Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
File:                     pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json)
Hash identifier:          QPYvbaAxkO8SZdUdWnZZ0nlgYWljto7Q/vbX5bvtOLw=
Subject key identifier:   34:6F:CB:CF:65:AB:70:6B:FF:48:30:3A:64:82:0B:D5:EC:F3:3E:13
Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38
Certificate issuer:       /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
Certificate serial:       0305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
Manifest number:          02FB
Signing time:             Fri 09 Oct 2026 01:18:50 +0000
Manifest this update:     Fri 09 Oct 2026 01:18:49 +0000
Manifest next update:     Fri 16 Oct 2026 01:18:49 +0000
Files and hashes:         1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: LAps2jmJt+NBtVhOy/pasOA46+cqqXwFwTOMBd1OKEk=)
                          2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: NLmMIXJWZuV3b2Iwvn7eaAOIy/czpKGsQRkgmmtmJQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl
                          rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 01:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38
        Validity
            Not Before: Oct  9 01:18:49 2026 GMT
            Not After : Oct 16 01:18:49 2026 GMT
        Subject: CN=6ac840fa-d0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:66:a6:62:d0:0c:e5:6f:f2:3a:a1:39:f8:
                    ba:0b:7f:d0:c8:33:3f:ee:fe:a5:71:62:d1:79:80:
                    e7:aa:ca:10:9d:26:f4:11:5f:23:4d:9b:2b:e0:71:
                    cc:33:dc:95:4c:16:a9:27:fd:b2:e6:93:17:23:dc:
                    fd:56:7f:a1:9b:3a:51:a8:d5:96:aa:2a:78:ab:39:
                    26:e1:2a:f8:61:04:24:85:12:f7:d2:85:c4:7e:10:
                    c8:5f:07:38:e0:45:42:9f:20:04:b2:60:aa:dd:f0:
                    8b:6b:19:6b:7f:c5:31:09:ed:d5:7a:46:17:79:2a:
                    3e:46:e1:71:49:09:7a:e0:71:a2:4d:d6:ec:66:a1:
                    f3:79:44:e0:d3:fc:c5:06:f3:5b:bd:ee:a5:af:d7:
                    af:80:d0:51:3e:ec:00:16:e4:0b:5c:ac:57:fa:d6:
                    fc:13:45:ad:c1:04:e9:88:94:fb:e8:74:58:ae:e6:
                    ef:96:51:fb:ac:80:f9:cc:2c:9c:cc:11:87:f6:e5:
                    b2:76:89:39:63:94:f8:93:fa:75:f3:e9:0c:a7:9b:
                    f7:32:1b:04:25:d4:14:ca:19:cd:25:7e:0e:e9:d6:
                    2e:c5:62:66:fe:88:b6:c8:41:4a:f0:3c:b4:d0:5c:
                    23:8e:8f:f9:c9:15:35:2d:ad:ee:10:10:cb:2a:60:
                    82:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:CB:CF:65:AB:70:6B:FF:48:30:3A:64:82:0B:D5:EC:F3:3E:13
            X509v3 Authority Key Identifier:
                keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:c0:68:49:5c:a8:05:a8:e2:4c:f7:87:85:fb:d5:fb:96:
         28:66:24:10:6f:51:3f:c8:ef:32:7e:35:47:b5:46:b7:11:b1:
         9a:eb:ad:1f:b7:d8:e7:f5:65:11:8a:89:f2:b3:66:95:7b:2f:
         53:88:ae:c9:8c:48:db:f2:57:01:f9:b4:41:02:eb:e8:81:4e:
         9e:3b:72:97:8f:3c:3e:a0:d4:7e:43:68:d2:7f:f8:9c:03:6d:
         de:58:f1:a3:50:0f:2d:65:6f:a4:88:4c:6a:70:51:a1:4d:fa:
         1c:ce:39:28:db:c9:5a:ca:80:52:5e:f1:df:ae:de:3e:a6:c7:
         21:05:71:4e:0c:db:bd:a3:40:74:58:65:9f:c6:6e:2c:10:40:
         be:9d:54:4f:14:b6:90:b0:8a:34:b7:86:6b:6a:12:50:74:35:
         fc:0b:30:47:69:13:aa:89:ce:3a:6a:ae:ab:b5:0a:02:ad:16:
         26:b3:93:b4:bc:4a:51:b4:70:00:8e:5b:ff:e7:5c:87:ab:10:
         f7:fd:1f:9e:56:3f:a8:7b:a9:74:d9:3f:97:5b:a2:53:00:fa:
         09:02:69:5e:00:e9:cf:3c:38:4a:45:80:29:60:25:ea:75:14:
         5d:1d:a8:6e:28:94:bd:d2:86:01:e1:bc:4f:5c:ff:8b:93:c8:
         37:c6:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:25:24 2026 by rpki-client