Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File:                     ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier:          4SJQHQxQuFOUR1ZqA/qqHntFBb75BDGE2beHT9iXKCA=
Subject key identifier:   4E:CC:56:5E:43:FE:0D:56:A4:E7:6E:46:D1:5A:D5:76:26:BC:77:B8
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer:       /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial:       08E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number:          08C5
Signing time:             Fri 02 Oct 2026 20:53:11 +0000
Manifest this update:     Fri 02 Oct 2026 20:53:11 +0000
Manifest next update:     Fri 09 Oct 2026 20:53:11 +0000
Files and hashes:         1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: KIdk4Nm3FDBl1w6fHCG5eIxMJKeblmNxo0wQOismmgY=)
                          2: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (hash: 6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=)
                          3: E51AC37C169D11F18D04F8B992EE528E.roa (hash: mYlJdFIW8EjyX8ajfhqX1Cs+hajlapMlYM5UC79/gBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277 (0x8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
        Validity
            Not Before: Oct  2 20:53:11 2026 GMT
            Not After : Oct  9 20:53:11 2026 GMT
        Subject: CN=6ac019b7-d47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:82:f0:06:a5:6c:9c:20:d0:6f:67:ec:7d:
                    36:05:22:07:e5:c5:80:f2:39:e9:00:56:52:6c:43:
                    34:ca:3f:14:1e:49:94:20:5d:47:19:0e:46:f7:cd:
                    ac:21:16:08:99:13:3e:22:e4:ae:a5:d8:10:5c:86:
                    5b:de:2f:b9:09:b3:90:24:37:f5:ff:fc:83:4f:28:
                    ff:eb:48:75:fb:f2:14:8f:24:c8:59:e4:15:85:2b:
                    51:6b:8f:17:34:56:cd:65:81:6a:8b:fc:12:b9:33:
                    67:42:9f:74:44:f1:fa:04:3d:1e:77:81:e0:e3:a6:
                    66:09:20:91:db:a6:96:1c:1b:b1:25:fb:b4:4c:c5:
                    56:29:36:08:b9:b1:72:39:35:95:ed:57:65:d9:0e:
                    2c:5c:26:0f:27:db:de:af:17:a5:96:bd:dc:41:23:
                    c6:5d:14:70:a8:52:0b:7b:e3:31:fd:95:46:2b:aa:
                    2c:ad:45:cc:29:e7:59:63:9e:19:4a:4b:fc:2f:dc:
                    15:40:6e:19:ba:03:ec:45:97:34:24:71:d8:37:5a:
                    ff:70:e7:c8:63:20:d3:0d:52:a8:ef:ce:66:a1:4a:
                    48:59:82:df:a6:28:c1:5d:23:2f:34:5f:19:dc:09:
                    4a:f6:a1:14:39:5a:65:2b:8e:eb:20:97:0b:a9:d1:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CC:56:5E:43:FE:0D:56:A4:E7:6E:46:D1:5A:D5:76:26:BC:77:B8
            X509v3 Authority Key Identifier:
                keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:eb:ec:86:d6:4e:e2:36:51:dc:8d:a8:bc:a3:15:38:9c:
         39:dc:37:59:08:c3:32:93:6e:9f:a7:f3:1c:cf:94:e0:87:90:
         7f:7b:41:35:28:58:ed:e3:5a:e8:f5:13:a3:3c:ed:db:7d:7e:
         df:db:95:9d:ca:6e:80:d3:0d:14:25:08:18:c8:00:f0:e7:a3:
         fd:20:8c:99:7c:0d:23:e5:68:a7:32:21:ab:ca:80:78:23:d4:
         81:ab:ea:00:76:47:2b:e4:b9:b0:fa:81:0b:18:2c:3c:5b:d3:
         b3:89:10:e7:aa:e1:34:22:41:5e:c3:1b:7a:b0:68:c2:90:54:
         14:bf:0b:6a:2f:b1:ce:83:88:6b:d6:46:e0:6b:30:40:0e:f1:
         ea:ea:86:23:e6:3c:c8:8f:b4:26:6d:56:7a:5b:bf:38:96:a7:
         ee:89:eb:9e:9e:1a:a6:68:25:87:37:f5:28:a2:91:7e:0a:40:
         6e:d2:76:5b:df:ec:b5:36:c4:0d:f9:36:18:15:82:54:1a:bd:
         af:7e:5c:f4:85:0e:1d:a3:02:61:88:b0:ae:52:02:4c:6a:ef:
         3c:6b:61:b8:fe:f5:8f:0f:34:51:9c:5d:94:e9:8b:18:5c:56:
         d9:75:02:68:89:a5:3e:41:c3:ac:e7:57:04:f3:b5:c5:8f:1b:
         c3:22:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:14 2026 by rpki-client