Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
File:                     h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft (raw, json)
Hash identifier:          26N0evZIghTHsPV1TBrogWz2mXmj+PDxcaGxbOxgFS8=
Subject key identifier:   CF:DE:02:70:16:F9:76:47:72:8A:0C:EE:EC:BA:6B:06:0A:2F:91:20
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Certificate issuer:       /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial:       2712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
Manifest number:          26FB
Signing time:             Sun 04 Oct 2026 15:40:51 +0000
Manifest this update:     Sun 04 Oct 2026 15:40:50 +0000
Manifest next update:     Sun 11 Oct 2026 15:40:50 +0000
Files and hashes:         1: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl (hash: xw4NA+psCkhMulj//X3FQf0ceF1h9fC3ztRlxVJ2DVE=)
                          2: 764601EE6A7A11EFAF10EC37C4F9AE02.roa (hash: Ug/gKQfBtiv/suzOx+0oDYakgLI7kxXBIVwaz3qVijk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10002 (0x2712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
        Validity
            Not Before: Oct  4 15:40:50 2026 GMT
            Not After : Oct 11 15:40:50 2026 GMT
        Subject: CN=6ac27383-8c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:58:35:74:90:a7:37:a5:0f:4a:bd:ee:c6:
                    4b:c1:f4:5d:f9:9b:ec:aa:8f:16:d9:6f:9f:1d:44:
                    02:00:53:0b:76:ff:6f:18:6d:b0:59:64:30:f6:91:
                    94:9d:02:d6:6e:7a:26:4d:f3:f1:d9:13:9c:20:26:
                    d9:eb:0d:c1:58:ac:f8:33:ab:2b:aa:ce:8e:90:b6:
                    86:4a:f7:eb:0d:f4:e9:c3:76:f1:54:f4:73:53:76:
                    8e:9d:12:93:c0:86:77:8a:84:7f:f2:e3:de:a2:d2:
                    03:b3:ae:9b:db:8f:ca:cb:89:2c:39:49:b0:d3:1a:
                    19:84:f5:a5:e4:8f:2c:be:58:a5:63:e4:da:6e:12:
                    7e:31:9c:d4:7d:36:97:43:33:ec:6b:8c:41:b3:a7:
                    d3:82:7f:fb:ee:5f:7e:00:c5:7a:59:e7:2c:b6:3d:
                    c1:b4:b3:d4:83:22:60:6f:25:f1:96:c1:2c:50:bf:
                    9f:b4:f8:35:62:5c:bc:d9:b2:85:6f:51:af:a6:5f:
                    28:8c:de:1d:07:a0:0b:38:2c:f3:5c:8b:b7:45:09:
                    32:9e:9e:49:bd:af:1b:23:01:8d:56:40:74:0c:9b:
                    7c:15:2e:92:0c:64:41:1e:c5:9b:dd:b6:cd:2a:5e:
                    40:0e:bc:74:aa:71:48:60:85:42:8b:b8:71:60:32:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DE:02:70:16:F9:76:47:72:8A:0C:EE:EC:BA:6B:06:0A:2F:91:20
            X509v3 Authority Key Identifier:
                keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:ca:ae:43:a6:58:d6:a0:04:b6:43:a6:5d:18:b0:94:c9:
         ea:0a:fb:26:73:f6:e1:88:32:6e:4e:c3:14:36:9b:b4:a4:8a:
         4c:0d:7d:0e:20:6c:e4:9c:d9:70:04:46:fd:e0:8e:c4:4f:2f:
         5f:c8:cf:4a:1a:42:bc:d5:57:79:c9:e3:a4:73:73:9e:cb:81:
         c4:a8:63:53:d0:7a:3d:47:d9:d6:30:c6:8c:4b:48:53:16:cc:
         d6:a9:0d:ed:f3:3d:26:d8:1f:3b:2c:63:44:ec:64:11:c9:50:
         10:c2:80:26:74:75:14:d8:5b:88:db:c6:fe:9a:f4:55:09:78:
         8e:68:8c:49:e7:f6:82:01:0e:1a:e9:2d:1d:ef:77:a4:51:94:
         c0:3d:45:f5:a4:49:17:91:5c:15:fd:b0:de:7c:f0:03:4c:92:
         ae:0c:b3:51:8e:49:b4:8f:75:cf:2c:32:0c:1b:19:bb:eb:da:
         40:29:26:4b:10:5b:93:ae:9a:25:01:03:c6:f5:44:05:4b:10:
         78:09:f9:32:36:d4:ce:bc:9f:d6:43:4f:fd:8a:01:f8:89:e6:
         d2:4c:8e:4c:05:1b:f0:d9:50:d9:50:74:d6:58:84:87:87:9f:
         83:64:88:9a:98:4d:df:dc:d2:ec:b1:e2:7a:dd:5e:0b:69:2e:
         77:70:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:42:40 2026 by rpki-client