Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File:                     4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier:          buXMKxapyWadezt8PEIFGXAfrQZCngSFeUsuMQQWp9g=
Subject key identifier:   8A:58:5F:60:D1:1F:45:5A:45:A3:34:FB:5F:8D:85:9A:3F:F9:58:B8
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer:       /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial:       048B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number:          0483
Signing time:             Mon 05 Oct 2026 00:04:30 +0000
Manifest this update:     Mon 05 Oct 2026 00:04:29 +0000
Manifest next update:     Mon 12 Oct 2026 00:04:29 +0000
Files and hashes:         1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: FhQCuldVks7k481Y6wdyIDMGBmJbcuPLgcjeTONWmtk=)
                          2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
        Validity
            Not Before: Oct  5 00:04:29 2026 GMT
            Not After : Oct 12 00:04:29 2026 GMT
        Subject: CN=6ac2e98e-4c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:f0:8e:d2:24:b0:b5:6a:b4:49:cf:9d:3f:
                    51:75:b3:49:32:16:4b:c3:79:bb:81:01:f8:4c:a9:
                    05:df:d1:26:7d:69:86:2d:06:0e:4f:2f:a5:71:94:
                    84:8f:42:d5:53:f0:d0:ad:6f:93:a6:47:3e:8c:0a:
                    d7:74:e0:d9:4a:8c:2f:d3:27:5a:92:08:a4:2d:84:
                    ef:01:35:dc:da:65:2f:f4:e7:13:ec:d4:1f:72:39:
                    97:7e:1b:bf:3a:d9:4e:17:ce:55:76:a9:c0:84:04:
                    f6:aa:1f:d2:ff:fd:be:d5:16:fd:93:69:4a:8b:de:
                    96:83:18:9c:54:f0:bc:34:64:e9:5b:cc:cf:34:f2:
                    ca:69:ce:9b:b8:10:ad:35:99:5f:62:c2:45:50:e0:
                    68:2d:11:77:89:3b:03:34:0e:70:ff:27:24:be:8c:
                    f2:4f:91:12:10:46:81:be:8c:81:4f:a9:53:34:ed:
                    3a:ef:e3:a2:69:a9:b4:d6:62:77:48:c0:f8:f8:63:
                    42:88:22:dd:e3:a3:9f:9b:a1:0b:83:5d:3a:de:b2:
                    11:ac:ac:26:a5:bb:38:32:84:62:05:73:d6:5b:17:
                    f5:f3:e9:15:bb:ca:ea:a7:0f:db:b5:d3:b3:e5:09:
                    2d:33:52:cb:b4:2b:61:83:5d:38:fe:f0:01:e5:f0:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:58:5F:60:D1:1F:45:5A:45:A3:34:FB:5F:8D:85:9A:3F:F9:58:B8
            X509v3 Authority Key Identifier:
                keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:f3:43:2a:eb:d6:bf:75:15:2c:7b:9e:d5:38:8e:9b:15:
         1d:76:b8:cd:e7:17:f7:37:c8:09:20:87:c8:c4:ee:0f:e9:5a:
         9d:26:e2:84:48:6a:da:55:92:5f:86:f3:57:ff:0c:06:94:44:
         9a:5b:eb:f4:c2:7c:ec:a4:75:4b:0f:9f:17:0e:d3:8f:4c:74:
         10:12:d5:87:7d:da:82:82:aa:6b:88:d4:39:9d:ef:a4:7d:03:
         77:a2:bb:66:5c:19:fe:61:2a:56:bf:75:e7:8a:31:4c:07:54:
         76:6a:6f:29:ae:f6:6b:14:38:ef:3e:eb:1f:0c:f8:57:2f:7d:
         77:7c:1e:da:5a:82:84:08:c7:e9:c0:db:de:c5:fe:0c:d1:e9:
         02:7f:ab:55:11:aa:bd:0e:4f:3d:ad:56:72:e9:24:7c:14:b6:
         f1:c7:1c:42:df:f0:d6:1e:f3:de:e8:2f:3b:c1:7a:28:84:25:
         f5:e1:ff:51:9a:14:62:4d:5a:12:e5:47:35:5d:b7:00:79:5c:
         ca:4e:67:12:b8:5c:81:21:2f:3f:f1:b7:3b:7d:e8:d8:9a:73:
         74:b2:3b:b4:8b:a2:f3:a2:fc:0e:6a:fe:59:eb:ed:e5:f5:c6:
         8e:76:57:b2:d4:a1:3c:2c:23:39:ab:ab:37:ca:b3:e0:0f:3f:
         b8:8d:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:10:36 2026 by rpki-client