Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
File:                     g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft (raw, json)
Hash identifier:          EkJ4O0UdK6RtOuacdhWIWZlbZfILCWLtzzj7j3T6P0U=
Subject key identifier:   4B:C7:AF:26:E8:19:15:C2:73:85:9F:52:DE:25:17:05:CC:98:24:32
Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
Certificate issuer:       /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
Manifest number:          01E6
Signing time:             Sun 11 Oct 2026 04:00:10 +0000
Manifest this update:     Sun 11 Oct 2026 04:00:10 +0000
Manifest next update:     Sun 18 Oct 2026 04:00:10 +0000
Files and hashes:         1: g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl (hash: IrPllqLAc+kONPDFI2Zz2C0c6PTl7yh4ogsY9XRNxqA=)
                          2: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (hash: e8BrutbzfzM1UUyv17uARTWJ09lINCQWQeDDVfsXfGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
        Validity
            Not Before: Oct 11 04:00:10 2026 GMT
            Not After : Oct 18 04:00:10 2026 GMT
        Subject: CN=6acb09ca-87fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:20:58:c1:8e:87:ef:bb:a6:86:44:e5:8a:
                    be:c1:ae:cc:e2:59:13:c6:a6:4e:32:a9:76:d1:96:
                    10:da:82:fa:63:2c:3e:fe:66:3d:94:be:1d:a8:39:
                    ff:71:cd:c9:7f:39:ef:dc:5b:7d:e5:55:fe:d7:fa:
                    d9:90:df:a3:e2:72:f5:72:40:4c:85:69:9e:c1:c0:
                    47:91:95:9c:ce:bf:c0:64:08:ad:3b:b3:57:5f:3a:
                    40:23:3c:d2:a2:75:12:24:49:2b:13:14:e8:8e:58:
                    1c:63:96:d3:40:1d:86:46:b8:6d:b6:5c:7f:13:91:
                    8e:6f:97:b1:1b:6b:03:11:01:ae:d7:52:10:61:17:
                    09:53:9f:bf:c7:5a:ec:c7:dd:88:12:07:7b:05:ff:
                    ea:2d:00:d3:73:31:c2:c6:5f:6e:69:c7:8e:1b:df:
                    79:8b:cd:a7:0f:41:c4:cb:49:bb:0a:4e:6b:87:b3:
                    58:78:fa:4d:01:50:62:52:72:bc:9b:3a:12:61:fe:
                    36:7b:ce:50:1a:c1:c2:ec:3c:c1:d0:da:9c:b1:af:
                    16:aa:8a:9a:30:14:11:fd:08:a4:04:02:2b:f7:61:
                    de:f7:80:64:cf:2a:79:83:f8:61:5d:19:6e:fc:68:
                    77:4d:40:70:ff:de:31:91:79:03:5d:06:ca:02:2b:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:AF:26:E8:19:15:C2:73:85:9F:52:DE:25:17:05:CC:98:24:32
            X509v3 Authority Key Identifier:
                keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:59:f9:5e:bf:92:63:96:8b:c1:2c:04:0b:ca:19:20:a6:
         98:a3:37:c4:bf:48:f9:93:6a:20:30:61:2f:db:ba:cb:33:2a:
         2a:5c:1a:4d:fc:d8:a2:fb:20:0b:3e:bc:6f:7f:e8:53:60:26:
         8f:bf:d2:68:04:7b:ab:22:97:96:dd:a4:23:5c:2d:53:7f:46:
         27:07:25:2f:ad:ac:48:ea:5f:7b:e6:b5:38:7f:ee:bd:d6:28:
         14:a6:f0:06:6b:0b:c1:28:7a:b8:64:95:46:5d:3a:0c:f9:78:
         90:7e:53:b8:7b:c1:c6:e3:b4:12:f0:93:06:59:1f:a6:0b:85:
         90:77:26:ec:4c:9d:9b:da:03:3c:a5:f7:b0:70:67:bc:e2:12:
         94:7f:d4:74:b7:e9:fd:1e:de:a2:ab:32:86:c2:20:fe:c6:23:
         43:37:b1:0c:a1:08:7d:2f:ea:72:dd:a4:7f:27:62:51:a7:f9:
         8a:4b:99:97:38:f2:c1:88:aa:0e:d6:6a:f4:61:26:e3:4c:0c:
         36:e2:f1:8b:41:24:cd:11:96:7f:84:f4:5b:ff:9a:ac:28:c8:
         ca:1c:24:7d:4d:7b:de:ab:49:23:ea:26:3c:ec:d9:45:e9:68:
         fe:d2:f0:b2:9f:58:e4:78:48:37:24:f3:e0:b3:6e:2e:e2:f5:
         6b:d2:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:25:58 2026 by rpki-client