Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
File:                     2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json)
Hash identifier:          zfR1ORm7xPxhQtGd4DSxb6pxKamrRjA+BtwyvfHOKik=
Subject key identifier:   A8:F4:78:4E:44:A8:6C:F0:06:6B:85:22:A2:D0:48:6F:94:74:B5:45
Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F
Certificate issuer:       /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
Certificate serial:       1B58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
Manifest number:          1B36
Signing time:             Sun 04 Oct 2026 16:17:56 +0000
Manifest this update:     Sun 04 Oct 2026 16:17:55 +0000
Manifest next update:     Sun 11 Oct 2026 16:17:55 +0000
Files and hashes:         1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: EX8DtMHVGppoW4OSwKthO8IXFXot2pNkXjxDzk2D48c=)
                          2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=)
                          3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl
                          rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7000 (0x1b58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F
        Validity
            Not Before: Oct  4 16:17:55 2026 GMT
            Not After : Oct 11 16:17:55 2026 GMT
        Subject: CN=6ac27c34-f8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:2b:aa:b4:36:16:b6:b5:bd:21:51:92:21:
                    dd:96:49:df:b8:c0:5e:9f:ea:ce:eb:bb:e1:94:16:
                    8a:8c:f7:65:59:8f:f9:d5:be:82:e9:34:ea:01:9c:
                    c8:40:3c:89:91:14:88:8b:bd:aa:a4:c6:e4:8e:48:
                    50:16:d7:6b:4c:55:51:76:87:bd:02:9b:f7:5e:3e:
                    99:24:98:7f:ce:3b:8d:e1:67:ac:3f:f4:d7:3b:77:
                    47:a0:dc:e7:69:8b:a1:fd:99:25:b8:4f:34:96:f5:
                    45:d6:58:c5:3d:0f:53:a0:e6:86:4d:49:3f:99:63:
                    a7:04:e6:22:aa:53:6b:8a:23:41:37:a5:0b:8b:1a:
                    ea:9f:32:d1:54:08:ce:2f:b6:c3:98:f8:df:7f:62:
                    93:eb:52:27:61:aa:a5:16:43:ad:bf:54:d9:4b:44:
                    8b:bd:36:31:4b:d4:2b:02:77:e3:40:19:3a:04:a8:
                    5a:e4:8e:9b:fd:e0:00:6e:75:c7:a1:cd:e3:ff:a6:
                    59:13:49:37:36:36:a7:08:bf:70:3e:d6:5c:8b:dc:
                    be:2f:ef:88:30:93:ca:f4:be:77:3c:d5:16:4d:19:
                    89:98:5e:9e:f4:f5:ca:7c:26:bf:b8:32:b2:e6:c3:
                    c3:50:50:50:93:ed:5f:ac:9a:d4:bd:72:f4:57:88:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:78:4E:44:A8:6C:F0:06:6B:85:22:A2:D0:48:6F:94:74:B5:45
            X509v3 Authority Key Identifier:
                keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:c1:73:de:a4:8b:97:e5:f3:93:69:37:a8:f6:2c:3f:e3:
         81:3b:e6:a8:94:0e:54:6f:13:e9:c7:35:68:1c:f3:f4:49:d0:
         e0:2a:77:51:ff:c3:49:8e:44:81:4a:db:5d:a3:bc:b8:65:04:
         16:4d:82:9e:12:e8:b2:72:60:c1:fd:ee:f8:d3:03:59:ac:1a:
         74:ee:2f:59:0e:80:ae:83:2e:a5:d1:85:6d:a7:1d:1e:1e:48:
         84:af:19:f7:6e:40:ef:b6:30:bf:de:ca:17:8e:27:bc:91:3f:
         87:80:90:10:cb:a7:88:ca:03:03:9e:2c:84:87:43:45:dc:0b:
         e3:e8:3f:15:9a:9d:56:d5:53:33:55:2e:69:32:42:f3:0b:d9:
         1c:2b:2c:46:c7:d6:d9:eb:72:9f:d3:50:bb:65:1b:1e:07:10:
         6c:03:7c:51:2c:85:f2:c3:44:ed:77:c8:26:f6:4b:d5:bb:19:
         db:83:1c:d0:10:bf:d0:8c:55:78:d3:a4:fa:58:4c:af:52:0d:
         66:17:1c:91:4e:0a:dd:14:72:7a:64:bb:f3:76:dc:0c:47:84:
         1d:6e:60:b5:c3:79:a3:ea:2b:46:a9:5c:73:14:c7:c5:11:f2:
         de:b3:be:c6:60:1e:f5:45:26:e6:44:53:ba:cf:59:3e:cc:4a:
         8c:e3:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:03:53 2026 by rpki-client