Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File:                     iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier:          proHsQpuQvIpUjcqrXFXUexat5MDH0xiVLOIjMbGltQ=
Subject key identifier:   83:17:67:4C:A1:FB:A6:A8:E2:42:47:B6:0C:37:80:DB:F2:EF:3C:4B
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer:       /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial:       0D52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number:          0D46
Signing time:             Tue 06 Oct 2026 18:15:53 +0000
Manifest this update:     Tue 06 Oct 2026 18:15:52 +0000
Manifest next update:     Tue 13 Oct 2026 18:15:52 +0000
Files and hashes:         1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: b1N/DdO+TpYZi4pKg1JQXcX2fhqlrDCCNribKpRg7tI=)
                          2: 37759456617811ECBB095A62C4F9AE02.roa (hash: +R4LaSdSdI4rptj9gcyqC1YCWuipohsg4zPzzR0FvRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
                          rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3410 (0xd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
        Validity
            Not Before: Oct  6 18:15:52 2026 GMT
            Not After : Oct 13 18:15:52 2026 GMT
        Subject: CN=6ac53ad9-b7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:2e:b3:46:ea:38:c7:e1:da:64:f9:bf:70:
                    b8:d3:ad:cf:99:07:09:3e:76:bc:a7:e4:8b:78:27:
                    81:0b:b6:55:b5:54:a4:95:67:da:48:4b:aa:8d:c4:
                    88:58:c4:47:ab:7e:4f:1a:d7:48:df:07:04:a9:b2:
                    63:b6:84:67:fc:a3:96:e7:f3:a3:00:b9:43:ff:9a:
                    74:43:8c:6c:de:bb:b8:d2:fa:37:a4:ee:68:ea:3d:
                    74:66:02:38:61:e9:8f:88:35:9c:06:09:b8:e9:e3:
                    d4:aa:cd:b1:e2:a7:2d:83:30:a7:6a:c1:da:c4:45:
                    11:4a:b3:46:8c:9c:a7:cf:4f:36:32:b4:62:e1:dc:
                    42:23:6b:c9:73:ef:d9:2d:6a:0f:01:61:d0:53:3c:
                    75:3d:44:22:1b:52:d4:40:09:63:4f:bf:0a:f9:48:
                    fc:dd:e2:a1:79:49:55:f0:ed:0f:60:ed:30:03:9a:
                    fd:32:87:82:d5:0e:39:96:26:93:29:a2:f5:27:9e:
                    8c:4e:fa:41:eb:b5:65:4f:b9:d7:f2:d4:8a:89:db:
                    d7:1b:62:f2:dc:d0:5a:8f:3d:de:e1:d3:ae:d7:ed:
                    8b:72:12:bb:8d:91:47:16:8f:fb:fd:ec:71:24:62:
                    c0:e1:a7:b9:87:06:75:0d:0e:54:51:86:70:98:a8:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:17:67:4C:A1:FB:A6:A8:E2:42:47:B6:0C:37:80:DB:F2:EF:3C:4B
            X509v3 Authority Key Identifier:
                keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2e:6f:6a:f7:01:81:2e:b9:1d:0b:f1:dc:9c:3e:3c:a0:0c:
         4c:29:e8:41:67:51:b9:aa:d7:79:f4:53:f3:7f:83:dd:99:e4:
         d4:e8:ca:3f:f5:98:63:e2:f5:c0:54:e5:85:1c:57:25:94:74:
         b1:a8:36:86:20:ba:1a:14:9f:79:e4:10:2a:c0:8b:e8:04:b6:
         11:37:be:93:a4:2f:ba:8a:68:f8:df:9a:b7:29:78:ab:c0:e8:
         9d:65:03:fb:2e:0c:13:b1:3a:43:44:4f:3c:37:21:56:5b:e8:
         1d:88:c8:3e:44:05:4d:1c:f0:2d:ee:3c:8d:81:67:a7:26:bf:
         de:a7:cf:de:90:7e:34:4a:8d:38:92:7a:5d:79:ea:ca:e2:1a:
         31:23:66:aa:ae:45:9d:5c:a6:df:d9:7b:9b:2d:b2:d4:00:82:
         81:3e:c3:97:17:26:9b:21:18:38:29:81:85:67:76:7f:af:5e:
         7a:72:2d:c3:74:b8:20:55:6c:f7:6c:04:a1:fc:54:99:b2:3e:
         c3:34:d2:42:8f:ea:0a:27:f1:53:50:cb:a5:6a:c0:c7:a6:e1:
         8e:09:a3:22:66:57:46:38:b0:48:8d:25:4e:bf:bf:ef:a9:c0:
         21:0a:81:85:8a:2f:0f:17:08:57:7d:2d:cd:ef:a0:5a:da:a2:
         88:56:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:15:16 2026 by rpki-client