Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
File:                     SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json)
Hash identifier:          MFFiu24XBpBGYbKyVrfxcV/n4KyYP26aqNUNL2loh4k=
Subject key identifier:   D1:E5:F8:12:5D:28:32:E9:D0:2A:4B:86:1E:DF:52:20:76:9D:4D:75
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
Manifest number:          05CF
Signing time:             Mon 26 Oct 2026 23:02:31 +0000
Manifest this update:     Mon 26 Oct 2026 23:02:31 +0000
Manifest next update:     Mon 02 Nov 2026 23:02:31 +0000
Files and hashes:         1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: N7a5spbThOwwNtweSArlJiF1OdvoRKdJUo4vYc157zw=)
                          2: E6EAAE16B2AA11F19707923F4511F970.roa (hash: FHp8dNV8pl0sKRHj67dCuGl/uWdSSBrx/0Q3JFg9L7M=)
                          3: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: RClecKG5kjOxOe4lhvUyvu90mrTmfQN5JEcW/BBLi2s=)
                          4: 9F890910DA3C11F088DF33818DD3641D.roa (hash: WSO54GXOMLNY9+Q+eJeEwRTVNPFNhORZLJRc9VrAOIk=)
                          5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: +TxFvB+FhR7Ozdlw+djv4eD43K7uTA0JjO2neLRuzKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 23:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Oct 26 23:02:31 2026 GMT
            Not After : Nov  2 23:02:31 2026 GMT
        Subject: CN=6adfdc07-c4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:da:30:09:1b:15:95:5f:29:6a:f9:06:62:
                    a5:2b:57:1a:b8:19:ef:b5:86:e7:31:8e:f7:df:51:
                    83:28:ca:3a:31:09:ef:81:a2:1a:19:b5:79:d4:b8:
                    14:61:ea:93:25:bd:99:20:06:ef:79:20:8e:68:b0:
                    3e:bf:0a:ab:39:6f:57:2d:4f:04:10:0c:48:1a:b8:
                    70:04:42:87:ba:83:28:f4:05:39:e2:08:ac:b8:b6:
                    f3:3a:28:b2:43:80:42:ef:0c:df:98:00:8d:67:c7:
                    76:30:85:10:5d:4c:ef:a2:61:f6:a3:44:64:e0:a9:
                    35:d2:80:47:02:a8:22:41:ec:f6:d5:44:38:af:06:
                    40:73:33:7b:eb:77:1d:09:6c:2b:1a:f5:fc:76:46:
                    0d:f4:57:1a:3e:90:91:54:aa:32:15:5b:fe:d5:77:
                    b7:36:dc:6d:5b:b6:88:5f:fc:67:f5:c2:38:55:3e:
                    8f:56:99:c2:a0:8b:13:ff:06:43:99:7e:e4:c0:d0:
                    1d:3a:c6:6c:38:e6:57:d1:fc:ae:9e:c8:a5:8c:90:
                    43:42:03:42:6f:6d:06:34:a4:d3:73:91:2c:67:50:
                    8a:ce:ec:9a:e8:94:fc:ee:05:a3:1b:c9:e0:6e:be:
                    da:c3:b4:e3:3a:31:b3:63:cc:25:b0:41:3d:8e:0b:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E5:F8:12:5D:28:32:E9:D0:2A:4B:86:1E:DF:52:20:76:9D:4D:75
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:e7:f5:bb:ea:8e:57:ae:a5:e6:60:63:b0:ce:1d:c2:a8:
         78:08:71:a6:19:15:92:51:25:34:8a:63:ec:d8:ce:8f:21:70:
         d9:32:5e:cb:e9:33:08:b7:be:86:0b:1c:d6:31:e1:07:7a:c3:
         f0:1c:0d:2c:e1:c0:2e:f1:30:0a:49:5b:42:3b:9a:20:e3:8f:
         8e:8a:98:42:89:f7:5f:0a:91:ae:71:4a:7b:7b:4f:06:19:fa:
         d5:36:3a:2a:5f:dc:57:4a:85:0e:30:d1:1c:0b:c4:73:57:40:
         d2:80:e6:4e:12:c5:70:db:15:40:42:8b:6e:33:c1:9b:57:4a:
         44:00:02:ff:88:a0:6e:6e:58:ab:4f:ef:30:44:76:9b:e7:ca:
         fd:5d:e1:bc:d9:be:77:b8:ab:3a:eb:04:26:ca:ff:47:b2:4e:
         2c:77:59:d4:be:ed:38:3c:1c:5e:25:7d:ad:d7:8b:0a:90:b8:
         57:38:9b:d7:fd:f9:5f:48:d0:e5:a0:73:06:69:10:2c:c0:c3:
         c2:0b:71:82:9e:1b:c6:8d:e2:34:04:86:a2:3c:c5:53:40:8d:
         d6:7f:f0:0e:25:9b:79:51:4a:05:f6:a9:c1:14:c2:d6:2e:d6:
         a4:da:68:e5:da:7c:8d:b8:a2:1a:56:fd:75:2d:ed:72:0e:92:
         58:2d:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:07:30 2026 by rpki-client