Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File:                     Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier:          voMCOk+vFsWk0lxxuq0dL3qa0dRmW5JIIHRTQvKDH7k=
Subject key identifier:   02:4E:D4:EC:E3:6B:1F:22:F8:1B:39:BC:22:04:A0:B5:28:37:18:22
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer:       /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number:          0389
Signing time:             Wed 07 Oct 2026 00:52:19 +0000
Manifest this update:     Wed 07 Oct 2026 00:52:19 +0000
Manifest next update:     Wed 14 Oct 2026 00:52:19 +0000
Files and hashes:         1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: RInXoBHbttHKc8XZDWp5W7+EqzZbWvjgDklqJGClQ1A=)
                          2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: z9m+uvmmZmgBXsz1OFhoOX9NKLKtBpx/ZqKVtid9t1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
                          rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
        Validity
            Not Before: Oct  7 00:52:19 2026 GMT
            Not After : Oct 14 00:52:19 2026 GMT
        Subject: CN=6ac597c3-aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:51:81:ef:df:a3:44:d7:5b:a9:c9:8f:16:
                    06:1b:84:91:84:42:3b:18:13:0e:f2:e8:68:40:22:
                    ec:15:3c:46:21:4f:ab:09:89:5e:ff:02:7a:43:81:
                    22:ce:d1:14:44:7d:9b:d9:be:5c:e2:af:10:dd:c5:
                    93:47:57:93:24:a9:6c:1b:4c:7b:d8:2f:52:ac:2e:
                    60:e2:fa:b8:06:8a:d1:f0:ad:39:89:e4:35:d8:17:
                    fc:10:c9:a0:33:f5:be:0f:51:f0:58:77:f9:f1:ac:
                    ef:9c:e1:27:9d:55:aa:69:df:44:0c:9a:74:fa:5f:
                    40:11:a6:37:50:48:be:b0:95:5b:2d:5d:eb:59:15:
                    4d:df:38:d9:99:db:70:32:14:97:a2:0c:44:15:0c:
                    0b:6e:1c:6e:22:4b:c0:bd:4b:11:82:ae:3e:98:79:
                    63:f2:df:cb:fe:aa:cc:cd:67:d1:cd:2b:de:bf:77:
                    ec:b4:c0:4d:d3:d4:10:da:bf:5b:23:af:73:2f:fa:
                    87:e8:67:d4:70:c4:6c:fd:98:6f:99:88:b5:28:ea:
                    a1:0a:35:4c:e1:cc:29:0c:d0:88:11:84:8d:e3:f9:
                    c5:a7:e7:4b:c5:1b:1c:6e:38:3b:01:16:f0:49:2d:
                    16:70:1c:1f:86:eb:4c:35:3f:59:7f:38:15:97:4e:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:D4:EC:E3:6B:1F:22:F8:1B:39:BC:22:04:A0:B5:28:37:18:22
            X509v3 Authority Key Identifier:
                keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:ae:17:72:eb:4a:f4:34:1b:be:f6:4c:84:04:03:10:9d:
         47:e8:7e:15:0a:c5:6c:86:e5:52:7a:9e:1a:5e:41:9f:03:e9:
         19:f7:ec:b9:e9:9a:ad:07:bc:60:47:3c:e6:b3:d0:f8:13:f7:
         a4:2e:71:d9:d1:9c:75:df:58:c2:f7:e2:d8:55:29:8b:1d:87:
         37:bb:99:0c:0b:28:91:a9:c3:33:17:81:08:fa:22:ca:e2:a6:
         c9:b1:68:8b:fe:41:11:de:d5:78:39:9e:15:cd:6a:b6:6e:1d:
         c1:cb:b5:cd:c0:9b:f5:9a:82:9b:1c:2d:12:71:1e:2e:94:86:
         1b:70:f7:59:6e:35:fe:92:dd:83:79:44:b7:ba:68:62:a0:98:
         64:80:46:e8:f8:9e:34:95:09:87:d6:a8:43:fc:28:3e:e3:08:
         32:39:fa:3d:53:52:eb:dd:6a:c5:a8:e0:ea:21:e7:80:8d:e0:
         33:e7:59:20:0c:d6:84:2e:b3:a7:1d:03:94:f7:63:55:35:3b:
         0b:18:a4:81:70:94:ba:f4:09:2b:90:7b:c8:32:d9:b2:69:88:
         e5:58:39:0b:6c:e8:96:e6:2d:54:47:41:67:41:a8:e4:42:40:
         22:2c:01:8d:fd:12:f8:96:af:66:08:99:c9:22:2b:7a:39:09:
         b6:e2:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:19:53 2026 by rpki-client