Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
File:                     A_ay59uYeE9EXiRrtoDCqdiV5T0.mft (raw, json)
Hash identifier:          vaLRx6VIB4JuDlgvjQyiEYS/Xa7cTsygvhpVv6V8/g8=
Subject key identifier:   87:EC:79:F2:0B:C4:40:76:6E:66:F8:C7:C6:EA:EA:55:56:74:5D:78
Authority key identifier: 03:F6:B2:E7:DB:98:78:4F:44:5E:24:6B:B6:80:C2:A9:D8:95:E5:3D
Certificate issuer:       /CN=A91AEE8C/serialNumber=03F6B2E7DB98784F445E246BB680C2A9D895E53D
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_ay59uYeE9EXiRrtoDCqdiV5T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
Manifest number:          46
Signing time:             Wed 07 Oct 2026 09:02:32 +0000
Manifest this update:     Wed 07 Oct 2026 09:02:31 +0000
Manifest next update:     Wed 14 Oct 2026 09:02:31 +0000
Files and hashes:         1: A_ay59uYeE9EXiRrtoDCqdiV5T0.crl (hash: P4sv3rnJE8hPxURKMWsOOCRie2ONPv13amdNsLpo1DI=)
                          2: 141F174659A011F1A4C1DFC6B6833773.roa (hash: edA5ZmsOi9ES2xxLRPNE3O08BLQwsC8SQpqFmThPcak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_ay59uYeE9EXiRrtoDCqdiV5T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE8C, serialNumber=03F6B2E7DB98784F445E246BB680C2A9D895E53D
        Validity
            Not Before: Oct  7 09:02:31 2026 GMT
            Not After : Oct 14 09:02:31 2026 GMT
        Subject: CN=6ac60aa8-a1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:7a:c4:22:d8:46:07:22:ba:11:5f:c7:00:
                    c2:a8:02:f3:62:13:f9:7e:ae:03:7a:a6:52:87:75:
                    6d:28:dd:fa:b3:80:18:f4:78:10:3a:10:80:23:8e:
                    0d:9b:2d:40:15:7a:0e:29:94:ce:e3:61:da:33:73:
                    4e:9c:08:5f:27:a7:ac:b5:d6:65:72:82:0d:e8:09:
                    3a:cf:5b:d0:99:0d:2b:bf:54:14:53:cd:71:7c:24:
                    41:df:f6:67:a2:2d:b5:52:70:a7:51:74:f6:11:0a:
                    83:27:fc:6a:39:2e:63:81:a7:ce:16:d3:3b:cf:47:
                    61:4b:cb:b0:69:3b:22:70:21:62:5f:6d:dd:df:3f:
                    13:c4:28:af:47:aa:fb:32:11:8f:ac:db:a2:ab:31:
                    43:53:b1:db:29:31:6e:b8:2f:61:66:b7:a6:9e:2e:
                    78:50:12:8b:b8:f9:b6:f8:b9:c0:b5:ac:94:4b:33:
                    12:e7:65:a3:e1:02:f9:a9:49:cf:65:26:84:71:81:
                    e2:67:98:75:8d:04:8f:6a:34:d9:12:39:b0:3d:0e:
                    27:32:53:33:56:9e:ce:ac:78:51:10:25:e8:d5:6d:
                    47:94:7b:2b:94:d1:bd:70:25:d2:0a:b6:76:49:8b:
                    f4:e7:61:29:b5:15:b5:a7:04:ce:12:6e:9f:65:ae:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:79:F2:0B:C4:40:76:6E:66:F8:C7:C6:EA:EA:55:56:74:5D:78
            X509v3 Authority Key Identifier:
                keyid:03:F6:B2:E7:DB:98:78:4F:44:5E:24:6B:B6:80:C2:A9:D8:95:E5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_ay59uYeE9EXiRrtoDCqdiV5T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE8C/9EBF6820599F11F18E0AECA3B6833773/A_ay59uYeE9EXiRrtoDCqdiV5T0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:e5:60:80:d4:1e:76:3c:09:6f:ef:1b:fb:e3:19:be:99:
         02:98:30:40:ce:fa:88:5e:d5:3b:79:6c:1f:f3:8c:6d:52:a5:
         47:1d:b9:43:ac:f8:92:22:8a:17:e0:7c:1a:9f:70:6e:38:be:
         12:a6:1d:18:c5:ae:8e:7c:f7:13:93:5f:1e:48:d1:8c:fe:6e:
         e4:1a:33:d1:a8:f5:f5:da:30:63:cf:36:21:bb:7a:de:da:b0:
         8f:12:e5:5d:8a:7d:a1:0b:c6:0a:58:d1:b9:51:3d:4f:8f:a2:
         c0:00:31:25:4f:5f:34:df:29:b0:77:ca:57:d2:e4:cf:2c:fd:
         d4:80:18:14:66:7e:5b:72:ee:c0:81:3f:0c:cb:be:e5:51:5b:
         ca:a8:c7:a8:01:5f:31:f3:56:2f:d4:63:f2:3f:d4:93:67:ca:
         20:25:58:e9:81:49:0c:b7:b6:a7:1d:17:7f:ce:5f:1c:a2:01:
         8c:4f:5d:97:9a:dd:40:d9:a1:5d:6a:05:26:a3:f2:9c:c8:1a:
         f4:64:91:6c:09:28:0a:fc:a8:dd:15:8f:cd:d1:63:d4:dc:a3:
         a4:e9:f4:1a:3f:33:d6:c9:c3:f5:ca:89:2a:2a:fd:ab:13:74:
         02:99:c7:fc:19:e8:14:46:ae:c0:e6:18:56:c6:32:7e:04:df:
         02:59:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:55:03 2026 by rpki-client