Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
File:                     S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json)
Hash identifier:          ju9VPCqyXfB4XeE7EqqsFZu9I9nDEU43Vk4UtCsRGZc=
Subject key identifier:   11:D4:5D:38:50:07:DD:B9:84:66:FD:BC:9D:61:24:D0:23:91:B3:5E
Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Certificate issuer:       /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Certificate serial:       0383
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
Manifest number:          0375
Signing time:             Wed 07 Oct 2026 00:57:10 +0000
Manifest this update:     Wed 07 Oct 2026 00:57:10 +0000
Manifest next update:     Wed 14 Oct 2026 00:57:10 +0000
Files and hashes:         1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: 9tBGnzqxxb7M4/F3R+6FZNQ4FSFq4J6jjht+xcsPtkE=)
                          2: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: yJO+i+oPRpe2hJdrBjCi6ZjWjUnUDaX0mnbL3Z2r1os=)
                          3: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: x4nzg1eiqnQ3xL+MBP6Ok4N2HAa+La4GXnfqybcguR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
        Validity
            Not Before: Oct  7 00:57:10 2026 GMT
            Not After : Oct 14 00:57:10 2026 GMT
        Subject: CN=6ac598e6-bc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:d6:be:80:20:df:c8:f1:fa:bb:d8:73:6b:
                    57:9d:b2:6c:73:c5:fe:91:3c:70:17:ee:1a:eb:47:
                    67:95:fc:98:ee:b6:dc:1b:ac:37:ec:20:07:eb:aa:
                    24:09:1c:b1:ae:78:54:16:5e:5a:30:33:b3:6b:ba:
                    af:4e:47:33:c2:34:7b:6c:64:ad:ba:7f:6c:10:de:
                    14:3f:77:e4:63:f6:a1:7b:af:bb:e3:e7:5f:3f:7f:
                    05:f9:00:c7:33:1f:5c:9c:7f:e1:6b:b0:d3:68:0d:
                    97:b7:15:6e:1e:bc:cc:35:9c:f9:f6:c4:19:e4:a9:
                    eb:34:02:29:39:85:27:1e:83:88:cf:b8:aa:cf:6a:
                    26:43:81:f0:1b:50:43:e8:0a:ba:2d:60:2e:04:1f:
                    f2:4a:9d:86:a0:a5:ed:4a:4c:cf:45:66:35:ee:c8:
                    91:fe:97:33:30:6d:ce:a0:4f:ef:53:1b:97:60:06:
                    d0:71:63:88:11:f8:73:8c:93:e9:9b:ac:6d:6f:fb:
                    ed:fb:97:36:d2:c8:c2:a6:b1:1c:34:be:57:35:b5:
                    d8:dc:86:d1:77:f4:8b:d8:91:f9:ea:33:e4:d8:62:
                    1f:fe:c2:ec:6e:60:c1:2b:ce:96:3f:ea:83:53:60:
                    23:16:00:db:f3:cd:af:6d:26:da:7e:76:8c:be:0c:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D4:5D:38:50:07:DD:B9:84:66:FD:BC:9D:61:24:D0:23:91:B3:5E
            X509v3 Authority Key Identifier:
                keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:17:5f:75:41:07:94:cb:f4:90:d8:86:25:28:0c:87:7d:
         3b:fe:42:00:d3:95:43:75:7c:97:19:9c:48:60:a8:0c:65:95:
         e8:be:1b:e9:f1:91:df:e0:01:1a:57:a5:1b:71:06:21:38:29:
         15:de:98:f8:13:6b:51:fd:6a:02:8e:12:6f:4c:4e:e7:d6:aa:
         6c:ef:e9:fd:4b:9a:55:2a:a1:fa:41:77:db:45:97:de:03:92:
         8f:2c:15:58:c3:78:2a:b6:2a:bf:6c:68:11:35:98:72:a1:92:
         18:82:c0:66:04:5c:ad:65:0b:f5:81:3d:0d:70:ce:2e:d5:91:
         51:f8:f5:49:8a:21:95:93:dc:a3:a5:d1:4d:cf:f1:36:da:30:
         20:f2:85:a3:41:76:28:f1:05:ea:67:3f:02:f7:15:17:07:14:
         92:34:84:28:0b:55:ae:18:9e:13:4e:88:a5:4c:7f:dd:0a:6f:
         89:b0:b6:dc:15:97:0f:79:a2:d6:b4:31:4e:3f:15:04:a3:de:
         f7:e8:d4:a8:84:9d:ef:ff:5f:e9:36:77:ff:42:97:0c:24:62:
         32:43:9d:b5:c3:51:c4:48:82:83:e6:27:4d:7a:ff:3b:2f:f3:
         5e:60:fc:ec:e6:f2:89:97:5c:43:20:24:3e:08:3e:e1:32:76:
         13:da:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:54:27 2026 by rpki-client