Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
File:                     AEHvq_80PMLoP86WztiQWej04sE.mft (raw, json)
Hash identifier:          h/5UnD77nNcu+OOxHqEE0VM41l4ZhN9YjBfhd26kTyc=
Subject key identifier:   91:34:CE:5F:3C:B7:F0:A2:8C:76:0F:82:30:C1:3F:64:BD:B4:8C:6E
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Certificate issuer:       /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial:       03FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
Manifest number:          03F3
Signing time:             Mon 05 Oct 2026 00:27:31 +0000
Manifest this update:     Mon 05 Oct 2026 00:27:31 +0000
Manifest next update:     Mon 12 Oct 2026 00:27:31 +0000
Files and hashes:         1: AEHvq_80PMLoP86WztiQWej04sE.crl (hash: e5/glMA7zqwihAJKTkz9rHJVVvjLNFB84TK/RPI38sA=)
                          2: DC072950DCB911EC8AAB8710C4F9AE02.roa (hash: yIT11F5bzvl0TOgsMOdhBplU4mPhfLVfO6p3F7q06xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
                          rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
        Validity
            Not Before: Oct  5 00:27:31 2026 GMT
            Not After : Oct 12 00:27:31 2026 GMT
        Subject: CN=6ac2eef3-6829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:ec:2d:07:6e:3a:6f:1d:95:43:c5:44:72:
                    e2:d2:f0:c7:a6:21:19:c9:cb:9e:e1:1f:ce:66:ac:
                    ad:35:20:e5:8b:7b:c6:e7:0b:b6:07:6c:ad:e0:3c:
                    1c:c4:c1:18:b3:fe:b2:6b:5f:5b:d8:6e:00:53:32:
                    3c:24:39:38:aa:a6:70:9c:e9:5e:9b:27:69:7c:54:
                    dc:ac:a9:9b:95:79:94:aa:c8:15:af:60:98:a4:d1:
                    9f:c5:9b:7e:cc:a1:53:c0:e2:1c:60:db:ff:83:34:
                    c0:c5:db:9c:99:55:93:5b:03:20:79:0a:28:9e:66:
                    d3:83:35:f1:7c:d8:93:52:9a:1b:cc:fd:06:c5:c1:
                    9f:5e:7e:84:27:4e:0b:71:1c:19:76:e9:b5:a6:f9:
                    11:b4:47:90:2b:2f:fb:cd:82:f2:0e:02:e8:7c:98:
                    c8:3f:ac:13:57:96:25:c5:a0:fd:62:8e:79:c7:b1:
                    b3:91:97:14:89:71:e7:bd:be:48:c3:0a:ad:ad:94:
                    7f:39:6c:83:c0:a6:f8:99:39:20:dd:96:62:bf:16:
                    28:11:45:29:f1:4d:6a:c4:99:64:2a:50:c4:47:d5:
                    07:93:b0:56:53:62:8b:6a:51:78:81:13:60:b9:1c:
                    5e:ec:05:42:2c:d2:9c:1a:ca:61:d1:f2:20:a6:ee:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:CE:5F:3C:B7:F0:A2:8C:76:0F:82:30:C1:3F:64:BD:B4:8C:6E
            X509v3 Authority Key Identifier:
                keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:37:4a:9a:93:79:b7:2c:a4:07:02:97:43:70:47:43:c0:4e:
         b9:2f:93:ec:58:d2:cc:34:e4:da:b8:ac:5b:14:f5:c8:86:22:
         4f:ad:33:e2:66:99:09:37:c3:be:0a:d9:3e:fb:5b:66:c7:dc:
         11:b4:f6:6e:a7:58:9d:9c:d4:fc:31:ed:cf:24:52:49:7e:1d:
         89:e0:95:19:a7:36:c6:ac:0e:dd:c0:75:b4:c7:d0:b3:d4:11:
         fa:80:c5:33:81:e0:2b:f7:03:b5:6e:47:0d:1b:80:fb:43:13:
         15:4d:8b:19:7a:78:a5:96:6d:c9:c1:68:d9:33:b5:bd:02:27:
         01:ef:42:a8:26:02:ae:e6:bf:be:12:a8:59:72:7a:53:4f:db:
         73:2c:9b:71:ab:81:dc:31:12:66:d0:ea:3a:0e:f4:db:ca:af:
         f4:b7:36:d3:b7:37:eb:85:84:18:78:ef:14:57:bd:1e:2c:96:
         d7:c2:71:52:cd:8e:ce:ff:75:7e:55:a5:22:b5:e0:d2:07:3b:
         2e:b3:00:b8:f7:ec:1a:1e:2a:00:8f:28:2e:77:95:c3:f3:36:
         af:7b:3c:c3:92:35:4f:a2:62:89:99:50:07:f5:be:df:1a:81:
         77:fc:9d:d3:43:14:bf:0e:04:a2:bb:d3:7c:cc:3c:5c:36:de:
         ca:96:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:42:59 2026 by rpki-client