Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          GnwyDbVWKzetMBSgDe438FDSUE3jwVvvjpHxvdLPI2g=
Subject key identifier:   E4:5E:31:C9:5E:66:9B:94:EB:13:6C:F9:15:24:C7:0D:9B:D8:6C:65
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0C40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0C32
Signing time:             Fri 02 Oct 2026 19:01:18 +0000
Manifest this update:     Fri 02 Oct 2026 19:01:17 +0000
Manifest next update:     Fri 09 Oct 2026 19:01:17 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: 5X9aELVjNPQ7WtjXcKtCjocGORaqx9207RuHLC+aWc0=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: dxEGaAO8JBy9GnUoBfPgPXQ8oe1hURdfryAzDRhp00Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Oct  2 19:01:17 2026 GMT
            Not After : Oct  9 19:01:17 2026 GMT
        Subject: CN=6abfff7e-573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:90:bd:4f:53:2a:ee:e8:a9:fb:ae:10:9d:
                    47:24:f9:7c:aa:c1:cd:9a:a8:9d:60:fb:28:71:8a:
                    bf:b8:b7:2f:12:7e:b5:3b:a7:9e:d9:17:40:2d:e9:
                    ad:fe:03:ff:d3:d1:fe:df:bf:39:70:de:81:4a:12:
                    50:d6:5d:a1:0f:51:ff:99:f2:73:14:93:ee:67:cb:
                    7b:5f:08:87:c0:d9:17:b4:90:f9:d0:fc:59:1d:ee:
                    c2:57:de:6b:9d:23:41:07:ab:b0:02:71:4f:c4:83:
                    d1:7f:b1:fb:de:c2:83:0a:6e:cd:44:cd:48:30:19:
                    ed:0e:2c:0b:4a:f0:87:58:5a:15:cc:8e:38:97:bd:
                    0a:80:6b:43:65:1e:cd:6f:47:a0:ec:42:90:37:eb:
                    56:ac:e0:6d:c9:03:9c:fb:45:12:4b:ef:bf:5d:c0:
                    db:0c:05:63:72:9e:c8:b1:ab:f8:d7:ae:12:f4:1d:
                    46:d9:07:bb:30:d6:2b:88:63:56:8c:38:a3:85:d9:
                    f0:ad:bc:37:68:de:b2:de:5b:b0:d4:31:af:9c:1d:
                    30:ed:fd:72:00:30:7d:49:a5:a7:6e:b9:50:8a:30:
                    c0:ce:0c:e8:e4:61:66:a3:90:e2:a6:82:22:79:93:
                    fe:d1:d0:a6:ba:a4:e0:3c:59:3c:72:d2:7b:f2:9a:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5E:31:C9:5E:66:9B:94:EB:13:6C:F9:15:24:C7:0D:9B:D8:6C:65
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:54:ac:fd:45:1c:67:71:03:27:df:58:3d:57:6a:54:d9:50:
         1a:1e:f2:2c:f5:69:37:b2:8b:a6:a7:62:2d:4f:78:a4:72:7d:
         55:44:2f:e4:82:ef:11:fb:02:b9:e3:bf:2c:e8:c3:ca:14:48:
         54:10:d9:1f:fb:55:70:bf:b9:64:95:8b:63:30:6a:e4:b7:11:
         97:3f:ea:5f:66:c1:9b:b1:a1:b6:1d:54:68:9b:fa:81:e0:76:
         7d:d2:46:f7:e5:14:6f:d6:0d:58:8d:ba:a1:46:b0:ac:79:18:
         d3:df:40:b3:65:1f:ef:93:4c:7d:31:92:87:32:48:31:49:c9:
         24:34:34:c1:0b:01:c4:ac:cd:2e:fa:fd:b0:14:43:12:72:27:
         f4:48:b6:90:f4:44:64:7f:cf:a7:7c:a8:4d:ad:b8:81:b3:54:
         2e:c0:9f:71:27:47:fc:c6:22:0f:93:f3:a2:a1:f2:bf:be:f0:
         0c:46:64:9d:cc:f5:d9:11:c5:ec:30:98:ae:b3:20:11:c3:3a:
         62:93:38:2b:b0:43:cb:6e:bf:14:97:a2:d4:1e:80:c1:f8:81:
         3b:1e:11:1a:42:0a:fb:81:38:3c:bb:2d:9e:f7:00:14:20:e8:
         c3:68:b7:2a:29:a6:a9:c4:f0:71:c2:87:7e:2a:55:6b:a1:8d:
         24:a4:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:47 2026 by rpki-client