Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          Ap2dW6Z17jL6h/1gA1JE00lh0LaSUAkVxJzxJSna+tI=
Subject key identifier:   43:7C:6A:31:74:37:23:CC:D2:71:A0:B9:8C:1C:C4:41:49:A8:99:4E
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       043E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          042F
Signing time:             Sat 31 Oct 2026 00:19:26 +0000
Manifest this update:     Sat 31 Oct 2026 00:19:25 +0000
Manifest next update:     Sat 07 Nov 2026 00:19:25 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: ZtdCIWB/4L4pk5U2ADHNrLE/dhtWJgwz94HzRiM78rM=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: bD03UDBRQ1taaixgQUTMVbh3gQ61ze+8RuiRrQb961Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 00:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
        Validity
            Not Before: Oct 31 00:19:25 2026 GMT
            Not After : Nov  7 00:19:25 2026 GMT
        Subject: CN=6ae5340e-6d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:9d:ab:f0:03:1c:a4:ad:26:a0:08:28:f7:
                    54:51:ae:c9:c7:e4:59:78:2d:50:d4:11:3f:82:30:
                    35:9d:54:ea:d2:18:c0:91:fa:56:91:a7:5f:7c:34:
                    7f:ec:d8:51:7e:0a:70:f2:e1:1b:c3:57:cd:c0:6e:
                    53:3c:86:55:64:e9:24:fa:81:95:20:fe:ee:9d:62:
                    df:d1:69:2e:af:75:fd:ef:55:9c:de:ef:c9:18:66:
                    b4:79:5d:bd:bd:57:87:94:35:c5:70:72:4d:c7:95:
                    01:5e:0b:d7:8d:bb:ab:5e:bd:d1:fd:7f:af:c9:e6:
                    7d:f8:6d:8c:35:d2:52:a9:cf:70:08:f1:1d:6c:ed:
                    7a:2e:68:0e:79:c9:ad:a4:7e:25:3a:bb:70:e4:66:
                    03:7f:ed:3d:e0:8e:b2:60:d3:8e:0a:ee:61:97:da:
                    12:fd:d2:2d:40:88:35:7a:a9:58:45:fe:49:87:e8:
                    be:8a:fd:73:2f:23:79:64:48:e2:12:62:8e:6b:bb:
                    1f:19:f9:76:f1:c0:01:66:aa:18:f5:71:77:70:f3:
                    08:8e:68:9c:87:1e:80:7b:c2:2f:85:13:7d:11:f7:
                    c6:69:06:c1:6d:42:ef:fa:64:1d:46:8c:ae:89:90:
                    ea:a4:df:80:e4:11:55:49:3f:48:0a:d4:a5:9f:6c:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7C:6A:31:74:37:23:CC:D2:71:A0:B9:8C:1C:C4:41:49:A8:99:4E
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:4f:12:82:c7:ca:07:09:89:64:f4:e2:df:ca:7e:62:89:
         d0:88:6d:2d:32:38:6a:be:cc:0b:2d:b7:bd:42:0e:cf:aa:ff:
         7b:21:b9:56:b3:a9:8b:54:42:f1:12:cd:aa:c0:71:f5:ba:64:
         44:26:4a:b3:be:07:ae:a3:52:6a:1f:a3:99:c6:27:f4:a3:af:
         8e:86:05:19:48:30:ae:91:db:71:c3:49:46:81:4e:b5:2f:e6:
         da:e0:3e:7e:ae:c3:e4:61:13:32:47:d6:e5:db:21:dd:95:d3:
         99:50:02:a6:0b:df:b1:db:dc:e1:d5:76:25:a6:b6:18:d3:50:
         22:27:4d:70:3e:b9:a3:69:5f:16:cd:cb:1b:eb:48:f4:69:e8:
         c3:66:7a:89:97:2c:cd:1f:3b:52:a6:63:ef:12:ff:21:a1:21:
         ee:47:ca:1d:6a:53:1c:5f:28:31:9a:a8:fa:ee:93:91:fb:5d:
         46:e9:6f:3b:10:2b:0e:1e:5e:ff:0a:4c:ed:fb:a0:e8:02:19:
         a0:b0:56:e8:26:5f:12:88:02:57:77:66:ef:de:fe:2d:bb:e6:
         16:9a:bf:4f:d0:8b:51:b0:c1:e5:67:5c:7d:5e:e7:f5:53:12:
         97:b5:02:bc:1c:ea:e7:30:28:2f:60:21:de:0d:1c:5e:f6:be:
         4a:a6:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:40 2026 by rpki-client