Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
File:                     P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json)
Hash identifier:          qfXdTAVozfQsVTUzG39ws9yTjyfQCQHZgk8Ft+h3v9I=
Subject key identifier:   8A:1D:63:7C:85:EF:85:D5:26:8A:0E:5A:DA:E7:35:20:95:83:FB:39
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Certificate issuer:       /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial:       0D50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
Manifest number:          0D44
Signing time:             Tue 06 Oct 2026 18:17:23 +0000
Manifest this update:     Tue 06 Oct 2026 18:17:23 +0000
Manifest next update:     Tue 13 Oct 2026 18:17:23 +0000
Files and hashes:         1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: saRFwfNJYHj+DhY+7uFmK+wpuURAfm1qxhZkbhwb1iw=)
                          2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 0Bzx3cTQetOlK87DOybR5kJ5yU0elH44slx+HVrYHM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3408 (0xd50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
        Validity
            Not Before: Oct  6 18:17:23 2026 GMT
            Not After : Oct 13 18:17:23 2026 GMT
        Subject: CN=6ac53b33-c87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:61:14:cf:9a:de:69:af:49:9c:82:b4:ac:
                    ef:d3:05:b7:9f:a2:51:4d:fd:58:34:f9:e6:38:8d:
                    06:db:fc:c0:e8:4c:c5:56:a7:af:cb:10:6f:18:ed:
                    98:ec:dc:d0:51:dc:bb:a8:0b:19:73:77:df:4c:64:
                    6a:a8:ad:14:ec:41:f9:48:a6:04:c0:0d:7c:12:b8:
                    4b:cd:30:0c:d8:17:fc:7e:e7:2f:36:a5:1e:5c:7f:
                    63:a3:cc:a5:9e:ea:c5:3d:f0:ae:5d:d5:aa:78:f1:
                    72:36:aa:21:cc:4e:bf:5a:67:83:cd:8e:3e:aa:ab:
                    55:00:c3:48:c1:83:dd:b4:0a:5d:0e:5d:eb:49:15:
                    51:c8:f3:9f:59:4d:58:c6:7e:14:4f:e8:b7:52:6c:
                    77:64:db:e2:f8:dc:56:8a:0e:7d:b6:fa:d2:a5:b3:
                    9d:f6:6f:2e:a4:c6:ee:1d:b2:54:98:3e:10:e7:bd:
                    55:38:6d:f4:33:7c:ad:04:05:38:2b:e0:72:f0:c9:
                    84:21:21:34:3c:14:6b:de:f7:6c:c0:e5:f2:1b:b0:
                    4a:c5:a1:ac:fa:32:df:7e:75:0d:b6:e7:58:5b:8c:
                    26:3e:e0:5a:b7:ec:52:af:c4:65:96:00:2c:74:fd:
                    a6:dc:4f:4e:7a:b8:89:14:dc:e0:aa:12:31:92:b3:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1D:63:7C:85:EF:85:D5:26:8A:0E:5A:DA:E7:35:20:95:83:FB:39
            X509v3 Authority Key Identifier:
                keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:6d:bf:39:1d:c4:cb:b8:f3:99:37:4a:d5:bc:4c:93:10:
         81:54:8d:c5:44:d1:aa:22:09:1a:8a:e9:dc:27:21:9c:39:c7:
         d0:aa:72:54:2e:05:db:e5:ef:7f:ff:73:95:70:1a:5c:dd:37:
         47:b4:1c:ee:18:fd:93:54:54:8c:f9:41:e2:e4:8a:30:4c:17:
         23:91:a0:59:f9:c4:ec:bf:92:b9:c7:c8:f0:24:91:1b:ce:50:
         4e:7b:1f:c3:f6:6a:36:22:18:10:ab:1b:f6:f6:62:d2:df:ac:
         d0:09:c7:3c:c4:14:61:4e:d3:f3:0b:e4:56:f8:03:dd:b9:7e:
         97:7e:c7:ce:66:7d:26:85:c0:3c:ec:a0:f2:a3:30:98:5c:2d:
         f1:b0:1a:22:f0:23:f9:15:c2:6b:90:bd:e6:f3:b1:e7:c1:a9:
         bc:fc:76:53:79:83:80:00:94:2c:90:35:6c:0f:32:fb:62:58:
         27:57:a8:1c:9b:ae:79:1f:fd:52:c8:fb:5d:88:d8:72:68:61:
         06:f9:d3:de:6a:1f:ef:88:66:0e:74:f3:5f:da:6f:52:21:56:
         8c:08:e1:51:11:b0:88:b9:e1:2b:1b:8d:c0:42:b5:40:d1:c8:
         86:21:37:98:71:bb:2b:85:5b:b3:d5:2e:f3:0f:18:90:10:b9:
         b8:7e:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:30:05 2026 by rpki-client