c:af:d8:4b:1c:1d:35:5a:3c:13:40:
         f7:09:98:d6:90:19:23:ba:c1:19:cb:32:bb:94:2c:69:b3:7e:
         2d:a5:5f:09:28:a0:04:43:69:da:fa:f5:f6:ad:66:83:fa:d4:
         f9:1c:9c:4b:d4:e9:82:47:47:9f:27:4a:78:28:ad:7d:ab:72:
         93:ab:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:10:35 2026 by rpki-client