Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File:                     7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier:          8jg3RhJRfcMPNXltOaHFkqnXVtvA/Tu49lgbgm5jJ6Q=
Subject key identifier:   05:DA:71:20:AC:C7:BC:E0:F2:0A:88:7A:62:8B:2B:0A:FE:DE:A4:62
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number:          AB
Signing time:             Sun 25 Oct 2026 07:35:24 +0000
Manifest this update:     Sun 25 Oct 2026 07:35:23 +0000
Manifest next update:     Sun 01 Nov 2026 07:35:23 +0000
Files and hashes:         1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: xtljtgMZek+VvlBHCR0/QO+I5cV0698QCZtYW44V5A4=)
                          2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
        Validity
            Not Before: Oct 25 07:35:23 2026 GMT
            Not After : Nov  1 07:35:23 2026 GMT
        Subject: CN=6addb13b-a4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3f:e8:f1:f2:db:fe:fb:57:e9:c3:f0:d2:11:
                    a2:bc:7c:b2:ec:f0:ad:de:1b:7d:5e:84:7a:50:c5:
                    65:1c:b4:df:1c:14:3b:9f:b5:ed:a7:c1:9c:55:2a:
                    b8:10:67:7d:40:95:5e:1f:77:21:8d:68:7f:f4:e4:
                    eb:d9:a1:fd:30:23:6d:b5:e3:ca:66:ac:f3:e4:11:
                    a6:8c:e0:33:9c:d8:3d:72:30:d8:ed:8e:ed:0a:10:
                    d8:3e:04:08:6d:32:52:e6:6b:38:3a:d6:d7:0e:43:
                    83:d1:97:c5:60:d3:c5:c8:fd:c7:d4:e7:4d:0a:e6:
                    e6:4e:bf:ed:5a:4d:23:6f:f0:3f:6b:c0:1d:16:b0:
                    c9:7b:e7:d1:70:ef:7b:df:8b:69:a0:5f:39:f3:57:
                    7f:33:6d:ab:13:de:1b:0a:a5:68:61:e5:fb:2b:3f:
                    48:10:de:91:6a:fb:0a:f4:94:75:b1:8b:c4:38:6c:
                    0b:d8:8e:5f:2a:ab:e4:32:d9:c5:09:e4:a7:61:28:
                    ed:44:ad:20:3c:35:02:4c:27:b6:0f:91:d9:d1:12:
                    2c:b3:28:b3:2e:aa:a0:d7:c0:c1:2f:1a:8c:53:7c:
                    b8:41:e5:3e:71:95:f2:4c:91:08:82:bc:a8:b5:1f:
                    46:35:e5:e1:1a:96:be:ce:68:55:f9:ee:9b:5c:e7:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:71:20:AC:C7:BC:E0:F2:0A:88:7A:62:8B:2B:0A:FE:DE:A4:62
            X509v3 Authority Key Identifier:
                keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:8b:59:1b:12:ac:65:83:0b:ec:d5:77:94:64:43:80:c6:
         d4:f9:04:59:fa:0d:df:01:0f:e1:30:67:4e:91:8f:d3:7d:d9:
         93:40:83:0b:36:3b:03:7b:ce:ce:b1:19:3a:01:49:49:5e:5b:
         2b:ad:76:e7:83:72:1f:ae:f5:f5:a7:d7:17:7f:85:5a:be:99:
         72:b0:9f:78:f0:8d:e7:93:cb:39:18:56:81:2c:03:6b:34:d0:
         44:26:5c:38:cd:b9:2b:b3:fb:15:09:32:b3:8f:84:de:01:3f:
         2a:57:a5:e1:3d:77:72:d6:9d:23:e3:d8:c8:30:83:62:99:65:
         7c:34:18:ac:b6:28:a0:71:3d:cf:6b:c9:24:02:b0:f3:dd:8e:
         29:54:60:4b:4e:f6:6a:f1:39:1e:ed:1b:4f:97:34:0d:46:dc:
         43:89:c3:40:28:a6:87:07:3a:d3:01:24:ab:72:8a:ea:22:40:
         2b:78:b0:75:d4:ad:69:7b:8a:88:e4:ec:6f:13:39:d3:89:55:
         64:99:fb:f6:f9:51:ba:99:5a:85:73:93:ae:e2:a5:20:86:51:
         81:5a:41:8d:78:f6:84:f6:65:d7:83:f3:6c:3d:2e:54:8d:0e:
         a7:79:ff:91:70:12:73:ec:f5:f8:ce:e6:c8:4c:e0:e8:d0:5f:
         e1:8e:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 13:23:51 2026 by rpki-client