Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
File:                     h8MVYTVzTVYviayugrfBqOytOao.mft (raw, json)
Hash identifier:          PmBBMq6ITH5eCOT3PYBLvjXR9Rn+D7nHIEqY95CsRks=
Subject key identifier:   D2:AB:5D:74:17:34:46:19:1B:C5:EA:C3:88:45:30:38:2C:D7:BD:F6
Authority key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Certificate issuer:       /CN=A91B821A/serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
Manifest number:          52
Signing time:             Sun 11 Oct 2026 08:54:11 +0000
Manifest this update:     Sun 11 Oct 2026 08:54:11 +0000
Manifest next update:     Sun 18 Oct 2026 08:54:11 +0000
Files and hashes:         1: h8MVYTVzTVYviayugrfBqOytOao.crl (hash: kxlhrSLjeR3ezWgzOlBV6jk8gpQeTcKNBitshxFK7+M=)
                          2: B73DBDC848FD11F1BBA9715993833773.roa (hash: AGc8FPeV1XnTmwaCgwjyk//SDE1tk9ZLKFTYlrVR/0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
                          rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
        Validity
            Not Before: Oct 11 08:54:11 2026 GMT
            Not After : Oct 18 08:54:11 2026 GMT
        Subject: CN=6acb4eb3-d3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:69:99:79:8a:ec:d8:4e:2b:c2:c3:99:c2:
                    50:33:ae:24:e0:3a:50:52:fc:a1:11:e1:56:31:cd:
                    7b:7b:8d:9b:1b:43:84:49:6f:86:9c:8e:c0:d8:84:
                    0f:67:ef:0c:56:a8:28:0c:56:ff:76:61:3d:15:c2:
                    57:ca:52:17:72:86:f4:6d:d2:67:99:b2:7d:ee:27:
                    2e:d2:e8:3a:fa:cf:54:b0:a1:1c:ad:42:41:2c:99:
                    3b:7b:18:b3:77:98:d7:dc:d5:02:af:5b:dc:86:8a:
                    c3:06:74:17:7d:03:69:26:bc:7b:66:4a:c0:f1:c5:
                    ba:88:89:ea:5e:51:1c:c7:69:6c:64:39:f0:8c:c8:
                    96:6d:4c:f2:49:d9:1a:35:83:4b:97:1c:1a:2d:d8:
                    71:bf:9a:a0:21:d3:f4:84:91:76:39:80:bb:73:38:
                    6a:3c:f5:34:b4:c8:5e:77:a3:bd:99:f4:34:e9:30:
                    70:5f:69:df:7c:97:e4:72:a8:e8:b2:c3:ac:26:a5:
                    4e:0d:e6:34:c1:c7:f9:2b:c9:4c:c9:df:89:0a:fc:
                    1d:fb:15:a6:f3:b1:a8:48:15:cf:28:8e:94:1d:38:
                    6d:5f:da:09:42:b6:8f:86:5d:30:97:6e:b6:cc:fe:
                    8d:1a:9d:23:f7:82:78:8f:31:15:8f:44:ec:82:b3:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:5D:74:17:34:46:19:1B:C5:EA:C3:88:45:30:38:2C:D7:BD:F6
            X509v3 Authority Key Identifier:
                keyid:87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:9d:48:36:9c:df:00:46:6f:f7:31:73:2a:ba:62:cf:2e:
         a4:d5:b5:6c:d2:bc:cc:7f:22:bd:ad:83:2f:73:21:e1:6c:41:
         a1:f0:7d:15:58:6a:26:1e:f2:ec:5c:b4:cf:39:f6:13:a9:c6:
         2f:17:3a:6a:5a:a5:98:d3:e5:d3:6e:50:b1:94:03:47:7f:9b:
         06:3d:eb:70:57:c3:35:fc:42:65:b0:65:c9:ca:f2:28:46:dd:
         27:8c:5e:d9:fa:56:a0:cc:b0:59:d5:4b:09:dc:3a:80:78:de:
         7f:9f:f4:7b:3f:27:0c:70:a3:8c:8d:86:e5:b6:44:64:70:82:
         5d:d5:3f:6c:db:b4:42:d8:42:c4:c6:b2:b9:01:a1:dd:69:f4:
         96:ba:be:52:61:1a:fb:7c:af:61:d1:63:57:d8:85:39:9c:80:
         48:0a:7b:2c:aa:ca:bd:27:0f:69:1a:72:0a:f0:82:a1:4c:ee:
         83:30:88:f0:34:36:47:e2:c7:1d:4e:4d:38:e5:8a:90:8f:35:
         b0:11:ff:bb:db:49:53:ef:47:52:ee:37:d4:e0:96:7c:b7:dd:
         d9:24:8b:0a:e8:ae:e9:17:56:fc:e4:26:9d:a0:ac:96:85:f5:
         41:1c:20:4e:7e:d9:10:06:b8:47:f8:45:39:de:cf:c0:a4:b7:
         34:3f:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:30:50 2026 by rpki-client