Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
File:                     M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json)
Hash identifier:          2gOEu7IiN/39oAeVBNhoftzNGCiIRWfceuAdGPgD/xA=
Subject key identifier:   48:53:A1:F4:16:4B:EC:2B:22:00:9D:73:A9:86:BF:04:0E:2E:75:5E
Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9
Certificate issuer:       /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
Certificate serial:       0A95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
Manifest number:          0A87
Signing time:             Sun 04 Oct 2026 19:11:22 +0000
Manifest this update:     Sun 04 Oct 2026 19:11:22 +0000
Manifest next update:     Sun 11 Oct 2026 19:11:22 +0000
Files and hashes:         1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: YnZapLp6xwy5z73re1h958OMgFz6RRatehLspEMF5Kg=)
                          2: E087B580870011F194514C90ABEE528E.roa (hash: 2efKLZ6+j+xLV+MxHpyalIXFsQcJ+EVXE0MVqPPKULk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2709 (0xa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
        Validity
            Not Before: Oct  4 19:11:22 2026 GMT
            Not After : Oct 11 19:11:22 2026 GMT
        Subject: CN=6ac2a4da-9a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:8b:7d:67:d8:b4:32:ff:c0:cd:b5:5d:6e:
                    71:f7:f0:88:ff:e7:58:6b:e6:75:ee:00:af:77:f3:
                    bf:8b:a3:73:04:59:35:b1:a3:aa:2f:43:d5:57:8d:
                    5a:ba:6b:8b:d9:8f:dd:28:76:fe:07:ed:d4:26:02:
                    a7:cc:dd:25:03:6c:16:ef:33:c3:2d:60:f0:28:0e:
                    0c:ac:c0:32:0c:34:76:4f:89:59:73:dd:37:03:06:
                    36:7c:2e:82:fb:d2:20:85:d3:ba:53:8a:75:e6:da:
                    f2:81:b3:b5:2f:ef:dc:b6:f1:f8:3e:a4:fb:1f:6b:
                    97:8d:dc:bf:6d:9d:63:ad:2a:b2:9d:dc:d2:00:07:
                    6c:3a:e6:a8:59:59:9c:f8:c2:7c:bb:42:58:d6:6f:
                    f9:ca:02:e4:81:9c:46:ff:d8:de:32:8f:87:fe:ab:
                    bb:4a:2d:ab:ac:1a:29:7c:0e:79:c1:c3:bf:92:6b:
                    00:76:45:96:5c:4d:2d:fb:4f:76:36:8a:6f:73:cd:
                    44:5d:8d:4c:02:e3:4c:94:b0:5c:a8:77:52:03:aa:
                    eb:e4:41:cd:fd:d9:a3:3f:30:12:2b:f5:86:96:94:
                    bb:20:01:2b:80:1a:05:d5:a1:2a:12:d4:ea:99:58:
                    88:f4:36:a4:9e:62:ef:44:95:be:d8:33:20:e8:cc:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:53:A1:F4:16:4B:EC:2B:22:00:9D:73:A9:86:BF:04:0E:2E:75:5E
            X509v3 Authority Key Identifier:
                keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:ed:fd:a1:81:7f:4d:13:df:4c:c6:cd:a5:56:da:0f:b5:
         82:08:4b:c4:a1:b5:b7:d5:63:d5:ed:70:ea:fe:3c:04:95:b9:
         f9:b2:1c:8f:30:68:aa:6b:38:fc:f4:be:dc:34:e8:f3:66:be:
         8c:ff:af:2b:6e:03:22:26:14:d0:e0:c4:89:9c:90:27:e1:f7:
         7d:06:2b:19:71:10:93:93:84:7b:59:81:ea:44:3e:f1:c2:3a:
         bf:f5:98:26:0c:0f:52:8c:e5:93:4c:6b:11:12:84:e1:ba:94:
         8e:56:f3:f7:7b:85:bd:e7:2b:25:91:78:87:20:46:5c:e7:78:
         15:de:c2:9b:f1:f2:72:66:a9:35:1b:b0:a1:87:09:80:84:c3:
         2a:2a:44:09:84:1f:6c:41:6d:31:64:6b:f5:eb:e5:da:92:86:
         a7:5b:ce:a9:22:33:9f:91:67:08:87:f7:77:d8:d1:62:8c:c4:
         40:76:f4:d4:8c:00:b3:9e:be:ff:7a:39:5f:74:bd:ab:6c:41:
         0b:9f:ed:fe:0c:57:07:39:e7:eb:e0:22:f0:39:13:5d:88:6a:
         64:f4:14:95:52:2d:d5:7b:a0:87:eb:d1:60:ce:15:94:c1:49:
         b2:91:da:15:fb:59:97:c2:be:33:84:91:f6:66:30:72:ea:b1:
         45:fb:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:03 2026 by rpki-client