Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
File:                     -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json)
Hash identifier:          TrdqfAXJzzFpukWpkalw6biAp6tLGlqWV40VUDQ8cTk=
Subject key identifier:   E3:CE:6E:0C:F8:83:84:89:6A:CA:8D:5C:8C:7C:B8:FC:50:95:B9:56
Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
Certificate issuer:       /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
Manifest number:          0838
Signing time:             Sat 24 Oct 2026 21:06:06 +0000
Manifest this update:     Sat 24 Oct 2026 21:06:06 +0000
Manifest next update:     Sat 31 Oct 2026 21:06:06 +0000
Files and hashes:         1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: h6IWc7rpmpTLF6XzOo43Cvqz+0xAwjLRteAB5xVn28I=)
                          2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: mMeGgDhlZB8BpJM1VuPAqYFwszYe58qsYy0dfc2aDiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
        Validity
            Not Before: Oct 24 21:06:06 2026 GMT
            Not After : Oct 31 21:06:06 2026 GMT
        Subject: CN=6add1dbe-a80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:e7:f3:0e:27:b6:c2:39:5b:95:6c:6c:c7:
                    8c:6a:b5:c8:71:0d:c2:f4:8c:ec:46:81:bf:8c:d4:
                    ed:55:7e:fe:a8:ba:2c:bd:d7:e7:33:03:7c:90:de:
                    05:45:de:7f:f9:16:4e:d5:04:ca:a2:02:74:f6:1f:
                    e5:c7:68:c0:ea:2c:0b:9d:f9:20:0d:38:1d:44:5d:
                    26:74:20:e1:cb:f3:f8:04:75:f2:e5:28:45:e2:db:
                    0d:3c:85:1f:79:2a:03:5b:78:13:a4:fb:63:63:cb:
                    be:98:35:b5:3c:e6:ec:cb:e8:48:00:56:71:0c:d8:
                    88:c9:2d:10:cd:c3:15:e4:c1:09:c0:26:ec:d0:1c:
                    d3:29:07:56:bb:3b:2a:f9:48:c3:50:19:e6:39:95:
                    c8:32:97:ce:ac:64:e6:cd:c8:6d:f7:8f:50:31:75:
                    ee:af:fb:86:a8:e6:cb:bb:fd:4b:f8:27:e5:04:46:
                    2a:7a:63:ca:22:c9:c5:b3:d2:bf:84:3d:99:d8:ad:
                    45:46:ad:41:01:c1:d6:ba:e0:ba:98:f0:2b:7a:74:
                    b9:3f:72:74:b3:0e:af:ee:c6:bb:76:bd:bf:71:d0:
                    b0:20:c0:d4:8c:e0:09:8e:d1:63:09:46:da:f5:69:
                    20:78:d1:9d:12:b3:fb:4c:f8:4f:34:ae:cd:ba:f6:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:6E:0C:F8:83:84:89:6A:CA:8D:5C:8C:7C:B8:FC:50:95:B9:56
            X509v3 Authority Key Identifier:
                keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:df:c3:a9:62:25:45:36:1c:2f:34:03:1a:a4:f0:db:ed:68:
         24:59:9e:f7:28:71:61:e5:ce:80:92:7a:7a:e2:20:b0:fb:56:
         c0:9a:8a:47:4b:77:b7:69:17:bb:9a:72:c8:07:84:5a:39:a3:
         0a:35:16:8d:4e:48:3f:23:6f:e8:f7:43:13:ad:0e:a6:0a:ae:
         71:fb:eb:85:34:90:8f:e7:47:1d:1b:63:a6:7d:5c:2b:5f:e1:
         00:33:13:8e:07:ab:9a:5b:4c:9e:02:04:be:46:c8:1c:3a:3a:
         93:3b:e2:5c:58:f8:b9:72:38:45:8c:54:9f:f6:9e:c7:39:86:
         d8:95:de:12:b5:a5:c5:14:79:94:c6:eb:84:a5:cb:6d:27:36:
         ea:e9:b9:05:15:bd:ff:54:00:ca:7c:f9:4c:62:b2:4c:07:97:
         7b:a9:65:5b:4b:db:8d:a0:3d:59:77:50:a7:52:cb:13:db:18:
         0d:c4:1e:34:8a:cb:b9:d6:65:08:ee:43:d7:93:ee:08:b8:d1:
         34:85:46:47:9d:01:31:cb:5d:9d:24:07:87:3c:4a:2c:67:1a:
         2d:67:ee:1e:c5:17:45:47:e1:a2:a7:25:62:f3:ed:5f:1e:93:
         bf:7e:82:8e:c8:0b:08:60:9e:64:2c:8a:51:ea:75:3d:0d:d7:
         d1:53:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:10:29 2026 by rpki-client