Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
File:                     u4iGb_vrTN7pUxHmIJ92pQG8G48.mft (raw, json)
Hash identifier:          3rKszfHdPVPuFu/BMyozEWPYbGUP1owUJuelCQ8eSZI=
Subject key identifier:   A4:D8:5C:88:A7:8B:2B:6C:FC:9E:43:D9:A3:5E:34:06:BA:3C:82:AC
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Certificate issuer:       /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
Manifest number:          3C
Signing time:             Sun 25 Oct 2026 08:55:57 +0000
Manifest this update:     Sun 25 Oct 2026 08:55:56 +0000
Manifest next update:     Sun 01 Nov 2026 08:55:56 +0000
Files and hashes:         1: u4iGb_vrTN7pUxHmIJ92pQG8G48.crl (hash: 5I7tZ79cWq3J5fgtwGQHYHJ4O8uSumCTFYNFC8ixN+0=)
                          2: A668211C79AB11F1870FA39595A30FBC.roa (hash: bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
        Validity
            Not Before: Oct 25 08:55:56 2026 GMT
            Not After : Nov  1 08:55:56 2026 GMT
        Subject: CN=6addc41d-ba04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:28:70:fa:ef:cd:17:7c:6a:3c:b5:6b:ac:
                    3a:da:1c:fe:3b:8a:5b:27:78:7b:a7:04:83:a7:88:
                    a8:31:c7:75:7c:16:fa:9b:9b:11:5a:26:a4:3b:c2:
                    f4:af:14:20:aa:aa:d6:be:0b:20:b8:07:46:cc:10:
                    0f:3d:de:f7:e2:25:c8:bc:79:93:5f:31:11:79:cd:
                    34:22:f9:53:57:1c:d8:1a:28:08:4f:a0:3a:2d:b8:
                    e0:19:a4:b7:27:19:7b:6e:51:b9:b7:46:a5:35:9c:
                    d3:19:3a:51:37:b3:1b:95:c7:5d:84:96:d1:3d:48:
                    37:1a:7a:37:12:7f:39:4d:cf:be:33:43:85:8d:4d:
                    3c:69:a3:64:cb:60:73:a3:0a:59:d7:95:49:d6:20:
                    33:4b:ae:d8:e8:c6:4e:99:c9:c3:58:2a:ae:85:18:
                    ce:e6:3f:3e:d4:d6:9e:3c:76:70:c5:d6:a7:44:b0:
                    75:3f:ab:03:f0:07:f8:9c:9d:4f:30:e8:bc:b4:4f:
                    f4:a3:fe:3c:c2:6d:4a:3d:d6:ab:05:1c:4f:bd:9c:
                    46:44:d8:87:83:42:c6:ea:1f:d4:1d:b9:cd:a5:ff:
                    0d:7f:e5:c6:c4:f8:48:f9:c8:7b:42:ad:ea:a2:56:
                    2e:da:08:60:e2:d8:bc:e7:38:8f:1f:be:67:39:42:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D8:5C:88:A7:8B:2B:6C:FC:9E:43:D9:A3:5E:34:06:BA:3C:82:AC
            X509v3 Authority Key Identifier:
                keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8a:24:2c:f0:16:7f:09:d5:82:9b:c3:12:50:c9:61:b8:4b:
         94:c8:da:fe:a0:2f:f6:7a:79:27:34:89:24:6b:29:91:3a:d5:
         51:61:cc:80:25:b1:ce:67:63:72:a8:5e:09:ac:09:f9:a0:89:
         b5:bb:fb:d9:65:58:9e:48:a9:59:a9:fe:96:67:5f:6d:62:2b:
         b1:82:f2:74:2e:c7:16:8c:f1:5b:dc:58:5d:83:a1:66:cd:96:
         0b:c3:fa:17:11:6e:e7:f2:30:c2:35:84:cc:c2:ce:8e:f8:d7:
         3a:fa:88:27:cc:33:6a:f3:1f:a8:01:3d:2e:a2:bb:1d:bf:bf:
         12:96:7a:99:50:33:45:82:b9:2b:88:e8:99:7e:78:17:a8:0e:
         d8:57:47:9a:96:bc:0f:03:80:b8:2a:7b:05:68:62:8a:18:9c:
         8e:bd:26:02:d3:16:37:a2:31:88:dc:0a:20:1a:22:10:df:a8:
         a1:8a:44:e0:8f:53:a7:29:19:0f:c4:55:65:dd:2e:23:d8:f4:
         5a:0a:62:f7:50:68:73:de:b8:74:69:80:f2:39:2c:5b:b6:c9:
         5c:f6:01:1c:1b:26:da:11:d3:b1:c2:68:d0:cb:e0:bf:c6:32:
         b2:05:c0:3f:e0:17:ae:63:ae:a8:06:1a:46:b5:40:94:ec:24:
         3d:1c:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:56:34 2026 by rpki-client