Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File:                     2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier:          lJOKOFgKBAXiolBiR060ruHaLdvHJA/3qj0owq2efuE=
Subject key identifier:   E8:50:F3:D1:B2:3A:5A:7A:D0:3C:0C:94:AA:95:C2:19:19:56:30:B2
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer:       /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number:          0199
Signing time:             Sun 11 Oct 2026 04:52:05 +0000
Manifest this update:     Sun 11 Oct 2026 04:52:05 +0000
Manifest next update:     Sun 18 Oct 2026 04:52:05 +0000
Files and hashes:         1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: k5Hayyq+wBPkD3Tr0t/hNcOJKU1cMDq43bpBcO4pe6U=)
                          2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: a57NdJ1gk+iJiRBW3C9KSb5FNlrBpcnk273JBCCOK0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
        Validity
            Not Before: Oct 11 04:52:05 2026 GMT
            Not After : Oct 18 04:52:05 2026 GMT
        Subject: CN=6acb15f5-82c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:3b:36:f9:14:7f:70:26:97:10:bf:1f:4c:
                    16:58:20:3b:24:91:61:89:d0:fc:7e:a9:f9:69:1e:
                    58:2b:34:e8:23:22:01:37:bb:71:4c:f0:e9:10:c5:
                    14:1f:b0:14:a3:ea:c9:fd:72:5c:67:30:88:af:14:
                    25:6f:66:72:ae:42:a6:f6:86:8e:8e:da:31:49:6c:
                    9a:31:4b:f6:f8:9a:df:59:7b:80:73:85:47:d0:5a:
                    07:ea:9d:f3:0c:6e:d4:08:53:09:59:10:2c:91:62:
                    f9:1a:2c:0d:10:eb:49:96:56:a7:e9:09:49:20:22:
                    d9:d6:d8:23:17:a0:52:41:d1:4d:c6:f0:92:6b:45:
                    a0:f9:b5:52:1c:37:05:f6:c3:28:55:58:d6:db:c5:
                    86:9e:f6:d1:31:ac:71:af:ee:de:08:c0:7e:58:ab:
                    63:97:de:a7:20:c2:df:40:47:88:77:03:64:58:7a:
                    ab:17:20:25:6a:ee:12:42:06:fe:15:cb:be:c5:a5:
                    9f:4b:20:9d:f9:40:e8:c9:06:71:37:35:c6:ee:03:
                    ff:a4:88:0e:c2:93:7a:7a:49:83:62:b3:04:ff:d2:
                    4c:de:0e:b5:49:48:4c:96:1a:e0:a2:58:aa:3e:72:
                    01:8f:5d:77:df:91:92:71:dd:b4:b7:7f:56:4b:c9:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:F3:D1:B2:3A:5A:7A:D0:3C:0C:94:AA:95:C2:19:19:56:30:B2
            X509v3 Authority Key Identifier:
                keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:09:0b:e5:2f:3e:1f:04:11:2f:94:1a:50:52:77:03:1c:a4:
         55:40:72:69:75:e4:f6:20:79:32:0d:a5:bd:fd:4f:3c:d0:df:
         6e:5e:35:a7:45:ff:40:64:54:ea:c8:fe:59:00:6f:51:d6:e1:
         01:90:d3:0a:f9:21:c1:9a:00:44:bb:08:9f:f8:07:c9:3f:07:
         60:11:ce:e5:30:75:1c:d0:09:29:ba:de:eb:57:64:43:39:4b:
         7d:11:41:2c:73:e1:bf:03:d7:4d:30:a2:10:70:74:64:42:c5:
         d2:c3:2c:d4:c7:a4:33:66:54:e6:f1:f0:c2:05:74:94:93:34:
         cf:93:68:3e:d1:bf:af:78:ce:7c:98:88:fd:2c:89:c3:20:a0:
         f4:e8:0f:dd:59:d4:e7:5e:ed:bb:fb:7e:be:db:38:88:f0:61:
         f2:c9:0a:cb:71:fc:83:ae:52:dd:b1:cd:14:89:8e:98:37:7d:
         af:d1:b0:45:e2:ba:38:2d:2c:33:d4:5c:0e:0c:6c:0a:33:e4:
         15:de:6d:1c:61:12:8e:cd:4e:61:a2:fe:3b:f9:81:14:c7:e4:
         5e:3c:e1:51:93:8f:ba:d1:a7:20:2f:7c:37:f7:e3:a4:cd:b0:
         ab:4e:74:82:98:bf:ea:43:21:05:35:f1:77:28:fe:45:d6:3b:
         1f:1b:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:19:39 2026 by rpki-client