Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
File:                     cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json)
Hash identifier:          hTfHYO7iya+Him3PwYZf6h0jVvdNekPKO9LC9GQUzMg=
Subject key identifier:   B5:40:00:96:67:5D:C4:8F:DA:8B:98:0E:3E:49:01:C4:B2:83:68:68
Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
Certificate issuer:       /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
Manifest number:          0268
Signing time:             Thu 29 Oct 2026 02:48:59 +0000
Manifest this update:     Thu 29 Oct 2026 02:48:59 +0000
Manifest next update:     Thu 05 Nov 2026 02:48:59 +0000
Files and hashes:         1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: QxwpAQDHpqNF/7W82HK/N23+7O+ywbBWNbZLBgUhNjI=)
                          2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: HBIivRlJgK5uSaMhHBQOw7VEjJKfalYdgnfZ3xk6PbY=)
                          3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: h3a54khZyQJtLr0W+utVKmSP39tAWOGnygBrFVrSQe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 02:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
        Validity
            Not Before: Oct 29 02:48:59 2026 GMT
            Not After : Nov  5 02:48:59 2026 GMT
        Subject: CN=6ae2b41b-7f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:a5:30:34:b9:52:90:45:ce:ca:e7:03:ba:
                    a7:8f:1a:95:4e:9a:b5:22:8c:35:4d:b4:3b:d4:a9:
                    84:82:e3:04:1f:74:51:92:8b:b5:86:49:90:8b:28:
                    b7:b0:c9:17:3b:ba:ae:e5:99:a9:61:b8:f2:5f:2a:
                    db:ba:7d:bc:83:7c:7f:f7:31:33:c4:72:40:9a:c5:
                    e8:b1:47:be:2e:e4:b0:69:c5:04:e9:88:71:05:0a:
                    c4:72:b7:2a:76:90:b2:43:59:6e:71:2d:59:26:d1:
                    ad:86:65:c5:43:ea:f1:55:64:62:76:db:e6:2d:88:
                    36:8f:18:11:d7:3f:21:a4:e1:dc:72:ab:55:37:db:
                    7f:db:6a:61:91:59:d4:f6:85:c8:bf:a0:05:ee:b3:
                    64:8c:e3:8a:d3:fd:54:20:8a:36:45:84:03:a4:84:
                    e7:17:a4:48:bb:52:26:3a:34:e1:20:fb:c0:1f:21:
                    e1:e6:7c:7f:fb:dc:f4:0d:c4:ac:00:da:3b:c0:32:
                    24:7d:48:c6:41:14:40:75:a4:ee:06:63:83:b5:a7:
                    34:91:a9:cf:58:b2:39:39:88:0e:ba:c6:96:8c:28:
                    7a:88:97:41:5b:22:ed:06:a9:20:1e:0d:02:59:dc:
                    5a:c1:6a:8e:2d:12:79:fd:29:78:17:f2:8e:41:a2:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:00:96:67:5D:C4:8F:DA:8B:98:0E:3E:49:01:C4:B2:83:68:68
            X509v3 Authority Key Identifier:
                keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:31:c5:99:11:d1:ac:0a:11:d2:11:66:94:c9:af:65:aa:
         7c:b4:55:b0:26:c4:b7:59:27:4b:db:02:c8:f7:ed:8d:99:d5:
         86:e5:6d:75:a4:0c:33:8f:fa:07:ff:d5:8a:63:0c:54:4f:9f:
         98:c6:e4:60:e7:b1:9d:e8:9a:07:17:e6:9e:7f:cf:18:e6:5f:
         6a:23:28:d5:a7:27:09:11:65:d8:b1:b4:18:72:93:e7:c7:d6:
         65:ec:54:0e:69:83:d6:90:16:6f:16:0f:c9:54:f9:bc:bf:39:
         3e:c4:73:6a:68:a7:a7:dd:e0:7c:f5:94:2a:c8:f8:9b:a4:df:
         9b:14:d4:24:4d:ab:6e:3b:40:d8:e8:cf:a5:82:01:ff:02:d6:
         30:87:c2:09:4f:e3:fb:51:c8:34:89:96:9f:57:01:1f:2b:8a:
         7c:61:f9:92:d3:e6:e7:de:89:4a:14:15:87:d8:3d:fc:60:ca:
         d5:78:b9:c5:6f:e2:31:ad:49:5b:1a:2f:05:09:b8:6c:f5:4d:
         25:3d:b5:14:50:79:0f:e9:d2:bc:8f:1d:99:64:65:af:3e:7d:
         f3:23:44:e8:11:74:8d:34:3e:8c:1c:75:eb:9a:1d:06:e1:dc:
         61:f4:b8:ef:86:1e:94:8f:05:d1:d1:96:55:51:b3:68:3b:f6:
         62:1f:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:36 2026 by rpki-client