Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
File:                     kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json)
Hash identifier:          1YTHljXfisOTbov5oQh1zNHTZwBYoErBZqTSGisHvC0=
Subject key identifier:   8D:64:DE:0C:01:F4:C1:4D:BB:87:A5:AE:C2:7A:32:F8:E3:3D:A2:36
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Certificate issuer:       /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial:       04A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
Manifest number:          049E
Signing time:             Sat 03 Oct 2026 00:15:47 +0000
Manifest this update:     Sat 03 Oct 2026 00:15:46 +0000
Manifest next update:     Sat 10 Oct 2026 00:15:46 +0000
Files and hashes:         1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: BDYPrJDSzSPcXg838xZNPEQNfYKGLwe9WCuaBlivXBU=)
                          2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
                          rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
        Validity
            Not Before: Oct  3 00:15:46 2026 GMT
            Not After : Oct 10 00:15:46 2026 GMT
        Subject: CN=6ac04933-8c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:66:8e:87:9b:c2:3d:d8:af:6b:b2:71:69:
                    a8:72:61:0b:72:2a:48:4c:0c:86:1b:e4:a9:11:09:
                    c9:e4:ce:a2:4f:b2:b0:5d:d6:57:bf:c5:20:90:b2:
                    ca:ec:75:2a:18:eb:04:96:a8:93:6d:70:50:54:31:
                    a4:9e:d1:83:70:95:2f:14:91:34:d5:7c:da:65:43:
                    ee:66:a2:88:94:a6:23:8a:3a:a0:84:ed:df:01:5e:
                    77:32:91:a9:f7:b7:f1:97:97:b3:ac:e4:88:0f:9c:
                    37:e4:c7:ea:82:74:09:bd:4d:cb:c6:7a:42:93:bd:
                    3d:c7:da:b1:4d:41:ff:2e:44:90:06:9e:5a:36:5d:
                    65:07:91:a7:5c:c0:f4:07:94:db:5a:fa:6f:de:ae:
                    a6:0b:df:43:f9:84:c1:8e:a7:2a:88:c6:04:5c:b5:
                    75:73:a9:65:6a:ad:4c:fd:a6:ca:12:84:65:4a:d6:
                    48:4d:49:49:c0:b6:57:61:bc:83:db:73:89:f9:f2:
                    96:7e:04:1e:d5:85:85:2a:45:41:e6:85:33:22:7e:
                    92:1a:d4:90:ac:5b:91:6e:d5:6d:a1:73:58:58:08:
                    58:00:3a:8e:7c:e8:5c:2d:75:8f:5f:03:0e:28:14:
                    52:83:7e:ed:8e:35:50:f7:10:f4:bf:2b:59:d2:c4:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:DE:0C:01:F4:C1:4D:BB:87:A5:AE:C2:7A:32:F8:E3:3D:A2:36
            X509v3 Authority Key Identifier:
                keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:7e:ca:78:cf:0f:f9:d1:ab:58:8a:aa:c4:6f:5b:b1:ed:
         4d:a8:1c:82:b7:99:ed:e2:7d:62:c3:d1:79:77:ff:5d:27:94:
         7c:12:0d:f5:35:40:0a:4d:bc:4f:d7:aa:19:d0:5a:8c:f7:e6:
         f6:b7:02:63:a8:c9:28:d8:16:19:45:a7:95:16:f9:af:3b:3f:
         5f:47:f6:6e:71:b3:9a:a2:86:85:be:a3:5c:8a:b4:f0:4a:c4:
         b3:07:47:ad:b7:3b:f7:1c:bf:81:ac:17:0c:c0:55:6e:4f:d1:
         b8:d7:34:13:a0:9d:ec:f4:82:c3:cc:60:f0:f3:b7:6f:1d:98:
         d4:15:28:f8:e3:ba:76:39:d5:53:5b:74:c1:4f:20:7d:8d:b0:
         3c:4a:e2:5c:b6:6a:65:35:95:42:67:90:02:60:df:08:44:b0:
         fd:10:d6:c2:6e:21:f4:07:1a:c5:1d:d5:6d:25:22:92:38:d9:
         52:8c:cf:03:4c:f2:f7:5e:87:5d:c8:9c:8e:38:9e:15:ce:a4:
         66:af:cd:59:48:c4:ac:c5:24:e2:2a:15:41:7f:4d:50:ae:78:
         9d:2c:c3:12:57:fd:c2:24:47:e5:78:df:c6:7c:2f:c7:31:ff:
         f9:19:b2:c0:8f:1e:9d:88:2e:d2:f1:3e:f4:0c:5f:14:64:5b:
         b8:66:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:00:17 2026 by rpki-client