Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          +pzodPjwiaHptQVMtzT5gDoa48D0JIlVvIMIyDyZ7Xk=
Subject key identifier:   3E:82:36:86:BF:C2:AB:0E:93:94:FC:85:F7:F3:8D:CD:51:90:8B:D7
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       070B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          0701
Signing time:             Fri 16 Oct 2026 22:22:38 +0000
Manifest this update:     Fri 16 Oct 2026 22:22:38 +0000
Manifest next update:     Fri 23 Oct 2026 22:22:38 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: Hb8RSzaAwDfdGsscX+8feVWG8QhfzCpQgCBAR/JVOCU=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 22:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: Oct 16 22:22:38 2026 GMT
            Not After : Oct 23 22:22:38 2026 GMT
        Subject: CN=6ad2a3ae-90c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:03:6e:e9:6e:33:b2:eb:bd:53:a9:c8:da:
                    9e:a6:0a:cf:2d:27:c9:be:01:37:c5:60:06:08:b1:
                    f6:db:5e:08:ee:26:9b:f1:48:95:2e:00:c2:e9:e7:
                    3f:5a:9e:ef:3e:6d:72:ac:b9:ee:dd:93:3a:13:00:
                    ed:09:60:8a:8b:45:35:fa:06:cc:c1:a1:a3:31:3c:
                    a6:41:51:5d:25:a9:c7:91:ca:b7:69:81:88:ed:d0:
                    e9:2d:71:d9:df:80:26:de:1e:ac:99:93:99:f4:84:
                    91:89:8a:2c:83:e9:76:40:b4:0a:8e:56:ed:5d:3b:
                    6f:bd:3d:7c:d0:40:f5:32:d3:82:66:f6:58:da:93:
                    a7:95:8d:06:20:b2:88:7f:b5:1a:4a:ed:f6:7a:19:
                    c0:8b:e4:cc:8a:b9:12:18:c7:cb:87:31:93:48:b1:
                    1e:cb:69:0e:da:61:93:ca:bf:2e:fa:de:cb:f4:3d:
                    47:99:ed:89:c9:47:80:90:0e:c9:fd:d3:10:9f:ed:
                    47:c2:9d:ce:e9:33:f2:04:2d:0e:c5:fc:f4:00:b3:
                    ff:89:41:36:14:5c:bb:80:25:a8:45:ce:56:be:cf:
                    25:60:33:e3:4e:9d:b1:b6:a7:e7:97:39:ae:50:4c:
                    af:79:26:90:61:dd:1f:fd:18:55:f1:83:e0:b9:9d:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:82:36:86:BF:C2:AB:0E:93:94:FC:85:F7:F3:8D:CD:51:90:8B:D7
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:a9:c4:77:a7:17:3b:47:9a:35:42:4e:c9:15:cd:54:ff:
         20:b2:8b:e3:b4:ec:3e:77:f0:5c:61:71:bf:0b:f6:1a:f9:29:
         a9:e8:d0:69:a8:ee:6c:6b:7c:9a:e4:4e:b1:c0:81:f8:eb:82:
         85:82:ba:01:10:61:a6:64:04:85:08:ae:fa:c4:79:98:1e:66:
         72:d6:ac:51:e3:d2:bb:67:2f:83:87:de:9e:e2:8a:e5:6b:0a:
         b6:03:c6:ef:e8:40:54:5b:32:36:4b:44:fa:e7:5b:a7:3f:44:
         2e:77:6b:16:35:80:16:61:bb:2d:a8:1e:65:54:92:ab:ac:47:
         f8:0a:10:25:c9:f8:08:8a:b1:44:f6:d2:5a:9d:46:e3:a0:5e:
         6d:87:29:24:d7:00:fe:02:e2:92:59:cf:80:a4:dd:da:c2:7a:
         a4:31:d9:ba:37:3b:7e:4b:31:47:3d:1c:c1:5f:12:a3:f8:bf:
         2b:78:47:15:6f:0e:69:65:78:4a:60:55:a2:bc:1b:33:be:08:
         aa:68:7c:e7:0e:75:0b:87:92:cd:48:87:01:70:9e:6f:8d:47:
         d0:54:48:31:cc:1e:b1:69:26:01:99:b2:ee:ee:39:fb:17:92:
         49:49:79:37:3c:d1:b1:01:11:e0:15:5f:9c:f6:4f:fc:c3:11:
         9a:b1:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:37:04 2026 by rpki-client