Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
File:                     -mAalrTnqFTJ8SflGdb-adTWa2Q.mft (raw, json)
Hash identifier:          7dj8685HJOYSmxX04iShZCRPJ8dNKjzeVcrdU89z6Z8=
Subject key identifier:   03:96:57:3A:6F:D4:E4:5D:20:96:AB:73:D4:C8:B9:30:32:B2:7C:B3
Authority key identifier: FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
Certificate issuer:       /CN=A919CD86/serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
Manifest number:          54
Signing time:             Sat 03 Oct 2026 08:39:15 +0000
Manifest this update:     Sat 03 Oct 2026 08:39:15 +0000
Manifest next update:     Sat 10 Oct 2026 08:39:15 +0000
Files and hashes:         1: -mAalrTnqFTJ8SflGdb-adTWa2Q.crl (hash: 3c5a+RVuICOu3J2ve0KE6jBHoWC57ko8dEv4fyBVrZ0=)
                          2: 90D7D3723F8311F18CBDD8DAB0833773.roa (hash: P6a6wR+MfhCWdAFG07wpqZk3513aDze1znpd7LlZfvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl
                          rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CD86, serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
        Validity
            Not Before: Oct  3 08:39:15 2026 GMT
            Not After : Oct 10 08:39:15 2026 GMT
        Subject: CN=6ac0bf33-f74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:e5:e1:85:59:f9:0a:16:00:bb:04:8f:be:
                    44:00:60:98:01:9a:26:2a:b5:7d:6c:a1:0f:a1:9c:
                    10:2f:2f:6e:24:72:57:e3:a2:dd:02:c6:63:e2:28:
                    fd:21:c6:24:e5:86:2a:31:ac:08:cd:ca:19:56:f1:
                    a1:8d:2f:ce:7a:b6:e5:e9:ea:bf:73:44:f7:b1:e5:
                    52:9f:8e:9d:99:17:c3:3f:3b:61:a0:c7:36:3a:58:
                    59:a4:00:b6:48:94:2f:ac:6d:51:ce:88:82:aa:73:
                    fd:e6:2d:12:0a:72:ed:69:8a:f4:62:4c:91:c6:57:
                    0b:d5:61:80:3d:b4:ca:a4:19:d8:11:9e:82:e7:7f:
                    e7:b1:ef:7f:15:a7:3f:2e:6a:cf:87:9d:32:03:ba:
                    c8:ec:cf:92:c5:80:f1:51:4e:57:79:73:d7:39:54:
                    3a:70:43:d4:20:97:2f:17:1c:c0:83:10:56:b1:d0:
                    81:dc:db:9f:43:55:bd:1e:91:bb:a9:e9:a2:2c:74:
                    8a:80:c7:7e:ae:67:22:e6:1b:0d:c0:29:fb:6d:4f:
                    15:1d:f3:47:b6:ae:f8:5c:6d:86:5b:f1:3b:1e:31:
                    17:dc:5f:6b:35:44:2b:ca:9c:4d:06:f4:3d:b7:3a:
                    f2:cd:58:67:c4:e3:02:dd:e9:7a:28:5c:38:e5:4a:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:96:57:3A:6F:D4:E4:5D:20:96:AB:73:D4:C8:B9:30:32:B2:7C:B3
            X509v3 Authority Key Identifier:
                keyid:FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:f9:f9:e1:c0:8d:bd:52:cd:17:87:f6:54:72:45:ca:72:
         53:ad:f1:c6:35:42:4b:4f:31:2b:aa:cb:0f:c2:e3:8f:f2:d9:
         47:fb:8f:f7:03:0f:a3:1f:9f:68:96:f6:5d:a6:1b:c2:25:f5:
         18:e0:6b:b4:d4:3d:f1:c8:0a:f5:de:26:4f:da:1f:b6:95:14:
         32:92:60:1d:bc:41:c6:9a:81:80:78:03:97:a9:5c:a3:7e:90:
         26:d9:5f:b7:cb:ce:7c:5b:81:4e:58:86:cc:a8:f7:fc:62:95:
         86:0d:75:3a:ff:66:a8:2a:a8:91:6f:3a:28:36:0e:ad:f4:3b:
         aa:b0:17:fe:7a:c1:e6:db:3b:2e:fb:18:57:d0:89:91:a8:ea:
         a7:4a:69:2b:3b:54:18:9a:6c:29:8b:b7:87:2f:da:36:ed:16:
         2b:ef:bc:55:d8:7b:c9:ec:30:74:10:71:56:55:4d:02:b1:fe:
         2d:9d:e5:cc:4e:a3:fa:10:ef:87:f5:2f:61:54:67:b7:a4:bc:
         c4:96:92:49:0a:88:b5:88:aa:8d:a5:18:b5:71:49:37:75:3f:
         5f:60:1d:4a:20:69:24:19:26:47:d0:c5:79:50:36:ca:07:7b:
         b4:06:35:82:37:75:b8:28:24:85:5d:6e:b6:e7:50:6f:27:10:
         99:b8:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:20 2026 by rpki-client