Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
File:                     tOIgv84ikKotb4jteq4w3okVyUw.mft (raw, json)
Hash identifier:          V6e1UclOAaUVpP+ESfbEWIMUKOVc+atkj/OKt/4eH5c=
Subject key identifier:   B0:E4:17:2D:77:F2:42:AD:A4:B0:EF:51:CD:DF:50:42:EE:B7:13:74
Authority key identifier: B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
Certificate issuer:       /CN=A91AC415/serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
Manifest number:          36
Signing time:             Fri 09 Oct 2026 04:00:33 +0000
Manifest this update:     Fri 09 Oct 2026 04:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:33 +0000
Files and hashes:         1: tOIgv84ikKotb4jteq4w3okVyUw.crl (hash: iBYcf+BIQTtAHRg0rWqF+YmfpPZgR8OXYERvoIba/8k=)
                          2: 39D27246750511F1B847DD7F6CA30FBC.roa (hash: cia8IPAkix/MNyKAepXMq+8vc+QuoRzXeBNvwlaYww4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC415, serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
        Validity
            Not Before: Oct  9 04:00:33 2026 GMT
            Not After : Oct 16 04:00:33 2026 GMT
        Subject: CN=6ac866e1-baf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:ae:11:b5:83:87:36:ef:88:8c:e0:b8:04:
                    e1:3f:eb:87:f0:d5:3b:12:06:f1:7e:7d:63:a8:46:
                    c5:57:cc:66:2f:46:d5:2a:ef:35:f4:e1:8e:ef:4b:
                    77:e6:57:a0:ee:e6:60:47:48:04:64:25:93:2e:74:
                    c9:37:ac:2e:29:f6:3f:f3:72:93:a2:7e:94:a3:7e:
                    07:5e:b7:fa:d9:48:27:8c:85:10:1f:e7:ef:73:7c:
                    6b:ac:3e:a3:e0:79:2d:54:9e:6c:db:c4:d8:10:d3:
                    79:8e:e8:8f:e5:d1:4a:b6:9d:c9:42:c4:09:b4:42:
                    0a:a5:d2:bc:47:aa:e8:51:8e:74:04:a4:14:e7:6b:
                    4a:05:ee:1a:95:d3:f0:9e:e2:43:75:36:91:be:c3:
                    64:b4:0e:86:e0:dd:64:c5:de:b5:fb:f9:c6:1e:3e:
                    34:4a:07:b5:bf:a3:ca:15:32:7c:4a:23:e2:8f:c8:
                    69:e5:ba:bf:59:23:e4:fd:2c:21:5a:22:43:fd:ba:
                    a0:6e:64:d7:56:7b:1b:f3:84:81:e2:2d:95:f5:2e:
                    9b:fa:13:7c:fa:f0:1b:20:85:63:e5:65:8b:a4:95:
                    25:76:61:64:63:ce:b4:73:c1:5e:8c:52:94:a0:e7:
                    1e:91:62:3b:a1:55:42:c4:c8:65:57:3a:82:ee:0c:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E4:17:2D:77:F2:42:AD:A4:B0:EF:51:CD:DF:50:42:EE:B7:13:74
            X509v3 Authority Key Identifier:
                keyid:B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:dc:e6:79:fb:6a:e0:ca:b6:2b:bc:5a:38:1a:85:bb:4d:
         f8:09:1c:1b:eb:aa:41:72:2a:b9:4c:c7:86:2a:17:d0:9f:75:
         7e:bb:9b:a0:7e:15:38:a4:48:78:0a:84:d1:1a:e7:97:53:b8:
         40:dd:d2:c4:e8:20:b2:98:f4:66:53:34:18:06:f4:fb:ea:d8:
         e7:a0:89:aa:32:5e:c7:42:2a:19:d1:65:10:1f:a3:fa:14:2d:
         8b:4d:3d:b0:5f:29:b2:51:bd:de:a1:3d:d9:69:b0:3a:fe:12:
         0a:70:ea:48:11:38:31:94:eb:72:50:3b:92:26:0d:dd:a1:d1:
         ac:93:d0:bf:fc:ca:bc:f6:4d:57:3c:df:2a:11:c3:de:53:bd:
         a8:55:45:76:bc:49:71:ab:5a:90:10:de:e8:be:fe:2b:f5:06:
         85:b9:ea:a0:01:39:10:74:f4:f5:b2:66:ac:bf:d0:07:13:cd:
         90:ca:be:8f:e2:74:7e:1b:fa:96:a8:a4:eb:5e:e2:22:56:2f:
         da:06:83:c3:b2:ec:a6:d9:a0:d5:5b:3f:fb:29:97:82:81:86:
         e2:84:ed:71:0c:60:04:c2:1c:cf:18:6c:e8:d3:40:2d:87:40:
         da:45:94:ea:98:4a:53:1d:80:3d:44:5a:43:0f:6d:1e:b3:80:
         91:82:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:57:07 2026 by rpki-client