Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          lZT32f1QEkOg+ZgtBYt0Zh/a1JP8hNVb/86HGbJ+Qcg=
Subject key identifier:   5C:04:3A:99:40:C3:69:47:F3:66:EC:95:47:6E:16:A5:57:3A:40:3F
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2883
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          2813
Signing time:             Sat 24 Oct 2026 15:37:00 +0000
Manifest this update:     Sat 24 Oct 2026 15:36:59 +0000
Manifest next update:     Sat 31 Oct 2026 15:36:59 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: yCt+P+glEmJN6hHavDOJphKctOu6ZFesgKS6otAkaMY=)
                          2: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: 7d89IoO7oSE4BWIA1+3nLNGX3bTaRyu/ngtSyVYUEVo=)
                          3: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
                          4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10371 (0x2883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Oct 24 15:36:59 2026 GMT
            Not After : Oct 31 15:36:59 2026 GMT
        Subject: CN=6adcd09b-f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:9a:2a:bb:4c:12:cd:4d:08:63:6b:02:d8:
                    21:d5:29:80:b6:10:b2:6a:b5:1c:c7:68:00:8d:e8:
                    1d:3b:7b:71:ce:b6:4e:06:d1:c1:c0:19:24:a1:8a:
                    6a:f9:11:de:a3:9a:83:7d:fc:d5:03:b4:b3:0c:cf:
                    f7:cd:85:1b:c5:ca:f5:97:ef:de:0b:7e:f0:91:0a:
                    28:dd:06:11:01:67:53:c0:f5:d6:c1:65:00:45:3e:
                    3b:dd:bd:d7:05:cc:73:a8:b3:b8:12:32:a3:49:ac:
                    10:cb:b8:64:c2:fe:8b:df:ad:4d:92:5a:5a:e4:b9:
                    c1:c6:34:27:23:a2:ed:06:60:0d:e6:df:f0:e1:b0:
                    20:d7:f1:ee:99:34:43:34:16:9a:c1:f1:14:7a:74:
                    04:02:ca:9f:5d:fd:47:31:ba:ae:b3:0a:79:5f:38:
                    46:8f:cb:d7:47:e9:18:a7:3d:c3:bb:05:38:01:60:
                    22:d5:1d:9e:21:ec:1b:37:76:b0:63:de:ec:24:36:
                    76:7f:15:eb:c3:ab:95:35:9c:aa:41:52:39:4d:52:
                    72:e0:51:43:e8:6b:5b:37:ae:df:90:2c:fe:32:0a:
                    7b:b6:ac:d7:07:77:0b:27:80:60:e4:a6:7e:2d:61:
                    15:c6:d9:5b:bf:e5:8b:6a:18:ad:4f:7d:90:11:07:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:3A:99:40:C3:69:47:F3:66:EC:95:47:6E:16:A5:57:3A:40:3F
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:74:27:5b:b6:4d:e5:18:c2:68:05:d0:06:2c:6a:59:45:
         da:02:59:1a:2d:97:85:8e:7d:03:85:6d:bb:a7:16:bf:72:03:
         ce:54:d0:df:cb:32:86:03:3a:c4:33:da:91:0b:15:26:18:35:
         04:5e:0c:74:2c:96:5a:90:76:4e:98:4c:de:5f:aa:6e:1e:4c:
         e7:71:57:c2:9a:27:21:86:71:b3:6e:42:2a:8a:c8:a7:fa:3c:
         4a:ce:e2:2a:25:6c:c7:1f:10:7f:37:18:03:1c:31:6d:d6:4e:
         62:11:fe:2c:71:b0:08:cd:c3:b1:f1:ee:39:30:2c:5a:d1:85:
         a5:e0:fb:36:89:9e:19:77:7d:ca:78:0d:27:92:06:01:5a:ae:
         f5:75:b1:ef:d6:a1:d3:ae:e4:3e:df:f7:81:2e:e5:01:27:63:
         a7:50:7f:a5:47:86:08:f0:5b:0f:6b:73:b1:d7:de:ab:f5:46:
         b7:30:0d:9e:be:e3:7f:b8:12:43:d0:66:11:d0:7c:38:b1:93:
         ce:b5:81:e6:7b:f1:73:09:ed:5e:e6:50:4a:db:2d:67:fa:54:
         c1:cb:a7:91:f2:be:22:8b:9c:2c:4c:9a:31:a0:a2:f6:ee:02:
         ae:37:68:46:ff:83:33:40:da:4a:13:bd:d6:00:6c:a2:fa:69:
         27:65:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:56:01 2026 by rpki-client