Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
File:                     baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json)
Hash identifier:          192kUs4/7xORuu6XiepkmPt74qjJFjsU2ktVU9LN75U=
Subject key identifier:   7A:0F:AB:48:1B:B1:04:51:57:4F:D8:A5:DB:13:02:CE:4F:AF:F9:C3
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Certificate issuer:       /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial:       0B92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
Manifest number:          0B77
Signing time:             Fri 30 Oct 2026 19:13:03 +0000
Manifest this update:     Fri 30 Oct 2026 19:13:02 +0000
Manifest next update:     Fri 06 Nov 2026 19:13:02 +0000
Files and hashes:         1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: x7AIvqKOPJ+ZGAyPwP209BeApV/hJKEYTUEVvIoEiyY=)
                          2: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=)
                          3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=)
                          4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
                          rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 19:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962 (0xb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
        Validity
            Not Before: Oct 30 19:13:02 2026 GMT
            Not After : Nov  6 19:13:02 2026 GMT
        Subject: CN=6ae4ec3f-4cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:53:70:f8:c1:26:4b:3c:25:f3:86:2a:dc:
                    bb:79:2c:ff:0c:3f:8b:8b:b1:14:fc:c5:3a:a3:84:
                    43:5e:74:40:c4:be:02:ad:70:e1:b1:1d:ff:12:c1:
                    f2:2f:b4:09:d2:a1:cf:be:60:e0:5c:a3:5d:05:b9:
                    13:0f:8e:07:7d:71:ae:d3:90:eb:c8:fc:c2:43:3e:
                    83:9a:fa:4c:5f:7e:a2:01:20:2c:7a:af:fa:8c:00:
                    16:b8:08:59:52:f7:6b:23:b8:59:6a:ef:b9:a8:9e:
                    55:fd:74:2c:85:32:d9:4e:04:2f:4d:61:a9:ad:c8:
                    25:d7:56:71:7f:de:76:c6:5e:61:07:b7:2d:5a:aa:
                    e0:7f:f8:e8:8d:23:10:83:4f:9f:4c:0b:f1:34:aa:
                    d5:8f:d6:d3:40:88:fe:ad:65:e3:6b:f8:24:5a:4d:
                    2f:df:50:a6:af:d0:51:4e:f1:80:eb:e1:e6:51:ab:
                    26:04:68:d7:00:fb:3a:27:2b:07:f2:87:3c:cc:06:
                    84:6c:e3:55:16:3b:93:7a:1d:90:e4:6a:09:b1:82:
                    95:8b:77:2f:67:54:8c:c8:f5:55:1f:76:10:d0:41:
                    e9:7e:20:ee:b2:5d:8b:7a:42:54:c0:46:2a:b4:59:
                    d7:5b:d3:7a:3f:87:18:91:01:14:e6:08:44:a5:cf:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0F:AB:48:1B:B1:04:51:57:4F:D8:A5:DB:13:02:CE:4F:AF:F9:C3
            X509v3 Authority Key Identifier:
                keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:62:a6:cd:ae:bb:9c:ce:cb:b8:0f:5f:a8:06:8c:38:a7:
         d6:49:b0:9c:39:03:e3:d7:96:27:3d:e2:82:ae:8a:1b:25:8b:
         65:d4:62:a5:da:ef:87:a5:e1:82:d9:a4:36:35:c6:5b:63:76:
         72:3f:b0:e3:73:2c:30:87:2d:43:4d:a1:67:1c:8f:45:ef:44:
         d1:82:c6:15:6a:2a:73:c9:32:73:59:00:7a:bd:b9:e0:99:2a:
         d8:61:46:45:8e:6c:09:1c:09:82:3c:71:cf:d5:57:03:1a:5e:
         36:59:ef:bf:cc:8b:13:16:7a:f5:fe:ea:6f:84:cd:00:64:dc:
         c6:c0:80:3b:22:a5:81:e1:a3:7d:bf:0a:51:f9:bd:26:c2:05:
         ba:51:6e:64:18:f4:0e:7d:f6:2a:a1:d4:d1:14:97:6d:c5:6c:
         4f:58:58:57:f1:74:97:1b:8f:9a:e2:31:c1:db:32:f7:81:65:
         84:0b:3a:1b:49:6a:c5:09:e2:ef:5b:2a:12:c7:bb:0f:39:33:
         d8:2d:20:aa:d5:10:dd:ad:2f:d1:e6:27:89:69:2b:9d:67:5e:
         35:5d:9e:d5:05:e4:e7:a0:d7:61:a9:dd:11:3f:f1:96:11:21:
         af:d1:7e:84:01:cb:f8:6d:be:b5:0a:bf:de:b7:6d:c1:67:0a:
         80:4c:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:54 2026 by rpki-client