Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
File:                     AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json)
Hash identifier:          21cglCdbTjavII5CocofBPK92UGaDyA0CvRyOXBEq1k=
Subject key identifier:   BC:CA:63:06:59:5E:27:45:32:B0:3D:8D:40:C9:57:0D:92:31:BF:2E
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Certificate issuer:       /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial:       0CB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
Manifest number:          0C8B
Signing time:             Wed 28 Oct 2026 18:47:42 +0000
Manifest this update:     Wed 28 Oct 2026 18:47:42 +0000
Manifest next update:     Wed 04 Nov 2026 18:47:42 +0000
Files and hashes:         1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: ojZGIaJXcKoeKBDUeVld9NJ6NUQQAQ7kpGDSveUPMe8=)
                          2: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=)
                          3: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 18:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
        Validity
            Not Before: Oct 28 18:47:42 2026 GMT
            Not After : Nov  4 18:47:42 2026 GMT
        Subject: CN=6ae2434e-1627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:06:07:42:32:c7:3e:99:54:f7:90:e7:bf:
                    ae:d9:24:ae:09:fa:63:e6:a1:50:e5:40:11:36:18:
                    73:b2:e9:ea:c1:c6:6a:a3:0d:df:c8:35:bb:ce:32:
                    8e:c3:5d:a5:84:33:e4:50:9b:40:f3:51:9e:52:86:
                    c4:72:48:c6:86:25:7a:ad:e2:64:23:4d:76:0c:1a:
                    8d:b9:93:f3:e9:99:ee:6c:b4:12:a9:27:a5:bd:7b:
                    55:35:6d:bf:e0:ab:0b:61:d5:74:a9:ec:22:8d:54:
                    ce:07:e8:af:99:7c:7f:c8:14:d7:cc:20:22:01:b9:
                    51:97:f5:40:f3:fe:90:45:31:a1:d4:43:a9:13:da:
                    6b:1c:ac:df:02:78:43:41:8b:eb:31:f9:91:7f:2e:
                    53:82:2a:c7:09:bb:c6:e2:1f:46:ea:eb:6b:ab:37:
                    ce:bd:d6:5c:9f:e4:19:03:9f:ef:f5:f0:ea:2d:59:
                    c1:22:d2:99:4e:57:e7:74:62:7b:7e:ea:89:d8:b2:
                    b5:5a:3e:b4:72:8b:fc:39:17:ba:70:2a:ea:e0:a0:
                    8f:b0:2d:21:3d:d6:fa:4e:5f:46:0b:6c:b2:e7:e2:
                    7e:24:ba:e8:eb:22:fe:9a:24:8f:74:b5:4f:b7:0f:
                    1c:a6:0b:33:b5:09:af:39:91:11:a0:ba:dd:25:b5:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CA:63:06:59:5E:27:45:32:B0:3D:8D:40:C9:57:0D:92:31:BF:2E
            X509v3 Authority Key Identifier:
                keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:8d:4f:29:86:1e:f4:8b:c9:ee:5f:d5:8a:3a:dc:d1:b3:
         65:e7:77:25:fb:41:74:d2:28:0e:c7:af:43:eb:ed:da:56:92:
         87:8f:8d:53:38:a2:2b:7a:a8:47:bf:3c:14:1c:da:0f:c4:65:
         42:29:78:6b:14:5b:97:b3:92:b5:80:3d:e4:2f:20:00:9c:d9:
         32:66:1c:3e:c7:31:2d:53:80:95:c4:27:56:c9:85:d3:31:5c:
         94:9a:be:a1:db:17:f2:4f:0a:6e:10:21:9e:0c:25:31:8d:a2:
         57:9d:87:c6:06:a8:fc:e9:5b:5e:40:81:1a:99:21:29:b5:35:
         78:bb:de:c8:ee:c7:7b:ee:e7:fa:6e:2c:d0:1d:be:df:2d:93:
         ee:28:2d:f0:10:79:b6:e2:31:44:9a:6a:2b:20:0b:c3:0b:71:
         53:33:ed:fd:97:1d:df:37:13:e2:28:9f:a9:a3:bb:0f:fe:51:
         1c:b2:03:b7:48:14:09:46:5c:4e:ec:9a:38:cf:e3:c3:78:af:
         ba:20:55:7e:cd:b9:7c:ce:ea:88:e7:9b:16:b7:47:67:c4:fb:
         46:29:48:72:47:20:33:f8:82:a1:2b:95:86:66:db:c7:d8:59:
         b6:f0:fe:a3:cc:13:7e:ac:ea:cd:42:ee:53:ae:ee:af:15:a2:
         77:3c:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:07:37 2026 by rpki-client