Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          gw0TFVFn1yDy4++J4Kk3+BxRTZsHF/hdqyP3fVzGIDo=
Subject key identifier:   89:06:04:10:23:BF:B5:D6:32:9B:02:40:AF:B8:0C:D1:8D:A0:96:4E
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          0183
Signing time:             Fri 23 Oct 2026 05:09:35 +0000
Manifest this update:     Fri 23 Oct 2026 05:09:34 +0000
Manifest next update:     Fri 30 Oct 2026 05:09:34 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: GXGTVz4+0bCd/kKw+yNcHttZM+6gGvnaACFAY6jzYo0=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: ZevCcNNQ+Cl/hbcakseWpBDq3A4TOtczE3OSaShrKcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 05:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Oct 23 05:09:34 2026 GMT
            Not After : Oct 30 05:09:34 2026 GMT
        Subject: CN=6adaec0f-2ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:7f:95:ad:c0:97:b2:8d:fb:68:aa:07:7b:
                    1a:22:a2:0a:bb:57:c3:be:c6:f3:66:1c:62:3f:fd:
                    8d:da:b4:5e:08:3a:68:20:2c:d3:b3:aa:61:b8:f7:
                    00:ab:e2:16:2c:2b:fe:26:8b:b4:67:98:99:6a:b7:
                    dc:32:41:09:18:58:ce:60:1f:20:c7:84:1d:ab:bc:
                    2f:75:c0:f0:ee:2f:99:58:b0:69:79:22:c0:ab:c9:
                    08:b8:31:77:26:3f:c7:fb:c9:85:18:3b:88:eb:fc:
                    e6:7b:da:b2:43:cf:4e:b0:13:3d:b8:1d:f3:4a:dc:
                    86:ab:f3:c5:75:23:fe:69:4b:ea:8e:b8:57:b6:e1:
                    b7:28:f9:60:0d:76:e4:88:49:29:8b:74:20:52:9c:
                    fb:ae:68:e5:f8:79:84:9b:0d:97:ad:b9:3d:f5:8a:
                    0d:b6:34:70:b8:7f:c6:e4:06:6d:be:7d:fc:2c:72:
                    2f:c1:87:4b:d6:c4:ab:88:ec:39:11:e8:57:06:ef:
                    0c:8a:ff:c9:b2:5f:13:13:f6:56:91:81:78:52:b3:
                    fd:1e:55:0a:1a:c0:21:28:3f:c9:a8:f2:3b:f7:91:
                    a7:bd:ad:8a:3d:8a:0a:34:5e:34:2b:fc:46:95:ad:
                    2e:ae:52:29:6b:4f:0e:42:9d:43:63:94:5c:36:00:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:06:04:10:23:BF:B5:D6:32:9B:02:40:AF:B8:0C:D1:8D:A0:96:4E
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:dc:bb:96:f3:63:70:b7:28:e0:04:f9:ef:1d:a6:94:ec:
         99:4d:52:41:cd:ee:89:2b:af:cf:d3:20:49:e3:f0:3b:69:13:
         7e:bd:53:0f:20:45:0e:3e:97:db:f2:27:f5:e5:7c:9e:f6:fc:
         78:d0:65:d7:39:1a:41:01:d7:5b:ee:9a:13:79:f8:6e:ad:a2:
         03:c6:57:85:d1:83:47:db:a7:2b:73:4c:bc:79:a1:af:0f:db:
         d8:40:b7:0e:b3:3e:e0:f9:0e:68:a4:ee:79:4e:1e:cc:ca:94:
         4d:d3:0a:ef:ac:31:3b:22:77:33:69:df:1a:16:ac:2a:f0:a9:
         99:c0:36:5c:df:a1:40:74:7a:9d:aa:62:94:57:4f:a3:ac:8f:
         a5:f3:68:b2:ca:e0:34:4e:28:fb:c1:b5:bc:25:21:9a:72:58:
         1d:92:77:cf:91:99:2c:77:99:43:9b:0d:9c:ba:5f:3b:cc:b3:
         83:99:98:91:16:48:26:a2:d5:2c:87:b6:96:77:42:ed:64:2e:
         a2:11:a1:d0:a2:bb:82:50:17:be:1e:91:8a:d1:62:ee:8b:64:
         3c:40:bd:29:3e:b3:fd:e1:35:5a:5f:7b:f7:77:6c:36:e4:39:
         58:74:5b:e3:a9:cd:13:95:be:eb:51:a1:e3:43:02:f9:97:ef:
         15:62:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:20:26 2026 by rpki-client