Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
File:                     TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json)
Hash identifier:          Qd+N9NrpwzIeSpdvOodDNtTtZqCv6xI4Hou35PMd5RU=
Subject key identifier:   D7:1A:AB:5C:C0:A7:19:5B:90:88:96:C7:12:DB:B0:BF:EC:2F:B5:8B
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Certificate issuer:       /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial:       1915
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
Manifest number:          18FD
Signing time:             Tue 06 Oct 2026 16:28:49 +0000
Manifest this update:     Tue 06 Oct 2026 16:28:49 +0000
Manifest next update:     Tue 13 Oct 2026 16:28:49 +0000
Files and hashes:         1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: jg2IOEYvW/LbZw9C7oHMuxsee2xI98Mo9uulbgbkIfg=)
                          2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: TAF/4rrr92fj80k4rXF09UZ7GAsTjO+mKvPw6lKrblE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
                          rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6421 (0x1915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
        Validity
            Not Before: Oct  6 16:28:49 2026 GMT
            Not After : Oct 13 16:28:49 2026 GMT
        Subject: CN=6ac521c1-07d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:73:d8:c9:55:cf:da:51:57:08:f5:c1:4b:
                    fb:23:85:37:08:c1:cb:de:a7:17:81:b4:62:70:3f:
                    9b:ae:e5:cb:2c:c5:a1:d9:2a:d4:ae:64:81:bd:41:
                    d3:9c:9e:a5:c8:2e:66:28:05:ba:fe:63:c8:90:d7:
                    8b:c7:da:9e:33:11:26:44:38:aa:51:f3:44:e9:32:
                    a1:ab:10:a4:7a:99:a2:6a:97:8f:79:57:10:2f:fb:
                    a5:f9:ec:29:47:5e:bd:a8:24:a7:25:1b:37:9b:f1:
                    9f:0e:98:17:66:5c:9f:6d:b8:7c:19:ce:5d:28:c6:
                    ef:9e:80:cc:4e:e1:a0:51:c6:ca:7e:b4:92:f4:4c:
                    69:03:a8:41:c1:7e:ed:7f:71:32:81:5b:7c:03:04:
                    d4:1a:95:ea:ec:e7:08:37:5d:d4:62:e7:34:e7:bb:
                    b1:aa:1f:7b:be:8a:67:38:7d:a4:42:e9:80:12:d0:
                    39:37:a0:7c:76:4c:5b:00:65:19:ad:1e:59:b1:54:
                    d3:18:0c:46:5f:b2:17:54:0d:63:03:d8:a2:77:48:
                    06:a2:ef:a8:e5:83:f9:ff:ee:45:8b:a0:6b:81:cf:
                    de:42:82:2f:c3:97:1a:e5:fa:98:10:9d:a7:6e:8b:
                    5b:7b:20:c1:6d:3d:fa:10:94:71:5b:e6:4d:9f:48:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:AB:5C:C0:A7:19:5B:90:88:96:C7:12:DB:B0:BF:EC:2F:B5:8B
            X509v3 Authority Key Identifier:
                keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:55:14:61:e8:b8:6d:4b:0d:81:5d:31:d7:0b:af:19:8c:
         6e:69:17:8e:3b:31:d3:1d:87:73:54:32:38:84:82:03:ec:a6:
         f5:5d:1a:ad:7b:71:4c:7a:5d:0d:80:68:5a:d5:7a:32:d2:04:
         5b:dc:b6:72:88:fd:4d:2d:c6:12:4d:ab:ea:93:44:57:b7:fc:
         54:a1:e5:d4:88:f5:87:15:f9:35:5f:af:a0:47:64:89:54:06:
         d6:e8:9c:62:75:f8:14:eb:82:01:83:aa:2d:be:10:93:ba:6e:
         59:84:18:e9:5e:00:88:3a:56:74:94:20:2b:f6:c5:10:5f:a9:
         8f:99:e7:5a:10:58:b1:a7:d8:71:0c:36:10:d5:d1:ef:b0:eb:
         a1:05:2d:9f:81:92:c5:5d:a5:b4:33:de:f4:f9:fa:4e:de:ce:
         4f:50:aa:e7:05:a9:79:41:e5:79:87:1e:b7:1a:61:07:3d:44:
         6b:34:f0:d5:2c:a8:0b:9f:75:29:57:2f:5b:35:69:c7:05:d4:
         cc:d8:46:d3:8d:96:c3:2e:3a:35:67:d4:2b:50:d9:74:a5:78:
         60:20:82:c7:9a:2e:09:6f:62:6f:0d:2f:10:dd:a8:61:0f:e9:
         96:07:72:8c:40:a6:42:87:f7:bd:e1:a6:bf:c5:1f:3f:c8:9c:
         f8:0b:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:04 2026 by rpki-client