Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          AFsGWuNmFkbwEhbOcGQhkKJoNIDvHtEZn00VIc5BOlo=
Subject key identifier:   61:80:61:7D:85:28:96:31:A2:D3:C2:DC:11:52:8C:3E:EF:A4:F9:9C
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          013B
Signing time:             Tue 27 Oct 2026 05:48:43 +0000
Manifest this update:     Tue 27 Oct 2026 05:48:42 +0000
Manifest next update:     Tue 03 Nov 2026 05:48:42 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: 6Fu98qZqjSGvKIztK5sGZFUc2dto0LfcT7QP+mDLKAs=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: NFFJXgXuoaxMrml8Oh8vxaW8xrfeeiE5Wfe+px5WY+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Oct 27 05:48:42 2026 GMT
            Not After : Nov  3 05:48:42 2026 GMT
        Subject: CN=6ae03b3b-056f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:be:95:7c:a1:36:a6:e6:03:64:4f:e4:27:
                    75:d5:b9:80:e0:b5:6a:8d:0a:65:85:8c:86:05:d8:
                    fa:9e:58:3e:f5:b5:b5:73:81:f3:25:74:86:61:be:
                    34:fb:fa:b1:3b:71:04:c7:7a:10:ff:c7:cf:18:85:
                    21:5c:b9:56:68:32:a1:0b:35:9d:46:4c:01:7a:e7:
                    db:52:70:47:ca:78:64:8d:d8:5d:02:dc:41:08:e4:
                    01:16:eb:45:45:85:f0:e4:84:ab:ca:34:18:fa:8e:
                    34:1d:2e:fb:2c:12:62:23:c9:e4:cf:73:fb:9d:06:
                    cd:06:4b:0e:3c:e4:99:ad:f6:5c:41:7c:00:fb:67:
                    4d:b8:b7:d1:42:85:5d:d7:fa:47:08:c3:27:9d:9d:
                    92:ae:d1:1b:2c:a6:f7:33:40:d6:5f:f3:65:25:12:
                    1b:ca:d3:b2:fe:a1:37:81:7f:0e:ed:71:83:97:64:
                    cb:86:12:b3:4a:10:e5:f5:ba:75:f0:1f:11:fd:68:
                    46:fa:2e:55:22:4a:76:c4:ff:3d:5e:79:f9:15:7e:
                    cf:4d:f6:b2:86:c4:67:45:35:c4:3e:42:60:8d:75:
                    67:74:7a:68:32:ce:ff:15:8d:98:da:74:20:10:cc:
                    f2:68:a8:bc:33:36:72:63:f9:5c:5e:a4:12:2f:48:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:61:7D:85:28:96:31:A2:D3:C2:DC:11:52:8C:3E:EF:A4:F9:9C
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:48:33:88:1d:11:26:a0:8e:1e:4d:68:86:44:bd:ee:bd:
         ab:26:d9:ce:7a:76:f8:83:a1:db:9e:fe:72:40:e3:bb:d0:90:
         b4:46:b4:7b:cb:b8:f6:b8:5c:f5:86:df:be:06:a4:50:05:03:
         f3:b8:25:fa:d1:a4:5e:1d:51:bf:f3:48:22:81:5d:64:2f:21:
         85:4e:62:17:c4:58:45:c8:ac:b1:24:92:60:91:94:9f:70:73:
         82:25:8f:73:3b:b8:4e:ac:54:58:5f:a3:37:24:41:ac:86:a9:
         fc:dd:66:dc:e9:e0:b7:4e:34:ca:44:ba:71:26:12:d6:ad:67:
         ab:9b:56:9b:07:ef:bf:07:4a:5a:2b:76:ef:d9:a7:dc:f7:aa:
         66:50:b6:0b:0d:15:a8:4d:0b:b9:71:09:83:fe:30:5f:0b:0c:
         d8:6b:9e:54:7e:6f:a3:5e:3b:35:ab:87:bb:39:fe:d2:a7:1b:
         01:a3:8c:42:ba:e9:dd:05:23:0a:5e:2a:b4:bc:6d:02:d3:61:
         42:e4:2b:c0:86:88:07:ef:e1:0b:60:ba:70:de:55:0d:b0:c0:
         a6:a4:84:8f:03:f4:bb:f5:8a:71:b2:c1:66:32:11:43:4b:df:
         70:f6:3e:3d:5e:30:37:af:05:2f:82:fe:38:9d:4f:d4:6f:3a:
         b9:c4:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:17:09 2026 by rpki-client