Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
File:                     leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json)
Hash identifier:          RCy2JkS+3sqBQE7oq6XmViXrunuArPb4r653Dj3JC/k=
Subject key identifier:   72:B9:8E:B9:79:E2:88:28:DF:BD:99:2F:7C:99:52:5C:29:23:5A:D7
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Certificate issuer:       /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial:       1226
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
Manifest number:          1219
Signing time:             Mon 26 Oct 2026 17:07:47 +0000
Manifest this update:     Mon 26 Oct 2026 17:07:46 +0000
Manifest next update:     Mon 02 Nov 2026 17:07:46 +0000
Files and hashes:         1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: V9ZZOfHemcWvUwm0phVw7EnoZ4+RFJiVwXnKkOMZZJM=)
                          2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
                          rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4646 (0x1226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
        Validity
            Not Before: Oct 26 17:07:46 2026 GMT
            Not After : Nov  2 17:07:46 2026 GMT
        Subject: CN=6adf88e2-e5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:b5:e2:c1:20:b8:72:81:59:32:26:2f:64:
                    72:1b:6a:89:ed:83:1e:b3:42:a2:0f:36:ba:a0:7b:
                    62:6c:6b:92:86:a8:47:68:99:d3:c6:b2:25:09:35:
                    e2:19:d6:29:33:44:c3:33:a1:97:18:fc:60:79:4c:
                    14:c9:d2:b3:4c:0c:43:9a:97:9d:0c:cf:8d:dc:93:
                    bf:33:0f:de:b8:b8:80:c8:58:e5:ae:c0:db:e8:27:
                    57:c4:f3:0e:fc:ac:59:c7:2c:d1:92:83:cd:9b:64:
                    17:d6:c7:2e:82:31:90:68:ba:d2:a1:1f:f9:92:6e:
                    ea:bb:2f:85:ad:95:38:c5:52:db:ff:c2:f3:ea:67:
                    dc:33:37:9b:7a:2a:63:19:ce:fc:f4:59:38:db:7b:
                    a2:21:00:d9:84:30:ab:5e:5b:5d:49:49:9f:b3:67:
                    c9:43:79:f6:34:52:ef:a2:bc:cb:33:47:59:a0:5f:
                    5b:a1:47:4f:f5:37:3d:3b:51:87:62:98:c0:79:2d:
                    ec:03:65:d7:b6:df:90:89:e7:15:fc:a2:01:72:6b:
                    77:7f:f6:cb:30:a8:eb:39:c7:e6:ce:6e:f7:ba:fc:
                    ac:bd:9d:7d:42:76:74:ee:2a:ce:fa:0a:33:50:ef:
                    9f:27:82:74:59:d9:ef:2e:d7:a3:0d:8f:0d:df:19:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:8E:B9:79:E2:88:28:DF:BD:99:2F:7C:99:52:5C:29:23:5A:D7
            X509v3 Authority Key Identifier:
                keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:cb:7c:2f:87:36:3f:52:61:a4:00:fa:55:34:c3:ca:a3:
         76:cd:69:68:bb:f6:97:4b:4b:85:8d:bd:52:9b:48:a3:84:79:
         59:36:42:5c:24:61:13:da:33:96:af:27:1a:5b:99:33:eb:df:
         fa:3d:4a:69:1d:aa:b1:68:63:5f:11:31:45:b4:1f:e0:8f:e0:
         c7:1b:db:b2:fe:ef:26:95:d8:c2:b5:0f:95:2c:8c:cf:f7:f2:
         d7:6c:33:be:26:f4:0f:49:0b:a3:26:d0:a1:8b:98:94:98:a6:
         a9:d5:88:b7:e0:4c:ea:0d:38:74:26:70:9d:cf:6e:5b:4c:b6:
         c4:ec:50:bb:69:33:07:89:39:80:58:0d:e8:37:c3:57:2c:48:
         c5:3b:e6:6a:c5:23:aa:54:0a:32:c5:81:49:b8:34:ef:26:e6:
         39:3f:43:af:b6:b3:f2:a3:50:49:5e:86:53:e5:22:0e:87:bc:
         ce:e3:de:6b:fa:ad:28:56:83:3f:c4:7b:c4:59:a5:94:8f:83:
         ae:a6:9e:15:e6:e4:62:d9:a2:85:31:69:05:09:86:ae:1a:4c:
         75:3b:9a:c9:4f:8d:7d:93:c7:e3:88:15:15:6d:26:7f:ff:d3:
         30:63:18:2a:96:18:e7:a7:7f:dd:36:09:aa:d8:d6:82:f4:63:
         ac:78:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:41:43 2026 by rpki-client