Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          t3I3ePUuYzaXI8K3y+2cM9M/z86Q7nVM6bE9orIBN3U=
Subject key identifier:   1B:5F:49:5A:D9:A1:F8:70:4E:68:DC:1B:A3:41:96:73:99:02:B8:39
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       032C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          0313
Signing time:             Thu 29 Oct 2026 01:20:01 +0000
Manifest this update:     Thu 29 Oct 2026 01:20:00 +0000
Manifest next update:     Thu 05 Nov 2026 01:20:00 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: bmf+jHHRDeKlHlrNQ88Ad1UYAoAtGw3uX1ndRXeuUKs=)
                          2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: T1zUtDuXnNzTV9e1O/AqsSumi2xzc2eLNIWJ6ba1wj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 01:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Oct 29 01:20:00 2026 GMT
            Not After : Nov  5 01:20:00 2026 GMT
        Subject: CN=6ae29f41-00a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:3e:63:32:81:a5:2d:3a:1f:bc:cf:9c:0a:
                    60:d9:bf:10:a6:ef:1d:ca:b5:2b:1b:50:1f:37:ca:
                    1f:c7:94:a1:5c:42:b0:3a:64:9d:e0:b7:16:e7:56:
                    61:f9:83:ec:38:4c:e7:bd:ea:35:35:55:9b:6b:89:
                    8a:6c:98:1a:b7:02:8a:52:7b:9e:37:d0:de:4e:83:
                    05:da:26:54:7e:37:f7:07:ef:a9:8a:cf:81:b1:20:
                    35:89:95:7d:3f:24:d4:3a:9c:59:13:a3:43:ee:a4:
                    5b:3d:d8:bb:64:4f:e7:db:25:24:7f:88:de:b4:b8:
                    88:ea:b1:bf:36:8e:74:76:f3:fa:8a:6b:7d:47:e3:
                    50:d7:81:c3:70:39:71:e4:d4:85:47:41:98:82:bc:
                    7c:9e:b3:14:b8:1d:79:ac:cc:58:c2:0e:62:5d:b2:
                    89:62:65:10:cc:f4:66:e4:34:16:dc:dd:e6:26:08:
                    7c:7d:6a:f9:9d:34:84:57:ea:29:47:f2:2b:78:4c:
                    d6:19:cc:a0:ca:b9:7f:5c:90:44:dc:66:d2:e5:75:
                    ab:ec:ee:e3:22:00:52:8e:0e:8f:cf:40:2c:c2:3b:
                    1c:90:1b:d0:ff:cf:32:c7:c6:4b:4f:10:96:0d:4e:
                    7f:c1:ef:8e:94:56:ee:41:db:8b:c7:56:78:12:0f:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:49:5A:D9:A1:F8:70:4E:68:DC:1B:A3:41:96:73:99:02:B8:39
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:c7:06:c6:6b:57:43:e1:5f:30:0a:54:88:0d:73:ce:b3:
         37:be:5f:df:24:1d:69:0a:70:4d:3e:93:bb:f5:7f:58:62:d6:
         4a:e3:a8:7d:f2:f7:42:eb:d7:35:3b:cd:f3:c7:e5:50:28:e9:
         ea:79:12:5b:23:98:3d:99:e0:8a:20:4d:bd:bf:f5:30:5e:b5:
         49:18:53:73:2d:87:a3:11:a0:d7:fe:3e:12:77:22:d2:b5:e9:
         a7:75:6a:ff:a8:ac:cb:1b:3c:65:0e:52:0a:30:60:9e:be:11:
         d9:01:8b:39:e5:1d:6d:55:d1:75:64:7b:13:ee:0e:6c:c9:c5:
         4b:22:8d:6f:92:ed:74:f0:31:4a:71:ba:4c:0a:1c:51:98:71:
         73:a7:44:bc:b7:59:3d:16:38:da:20:f2:ed:03:c2:76:c9:90:
         16:50:a7:4c:af:7d:5a:14:0a:e3:1c:d5:c0:6b:ef:06:f2:5b:
         ab:13:87:fd:6e:ed:21:0e:7f:85:97:6d:0f:a8:68:9a:1b:e7:
         86:f1:c4:8a:44:77:0b:6b:d9:87:ac:f9:ba:b1:6d:12:1b:54:
         74:d3:68:9e:f8:d8:e3:7a:a8:ef:49:fe:fb:d3:38:d0:05:1c:
         e2:99:46:08:f8:1f:e4:4b:9a:02:42:86:7f:04:14:67:08:3a:
         d2:5e:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:14:45 2026 by rpki-client