Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File:                     5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier:          Tyi88aG7NWNyN3+b1uBEEI4gciTcXbg/CG9yxWqK7NE=
Subject key identifier:   85:64:8D:78:C2:D9:56:E6:0D:DE:2C:EF:DA:D8:1B:59:52:36:6B:12
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer:       /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number:          0165
Signing time:             Mon 19 Oct 2026 05:42:50 +0000
Manifest this update:     Mon 19 Oct 2026 05:42:50 +0000
Manifest next update:     Mon 26 Oct 2026 05:42:50 +0000
Files and hashes:         1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: 2BScY9Ir53sQa6vmvDeiDnxKhiJs9TnLc0N7iyS3fYg=)
                          2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: WmeiamuyqIiXqThgaQ7WjBlL81T70JeikrMmaNzPLPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
        Validity
            Not Before: Oct 19 05:42:50 2026 GMT
            Not After : Oct 26 05:42:50 2026 GMT
        Subject: CN=6ad5adda-5cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:fa:c9:ce:a1:ab:3e:84:71:14:f7:2c:59:
                    6f:2c:17:96:04:2b:a8:a0:0b:5b:c4:b2:b0:82:7c:
                    e8:03:07:2d:35:5b:e5:da:26:8b:7b:3f:39:43:9c:
                    3b:e5:1b:7d:76:ad:58:b7:9c:bc:bb:9e:5e:71:cd:
                    f4:98:bf:eb:53:04:72:03:3f:70:f3:43:fe:1f:31:
                    7a:33:13:26:ed:fd:00:ee:2d:5f:82:3f:61:b9:36:
                    63:47:12:23:ff:89:43:82:a7:0c:2a:c7:9b:23:a4:
                    d0:75:ff:46:87:89:43:78:96:c8:55:61:e7:eb:02:
                    d9:33:a3:f0:27:63:64:c9:57:98:23:89:b6:bb:a9:
                    8c:d4:dc:0f:59:b2:ee:95:31:b0:f3:46:30:3f:a8:
                    21:64:e5:bf:9e:86:e9:5d:20:5d:48:1f:3a:3a:20:
                    a8:68:46:3d:68:df:d9:48:c7:de:52:71:4a:8f:a5:
                    48:3b:58:a7:c5:00:b4:eb:a2:51:fc:b3:f4:8c:f2:
                    8f:38:a1:19:26:ec:5f:bf:f9:0a:78:4c:dd:3a:45:
                    57:d4:fe:9c:c7:6d:3f:ea:d3:d6:56:1b:59:97:0a:
                    63:4d:f3:98:1e:aa:20:92:a4:88:85:f7:90:11:0e:
                    24:05:8f:74:ea:15:d2:dc:21:a0:78:5d:c3:c4:b2:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:64:8D:78:C2:D9:56:E6:0D:DE:2C:EF:DA:D8:1B:59:52:36:6B:12
            X509v3 Authority Key Identifier:
                keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:86:ec:f3:79:d4:6c:0f:ff:57:76:05:b5:6c:ad:b3:0e:
         4e:39:98:c3:b6:eb:40:a5:43:50:d1:94:a6:d3:62:31:86:6f:
         60:2a:8f:08:87:56:6e:09:e5:d7:40:56:99:4e:3d:26:cc:31:
         d6:20:30:09:5b:c3:c2:32:ef:ef:99:58:96:b6:76:fe:ac:18:
         6e:67:86:c0:dc:57:c5:19:6e:4c:73:b2:e9:99:8d:7a:77:52:
         f7:81:54:cd:1b:8d:dc:80:58:33:04:ef:64:ba:0d:a7:df:d7:
         5e:a1:38:20:92:d1:93:61:e6:d9:ae:31:d0:96:4f:54:fe:f7:
         47:ce:01:1a:42:7e:ba:0b:27:2d:f8:c1:1a:fe:44:3d:23:f5:
         25:28:a3:4f:a8:5c:b1:e1:09:84:53:e6:d1:5f:56:9e:67:e1:
         de:34:3e:f3:d2:b1:bb:e9:d2:a9:84:9e:0c:07:1c:25:5d:7e:
         b2:a8:e2:52:5d:5b:db:25:7c:0f:24:a6:60:f3:6d:f7:d2:c5:
         fd:52:27:d8:ac:21:23:5d:dc:fb:38:0b:d3:7b:2c:1e:6c:fe:
         4d:b6:22:0f:1d:2b:a7:d4:5a:0a:3c:2f:32:de:9d:65:52:08:
         4f:5c:c0:19:d0:bd:8f:92:12:c8:c7:dc:e6:57:22:9d:20:41:
         b8:d5:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:43:19 2026 by rpki-client