Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
File:                     sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json)
Hash identifier:          1isQqJ390wrwNhEhjxtgPWeQ2T3nODnhRkgKrNlt9yQ=
Subject key identifier:   EB:F5:82:14:53:A3:2A:B7:5E:24:33:38:2F:D8:CA:04:AD:26:99:B3
Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0
Certificate issuer:       /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
Certificate serial:       0BBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
Manifest number:          0BAB
Signing time:             Sun 04 Oct 2026 19:08:35 +0000
Manifest this update:     Sun 04 Oct 2026 19:08:34 +0000
Manifest next update:     Sun 11 Oct 2026 19:08:34 +0000
Files and hashes:         1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: NJnBwi6I9Jw8blEKNHj2aBGC31ra6vrb2Qyp0RlFl04=)
                          2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: BSkw2Ad0VbHRCKrmofWBzYDdrZyzRIF8n2conu8IolM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3002 (0xbba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0
        Validity
            Not Before: Oct  4 19:08:34 2026 GMT
            Not After : Oct 11 19:08:34 2026 GMT
        Subject: CN=6ac2a433-2759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:64:e0:ec:2e:61:b2:00:49:9c:47:6f:f2:
                    3c:a3:97:a2:6c:f0:01:6d:d7:a9:b2:7a:b7:95:53:
                    54:37:28:9b:44:dd:cc:02:32:5c:19:48:9f:f5:db:
                    42:96:11:a5:ec:f9:4e:7f:0e:67:74:1f:43:57:5b:
                    5a:f6:e4:1c:34:4d:95:06:af:30:95:30:f1:80:16:
                    74:e3:24:09:2b:c3:76:fa:06:a2:f4:ee:b2:5f:32:
                    54:eb:1c:a3:1e:2f:16:4a:71:33:61:45:c4:da:d9:
                    f0:ad:3e:a1:2f:bb:74:5c:70:a1:68:e9:d7:f3:f4:
                    a1:67:c9:44:e7:ab:8e:e0:f1:0f:80:79:84:2c:67:
                    7a:da:51:16:28:25:be:f6:a5:10:d6:e2:a3:56:e0:
                    dc:5a:b6:27:c5:40:ac:92:92:a8:d4:25:7f:45:8e:
                    1f:d7:76:fa:0c:e2:c3:a7:eb:4b:c7:fb:cc:7a:1a:
                    15:80:8c:e6:06:28:a4:5c:c1:39:20:ce:46:56:2c:
                    b2:90:11:a9:6f:ef:d8:da:17:d8:52:48:18:1a:24:
                    ae:2b:a3:09:fb:f6:15:0d:2c:00:a1:80:33:68:66:
                    f9:65:01:f8:6a:c8:01:38:38:55:75:7b:84:1b:fc:
                    a0:15:3a:f9:65:cd:36:fe:65:be:6e:e3:30:84:c1:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F5:82:14:53:A3:2A:B7:5E:24:33:38:2F:D8:CA:04:AD:26:99:B3
            X509v3 Authority Key Identifier:
                keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:3a:78:f4:e9:e0:9c:13:e2:c2:b2:dc:3d:58:35:37:02:
         53:fb:3d:c0:71:3d:0e:ed:58:f1:61:45:d1:42:5c:b7:31:f8:
         23:2d:f3:a5:b1:12:82:34:58:02:8a:e0:3a:c0:8d:2a:63:5e:
         13:3e:45:12:e3:de:18:b3:a5:fd:26:be:a8:46:0e:a5:cd:5c:
         bd:81:19:65:9b:80:7b:0b:03:f0:5f:7e:11:ba:f5:77:73:14:
         db:94:28:31:cb:77:df:93:9d:83:6d:5e:f8:71:f9:83:d6:4c:
         d8:d4:3d:72:93:3a:8e:0e:2d:64:5f:da:b5:51:8b:4b:39:a9:
         b4:79:38:97:c0:73:18:a8:8c:34:53:de:45:98:d1:fa:c0:8b:
         30:b1:27:50:59:ea:fc:9c:b7:04:a7:a9:3f:96:03:be:27:41:
         a5:82:c4:c3:96:ef:25:08:ea:d3:9b:84:64:99:a4:32:b2:b5:
         5c:5c:64:ba:60:f5:41:37:a9:96:f8:d6:5a:9b:9f:01:1d:ed:
         f4:dc:6f:db:7b:53:64:8d:db:31:7b:91:cb:ad:6e:16:38:ba:
         b0:fc:65:b4:34:3e:82:25:9c:3f:96:1f:84:af:ae:d7:e6:2d:
         f4:3b:da:76:17:e6:67:3f:eb:35:9f:9d:b8:39:bc:d1:30:be:
         55:2e:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:28:10 2026 by rpki-client