Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
File:                     A8hWADTpF_SEBrQEaVALI_OVa10.mft (raw, json)
Hash identifier:          fY2LugQmAPJPXG8tig+BssaoBIpebC1vMRSPwR2MRT4=
Subject key identifier:   EF:B7:DA:77:86:4B:39:61:A5:7E:77:DB:35:B3:EF:2F:67:A6:42:78
Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Certificate issuer:       /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
Manifest number:          02F5
Signing time:             Wed 07 Oct 2026 02:48:37 +0000
Manifest this update:     Wed 07 Oct 2026 02:48:37 +0000
Manifest next update:     Wed 14 Oct 2026 02:48:37 +0000
Files and hashes:         1: A8hWADTpF_SEBrQEaVALI_OVa10.crl (hash: YGWDWJzZBUgmD74qbxrI5FMKb854aewJWxmGUdEW1yQ=)
                          2: CAD00992C9C611F09C9EF018C4F9AE02.roa (hash: 1WK0pKqWk649s/jspmynYFwLv9eNrG6RsSK4CLXFtLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
                          rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
        Validity
            Not Before: Oct  7 02:48:37 2026 GMT
            Not After : Oct 14 02:48:37 2026 GMT
        Subject: CN=6ac5b305-2696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:aa:1b:c1:df:8b:f8:ee:4b:58:b4:9d:df:
                    cf:ff:c6:ff:e7:27:fc:f3:ef:fb:b4:08:f4:c0:18:
                    64:cc:9b:01:7d:3a:39:42:1b:db:43:99:fe:c5:74:
                    ff:b8:0c:b3:cd:49:bb:57:25:2a:48:38:c7:75:6e:
                    13:b3:50:3d:6c:81:e6:42:a1:fc:b9:41:f1:d9:32:
                    6d:a1:97:b6:3a:a7:ec:f9:b6:eb:5f:25:bc:d8:6c:
                    77:62:ee:b9:53:2e:68:44:05:1c:10:7e:cd:6c:f0:
                    4f:f8:6d:eb:c5:61:96:eb:e3:56:d5:6f:92:a5:1f:
                    2f:53:a0:a0:9f:cb:15:bd:e0:88:a1:c0:2c:98:9f:
                    f8:9b:42:b9:bc:ba:ee:8a:1a:4b:75:d1:17:53:0f:
                    68:78:ae:f9:9f:74:12:b6:8a:fe:5e:5c:b5:c7:bb:
                    25:ce:d4:31:fd:62:45:94:71:90:cf:b5:19:1e:bc:
                    0c:c2:16:c2:a3:fe:c5:a2:04:1a:c6:69:4d:00:0a:
                    fb:f1:19:42:da:f2:2d:35:8f:0e:2a:12:88:af:07:
                    55:f9:87:7a:5f:9b:bf:9b:62:7e:6f:7f:10:06:55:
                    37:84:c2:b9:52:4b:3f:ec:b7:a1:8c:0d:3a:81:5e:
                    1a:6e:4b:07:3c:77:f2:13:1a:71:85:2e:0f:61:d3:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:DA:77:86:4B:39:61:A5:7E:77:DB:35:B3:EF:2F:67:A6:42:78
            X509v3 Authority Key Identifier:
                keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:84:4b:f0:ef:4c:c9:2a:56:32:d2:d6:9a:a9:d2:0f:00:b2:
         18:23:30:4f:6f:bf:a6:70:7e:6d:8a:f3:e5:e6:0e:3a:81:c8:
         a4:e4:b0:97:6f:94:8b:0c:12:a0:03:c1:30:31:e2:c1:87:db:
         2a:b1:01:77:28:c7:da:44:02:91:88:59:3e:c3:66:ad:29:fb:
         1a:4a:31:20:8f:a4:da:a8:82:d5:e4:f4:30:de:9d:71:00:fa:
         82:c9:15:d2:fd:7d:11:88:3b:b1:df:76:db:e2:01:0f:53:27:
         c8:53:e3:d4:6f:3f:0d:67:01:c9:03:ea:13:30:7b:a9:c2:a0:
         dc:a4:1a:e2:0d:23:53:0c:80:e5:bf:45:92:3c:28:63:91:11:
         fa:1d:87:ad:97:3a:52:af:fd:c6:24:2d:ca:70:70:77:97:8c:
         bc:7d:ef:c9:ca:78:20:b6:33:f1:51:1f:03:69:9a:97:0e:a8:
         73:26:4c:cf:1a:ba:83:25:e1:7c:b6:40:57:4a:7a:c0:32:53:
         2d:3e:89:ef:74:4d:6f:2a:aa:9b:67:6c:70:31:d0:26:8a:e4:
         1b:06:b7:d2:ca:3d:a3:51:3a:ca:b4:05:07:b7:72:e9:2c:9c:
         cc:2b:98:a7:d6:ec:21:fb:e3:b5:df:dc:8b:26:29:c5:51:5b:
         4d:7e:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:58:57 2026 by rpki-client